• jaybone@lemmy.zip
          link
          fedilink
          English
          arrow-up
          0
          ·
          9 hours ago

          Oh right, I can avoid the full isTrue library implementation with its 8000 dependencies, and instead install the isTrue client, which uses the isTrue cloud service and its REST APIs. Soon it will be AI powered. Then I’ll really be able to tell for sure if my variable value is actually true or not.

  • dbx12@programming.dev
    link
    fedilink
    arrow-up
    0
    ·
    14 hours ago

    I only do npm install in a docker container where the project and npm cache is mounted. Gives me a bit of security regarding attacks through post install scripts. (--no-scripts is not an option since I need some of them)