Run npm/pnpm/bun/uv inside a sandbox.

There is no reason to let random packages have full access to your machine

Sandboxing by to default world be really nice. One of the things I really appreciate about Claude Code is its permissions model