Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
contaazul-pinst
Advanced tools
pinst
lets you havepreinstall
andpostinstall
hooks that runs only in dev 🍺
Important if your project is using npm or pnpm, you can achieve the desired effect by setting a prepare
hook instead. ca-pinst
is mainly useful for Yarn 2+ since it doesn't support prepare
hook. See https://yarnpkg.com/advanced/lifecycle-scripts
// package.json
{
"scripts": {
"preinstall": "<some dev only command>",
"postinstall": "<some dev only command>",
"prepack": "ca-pinst --disable",
"postpack": "ca-pinst --enable"
}
}
On prepack
, (pre|post)install
will be renamed to _(pre|post)install
(disabled)
On postpack
, it will be renamed back to (pre|post)install
(enabled)
ca-pinst
accepts the following flags:
--enable, -e Enable postinstall hook
--disable, -d Disable postinstall hook
--silent, -s
By inverting commands, you can also use ca-pinst
to enable preinstall
and postinstall
for your users only and not yourself.
ca-pinst
also supports install
alias.
MIT - ContaAzul :cactus:
FAQs
Enable or disable npm postinstall hook
We found that contaazul-pinst demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.