npm’s list is incomplete for VCSs. Since they can sometimes execute scripts without the users knowledge & since only the source, not the entire history, is needed, it should be safe to ignore them. Additionally clarified these as a separate bullet point in the spec.
npm’s list is incomplete for VCSs. Since they can sometimes execute scripts without the users knowledge & since only the source, not the entire history, is needed, it should be safe to ignore them. Additionally clarified these as a separate bullet point in the spec.