logoalt Hacker News

seniorsassycatlast Sunday at 10:10 PM1 replyview on HN

I tend to agree but think npms post install hook is a degree worse. Triggering during install, silently because npm didn't like someone using the feature to ask for donations, is worse than requiring you to load and run the package code.


Replies

staticassertionlast Monday at 3:25 PM

Which package managers don't contain an equivalent feature for running code as part of the install process?