HNHacker News
TopNewBestAskShowJobs

Hexshin0bi

2 karma · joined September 18, 2025

submissionscomments
Hexshin0bi··on Oh no, not again a meditation on NPM supply chain attacks
"...but also disables post-install scripts by default."

in pnpm docs it says:

""" enablePrePostScripts Default: true Type: Boolean When true, pnpm will run any pre/post scripts automatically. So running pnpm foo will be like running pnpm prefoo && pnpm foo && pnpm postfoo. """

am i missing something here?