hard20 pts · first answer countsweb-performancenpm
Risky install scripts
A new dependency runs a postinstall script that downloads a binary. Why do security-minded teams care?
Discussion 0
Join free to post in the discussion.
Related questions
- Installing a test-only packageFrontend Developer
- Native lazy loading for imagesFrontend Developer
- What defer does on a scriptFrontend Developer
- Good LCP targetFrontend Developer
- Good CLS scoreFrontend Developer
- Good INP targetFrontend Developer
- What TTFB measuresFrontend Developer
- FCP versus LCPFrontend Developer