I'm interested why this is not the default behaviour. Would it break anything legit if npm would just simply switch to this behaviour? Are there any strong arguments against this?
I'm interested in use-cases where access to anything outside the current folder (the folder npm is called in) is justified and depended on.
I'm interested in use-cases where access to anything outside the current folder (the folder npm is called in) is justified and depended on.