Comment Comment by gslepak Tips to protect yourself from supply-chain attacks in the JavaScript ecosystem:- Don't update dependencies unless necessary- Don't use `npm` to install NPM packages, use Deno with appropriate sandboxing flags- Sign up for https://socket.dev and/or https://www.aikido.dev- Work inside a VM parent gslepak 1 year ago
- Don't update dependencies unless necessary
- Don't use `npm` to install NPM packages, use Deno with appropriate sandboxing flags
- Sign up for https://socket.dev and/or https://www.aikido.dev
- Work inside a VM