npm config set ignore-scripts true [--global]
It's easy to do both at project level and globally, and these days there are quite few legit packages that don't work without them. For those that don't, you can create a separate installation script to your project that cds into that folder and runs their install-script.I know this isn't a silver bullet solution to supply chain attakcs, but, so far it has been effective against many attacks through npm.
- create a vanity TLD with high renewal fees
- register a bunch of sites that are mirrors of already seized domains
- mention them in enough places they get noticed
- ???
- profit
Even if they were actually seized, do you think if the police seize a rental car they'll be paying the rental fee until they give it back?
My main takeaway from so much of this is that "just a chart" is one of the biggest sources of hidden complexity in displaying useful information to people. It's right up there with "a simple web form" and "a web page with some simple interactivity."
Everybody has a wildly different idea of what good looks like. Defaults will never be right. Personal and global taste changes annually. We clown react (rightly) for constantly reinventing the same 4 wheels, but customers gleefully use new stuff all the time.
It's kind of amazing that d3 has been so durable in the frontend world. It really is a wrapper over a pretty solid approach. And yeah, that approach is complex, but that's the reality of visualization. It's hard to imagine another one that's that good.
All other libraries will just have a pile of abstractions that will leak everywhere as soon as you deviate from the happy path.
If you just want a bunch of auxillary charts and don't need a ton of control, just use something like ECharts. When you want real creative control over your visualisations, don't bother with anything high level.
>The concept of PSR is fairly simple. It is a rotating radio transponder with an omnidirectional antenna.
Shouldn't it be a directional antenna?
Anyway, I find this debate fascinating. On one hand, Perplexity's behavior is sketchy. On the other hand, it really feels like Cloudflare wants to be a middleman to the web and collect a 30% fee, which seems like a bad idea.
On the other hand, it has mistakes I wouldn't expect from AI, like writing "Here's how Cloudflare bypasses Perplexity's crawling", which is the wrong way around.