File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ allow-build-scripts = @whiskeysockets/baileys,sharp,protobufjs
Original file line number Diff line number Diff line change @@ -165,3 +165,27 @@ All these files work together to:
165165- ** Automate checks in CI/CD** (GitHub Actions)
166166
167167This setup ensures txtcode maintains high code quality and security standards with minimal manual effort.
168+
169+ ## Package Manager
170+
171+ ### ` .npmrc `
172+
173+ ** Purpose:** Configuration for npm that controls package installation behavior.
174+
175+ ** Setting:**
176+ ```
177+ allow-build-scripts=@whiskeysockets/baileys,sharp,protobufjs
178+ ```
179+
180+ ** What it does:**
181+ - Explicitly allows only these specific packages to run build scripts during installation
182+ - Blocks all other packages from running scripts (security feature)
183+
184+ ** Allowed packages:**
185+ - ` @whiskeysockets/baileys ` - WhatsApp library (compiles native dependencies)
186+ - ` sharp ` - Image processing (compiles native C++ code)
187+ - ` protobufjs ` - Protocol buffers (generates code)
188+
189+ ** Why we need it:** Security protection against supply chain attacks. Prevents malicious packages from running arbitrary code during installation.
190+
191+ ---
You can’t perform that action at this time.
0 commit comments