
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
please-use-tnpm
Advanced tools
在项目中指定公司镜像源
在 package.json 文件的 scripts 中添加 preinstall:
{
"scripts": {
"preinstall": "npx please-use-tnpm"
}
}
当使用 npm i 安装依赖时,如果不是公司镜像源 提示切换。

备注: 如果不想看到 npx: 1 安装成功,用时 xxxx 秒,可以使用 --quiet 选项(或者 -q):
{
"scripts": {
"preinstall": "npx -q please-use-tnpm"
}
}
备注: 强制镜像源:
{
"scripts": {
"preinstall": "npx -q please-use-tnpm -f"
}
}
当使用 npm i 安装依赖时,会提示需要切换镜像源,不切换会报错。

FAQs
强制在项目中使用 tnpm 作为包管理器,并修正镜像源
The npm package please-use-tnpm receives a total of 3 weekly downloads. As such, please-use-tnpm popularity was classified as not popular.
We found that please-use-tnpm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.