I see. I was intending to use a container to sandbox npm/yarn, it sounds like that is pointless.
npm scares me - if there is a way to sandbox it on a mac, I'd like to know.
npm scares me - if there is a way to sandbox it on a mac, I'd like to know.
I haven't tried to use it in anger, but I believe this is the likely starting point https://developer.apple.com/documentation/xcode/configuring-...
In general, I'd like to be able to sandbox more things. I'm using the app store version of slack because slack doesn't really need access to all of my files.
Best case you go through the settings of Docker, Podman or whatever you use to limit integrations. Then, from within the VM and container see what networks, files, etc. you can reach to be sure.