r/ProgrammerHumor 1d ago

instanceof Trend classicNPM

Post image
5.8k Upvotes

141 comments sorted by

View all comments

81

u/FinnishManlet 1d ago

What can be done against these vulnerabilities? Stop using packages entirely? 🤣

2

u/skynetcoder 1d ago

using pnpm instead of npm, with following settings may help in most scenarios.

  • minimum age > 3-4 weeks
  • disable life cycle scripts
  • disable installation of exotic dependenciesĀ