3 comments

[ 2.5 ms ] story [ 27.2 ms ] thread
Wrong way to deal with package repository bloat.
this bug is definitely not great! but do people really run npm as root in production? and also update to latest npm in prod right away?
(comment deleted)