Bash script to vendor in NPM packages to your repo | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Bash script to vendor in NPM packages to your repo (gist.github.com)
		4 points by dangoodmanUT 3 days ago \| hide \| past \| favorite \| 1 comment

dangoodmanUT 3 days ago [–]

This script makes it easy to copy an NPM package into a `vendor/` dir.

Helps against supply-chain attacks, and also makes it easier for LLMs to investigate how packages work.

Warning: Opus 4.5 did most of the work (but we use this in prod)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact