| ▲ | gkiely 9 hours ago | |
Yeah, this is just for anyone using node on their local machine. Enabling `ignore-scripts=true` protects you from almost all of the recent compromises `min-release-age=3` protects you from the rest. But you still typically need trusted dependency builds, which this script solves. I hope that npm enables this by default in the future. | ||