Hacker News Reader

> Generally, it’s a good idea not to blindly install NPM packages.

Given the nature of npm that is pretty hard to avoid.

Transitive dependencies, yeah, but top-level dependencies that you are installing with npm i or via your manifest file are areas that you do control and can manage.

Reply on news.ycombinator.com