Imagine that guy has this big npm repository locally with all those dodgy librar... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

laurent92 on Oct 4, 2021 | parent | context | favorite | on: Facebook-owned sites were down

Imagine that guy has this big npm repository locally with all those dodgy libraries with uncontrolled origin, in their /lib/node_modules with root permissions.

Wait, we all do, here.

victor9000 on Oct 4, 2021 [–]

You can use a custom npm prefix to avoid the mess you're describing. So basically:

See current prefix:

> npm config get prefix

Set prefix to something you can write to without sudo:

> npm config set prefix /some/custom/path

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact