Viewing profile — bretc

https://bret.io Started as Jekyll, but then converted to just markdown in GitHub. My CMS is just Github basically, you can basically read and navigate the files in Github with very…

Install scripts can be disabled with a config file, or npm flag, but your paranoia is not unwarranted.

Deno does not have install scripts, or a lot of other npm+node features. You can turn these off in npm though if you want a hardened install step.

Check out http://socket.dev/npm/issue/installScripts Majority are benign, but when a package without one adds one, you probably want to see why :)

npm and GitHub have always had an awkward overlap. One of the goals at Socket is to provide an aligned 'union' view into the data both services offer. Keen eye!

There is a smattering a tools across the eco system that provide this kind of info (packagephobia, avanka etc) and it would be fantastic to surface these in a unified product UI. Y…

We are assessing this possibility.

Same reason most of the malware ecosystem focused on windows instead of macOS for many years. Scale of your potential target, and also volume of noise that is made when something b…

I'm actually working on that page right now hah. Right now the integration is fairly slim, it just does typo squat warnings when you install a package that has a similar name to a …

1. We are in beta right now! We have the data and analysis, and are working hard to make it easy to integrate project specific views into it. 2. https://socket.dev/roadmap See http…

It sounds like it primarily affecting US servers. Avoid those and don't use the chat.freenode.net servers.

I'm pretty sure that happens when a nick collision happens.