gkiely
Joined 11 years ago
Joined 11 years ago
Personally, I use volta and switch between node versions in different projects, so I prefer to just use npm.
Enabling `ignore-scripts=true` protects you from almost all of the recent compromises `min-release-age=3` protects you from the rest. But you still typically need trusted dependency builds, which this script solves.
I hope that npm enables this by default in the future.
Pinned package versions in npm solves this.
If you want to use the latest dependencies then yes there is ongoing management required. There are tools to help with this.
Let me know your use case as I am still learning where it can provide the most value and how I should go about charging for it.
I welcome feedback on pricing/self-hosted.
1. I would replace the chairlift sequence in place of a shortened animation or just make it teleport.
2. Keyboard shortcuts.
3. Where's the monster? ;)
import * as v from 'valibot';
const OptionalKeySchema = v.object({ key: v.optional(v.string()) });
type t1 = v.InferInput<typeof OptionalKeySchema>; // { key?: string }
const UndefinedKeySchema = v.object({ key: v.undefinedable(v.string()) });
type t2 = v.InferInput<typeof UndefinedKeySchema>; // { key: undefined }