npx
npx copied to clipboard
Feature Request: Allow options to be configured.
Specifically, I want to always specify --no-install and I want that configuration to be very robust such that it isn't shell dependent.
Executing remote code can be dangerous. Then you go into your employer's application server to update or test something. Well, I think you know my point.
It would be best (in my opinion) for the configuration option(s) to live in npm-config.
I would consider the automatic remote code execution to be a security issue. One that is all too easy to maliciously exploit through typo-squatting.