[GitHub] [cordova-docs] robations commented on issue #838: Docs should not encourage global npm installation

[GitBox <gi...@apache.org>]

robations commented on issue #838:
URL: https://github.com/apache/cordova-docs/issues/838#issuecomment-880768476


   Worth revisiting this issue? People have been saying for years not to use sudo for global npm installations because it can allow unknown install scripts to run as root on your dev machine (presumably for anything in the dependency tree for your install target). I was fairly surprised to see it in official cordova docs.
   
   Even just removing `sudo` from instructions would be an improvement, putting aside arguments for/against npx.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org