npx icon indicating copy to clipboard operation
npx copied to clipboard

Feature Request: Allow options to be configured.

Open CodeMan99 opened this issue 8 years ago • 1 comments

Specifically, I want to always specify --no-install and I want that configuration to be very robust such that it isn't shell dependent.

Executing remote code can be dangerous. Then you go into your employer's application server to update or test something. Well, I think you know my point.

It would be best (in my opinion) for the configuration option(s) to live in npm-config.

CodeMan99 avatar Aug 01 '17 20:08 CodeMan99

I would consider the automatic remote code execution to be a security issue. One that is all too easy to maliciously exploit through typo-squatting.

kanongil avatar Jan 17 '18 11:01 kanongil