breautek commented on issue #838: URL: https://github.com/apache/cordova-docs/issues/838#issuecomment-880819548
> Worth revisiting this issue? People have been saying for years not to use sudo for global npm installations because it can allow unknown install scripts to run as root on your dev machine (presumably for anything in the dependency tree for your install target). I was fairly surprised to see it in official cordova docs. > > Even just removing `sudo` from instructions would be an improvement, putting aside arguments for/against npx. Agreed 100%. [NPM](https://docs.npmjs.com/resolving-eacces-permissions-errors-when-installing-packages-globally) also have guides for installing npm in a way where it doesn't require sudo access, which we could have a note linking to on our [Setup](https://cordova.apache.org/docs/en/latest/guide/cli/index.html) page. There is already a note on how to get sudo-less access, but links to a non-existent page currently. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
