fix: use npm registry instead of retrieving project through ssh

chengsokdara / use-whisper

React hook for OpenAI Whisper with speech recorder, real-time transcription, and silence removal built-in

MIT License

713 stars 133 forks source link

fix: use npm registry instead of retrieving project through ssh #58

Open rimiti opened 5 months ago

rimiti commented 5 months ago

Hi @chengsokdara, 👋

Using SSH for getting package is a really bad practice for security and regression reason. Code present on #master branch seems to be the code deployed on NPM.

An another example of side effect to not use NPM: When we install your (nice) package, it's mandatory into our Dockerfile image to add SSH a the Gihub Public git...

Have a nice day. Regards,