Building my npx business card
ashley.dev
Building my npx business card
1–10 of 12 posts
Re: Building my npx business card
#2Ooh, free real estate, let's colonize and gentrify package management
Re: Building my npx business card
#3Do these npx business cards run arbitrary code on your computer?
Re: Building my npx business card
#4Ooh, free real estate, let's colonize and gentrify package management
Lmao, gentrify cracked me up
Re: Building my npx business card
#5Do these npx business cards run arbitrary code on your computer?
npx
Run a command from a local or remote npm package
Description
This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.
Re: Building my npx business card
#6Do these npx business cards run arbitrary code on your computer?
Yeah, this seems like a very smart but inherently flawed idea.
Re: Building my npx business card
#7Do these npx business cards run arbitrary code on your computer?
Yeah, this seems like a very smart but inherently flawed idea.
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Re: Building my npx business card
#8Re: Building my npx business card
#9Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.
Re: Building my npx business card
#10Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like
$ curl ashley.dev
Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:
$ finger @ashley.dev