NPM introduces allowScripts opt-in install-script policy | Hacker News Reader