Feature Request: Allow options to be configured.

zkat / npx

execute npm package binaries (moved)

https://github.com/npm/npx

Other

2.63k stars 105 forks source link

Feature Request: Allow options to be configured. #105

Open CodeMan99 opened 7 years ago

CodeMan99 commented 7 years ago

Specifically, I want to always specify --no-install and I want that configuration to be very robust such that it isn't shell dependent.

Executing remote code can be dangerous. Then you go into your employer's application server to update or test something. Well, I think you know my point.

It would be best (in my opinion) for the configuration option(s) to live in npm-config.

kanongil commented 6 years ago

I would consider the automatic remote code execution to be a security issue. One that is all too easy to maliciously exploit through typo-squatting.