←back to thread

71 points kristianp | 1 comments | | HN request time: 0.234s | source
Show context
thebestmoshe ◴[] No.44611084[source]
I really like how easy it is to run using bunx, pnpx, npx, etc.

But does anyone have thoughts on the security aspect. Getting people used to just running code like this that has full access to the system is slightly concerning.

On the other hand it’s no different than installing npm packages

replies(2): >>44611573 #>>44611623 #
1. simonw ◴[] No.44611573[source]
Maybe this kind of thing would be better written in Deno?

Deno has mechanisms for allow-listing the exact files the process can access - in this case you would want to give it read-only access to the log files in the ~/.claude directory and nothing else.