2min chapter

Changelog Master Feed cover image

Making "safe npm" (JS Party #272)

Changelog Master Feed

CHAPTER

The Rise and Fall of Dino

Yarn is a tool that does the same thing as NPM but faster, easy switch over. I don't think node has done anything in response to Dino. They have the HTTPS imports, but it's flagged due to like nightmare level security problems of just that security model. We have the permissions model gets unflagged this month for all those like web APIs,. Like the file API, and labs and stuff. But yeah, I'm not really a yarn user, so I don't know what other reasons people use it for as well.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode