Warning or confirmation on Gist/Git URL commands

zkat / npx

execute npm package binaries (moved)

https://github.com/npm/npx

Other

2.63k stars 105 forks source link

Warning or confirmation on Gist/Git URL commands #65

Closed timdorr closed 7 years ago

timdorr commented 7 years ago

Since there's a much greater chance of bad actors in environments you don't directly control (i.e., not npm), I think there should be some sort of warning message or confirmation step when using a URL-based command. Just a quick sanity check to make sure people don't install something nasty.

Thoughts on this? If there's interest, I can work up a PR.

zkat commented 7 years ago

I'm gonna close this in favor of #66 because it's more specific and I want to look at that approach closer.