only-allow
only-allow copied to clipboard
pnpm
Force a specific package manager to be used on a project
When I set 'npx only allow pnpm' and use Yarn to install dependencies, it is not allowed, which is normal; But when I use NPM, it can still install dependencies...
There was a trailing quote at the end of the message: ``` ╔══════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ Use "bun install" for installation in this project. ║ ║ ║ ║ If you...
raw code: ```js if (wantedPM !== 'npm' && wantedPM !== 'cnpm' && wantedPM !== 'pnpm' && wantedPM !== 'yarn' && wantedPM !== 'bun') { // ... } ``` for perhaps,...
The reason why is that NPM runs the preinstall script from the cache instead of from node_modules. One way to detect that is by testing the presence of the `_cacache`...
I tried this with a new project and I get the following result. Please look especially at the `npm i` below: ```sh PS D:\dev> npm run preinstall > @ preinstall...
Currently bun is in active development which means some features are working and some not, for the features that aren't working we need to seek out other package managers like...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 4.1.0 to 4.1.1. Commits 64735d2 v4.1.1 75a657d Fix potential ReDoS (#37) See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
"_The [bun CLI](https://bun.sh/docs/cli/install) contains a Node.js-compatible package manager designed to be a dramatically faster replacement for `npm`, `yarn`, and `pnpm`_." It would be great if `only-allow` supports `bun` in addition...
