I've just finished sandboxing NodeJS and yarn in D...

# javascript

[Bernhard]

I've just finished sandboxing NodeJS and yarn in Docker and VM sandboxes due to supply chain attacks (Axios would have caught me) and was wondering how I'd do that in Kotlin JS; I suppose I need to override all the core tasks by hand?

[hfhbd]

KGP disables the postInstall hook, and you should disable it globally, but I prefer to use devcontainers to not isolate each ecosystem over an over.

[Bernhard]

thank you