So, I baked pkg-gate with @typesafeai!
npm lifecycle scripts can run arbitrary code on install.
pkg-gate: a ~100ms pre-install gate using Jev
4 typed primitives:
- Choice: intent
- Score: severity
- Nouls: exfil & curl-to-bash
$ npx pkg-gate <pkg>
#node #npm #security