Cloning a repo can run code on your machine. A git hook runs on commit. An npm postinstall runs on install. Nobody asks you first.
That's why I built side-eye 🤔
It reads files. Never runs a hook or build. Checks Git, VS Code, Node.js, Shell, Android.
www.github.com/nisrulz/side-eye
github.com
GitHub - nisrulz/side-eye: Give a project the side-eye before you trust it.
Give a project the side-eye before you trust it. Contribute to nisrulz/side-eye development by creating an account on GitHub.