Hacker News

Show HN: Safe-install – safer NPM installs with trusted build dependencies

Hacker News - Mon, 05/11/2026 - 8:30pm

In light of the ongoing npm supply chain compromises, I built safe-install:

https://www.npmjs.com/package/@gkiely/safe-install

It brings a couple of protections I wanted from npm but are not built in.

Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts:

https://bun.com/docs/guides/install/trusted

It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:

https://gajus.com/blog/3-pnpm-settings-to-protect-yourself-f...

I was hoping npm would eventually add something like this, but it does not seem to be happening soon, so I made a small package for it.

Comments URL: https://news.ycombinator.com/item?id=48102636

Points: 2

# Comments: 0

Categories: Hacker News

CRUD Is Broken

Hacker News - Mon, 05/11/2026 - 8:25pm

Article URL: https://sawyer-p.me/crud-is-broken

Comments URL: https://news.ycombinator.com/item?id=48102601

Points: 3

# Comments: 0

Categories: Hacker News

Show HN: I built an MCP server for narrative-driven trading intelligence

Hacker News - Mon, 05/11/2026 - 6:46pm

i dont trust LLMs to make trades for me, however i do trust them to pressure test theses, process large amounts of market and exchange data, RSS feeds. theres are pages and pages of text, opinions, about any given ticker. does not having a risk committee or a fund-manager overlord allow me to make riskier, and more profitable trades compared to a hedge fund? im currently finding out. while i've been making money, im still far away from becoming retiring off of it. would love to hear about others taking this approach

Comments URL: https://news.ycombinator.com/item?id=48101749

Points: 2

# Comments: 0

Categories: Hacker News

Show HN: Origami – A simple workspace-oriented terminal manager

Hacker News - Mon, 05/11/2026 - 6:45pm

Hey. Just wanted to show-off my project built with the help of AI/LLMs and share my experiences and clear myths I keep hearing and seeing about how AI will take over everything and everyone.

I have over 10 years experience in software development so I guess I know a thing or two but of course people are free to form their opinions, these are mine. And they become much more apparent while working on Origami.

- Coding with help of AI is not a one-stop shop, nor can you one-shot prompts for anything that can be called worth. Obviously a project of this magnitude is substantially faster to get working but still... lots of working nights and weeks spent on a having something people can use and enjoy and that feels complete.

- Software architecture is the most important skill to have and develop if you want to use AI. Without it, you're just vibe coding and you will sooner or later hit a wall. How that wall looks like or its size... depends.

- AI/LLMs are statistical machines! They are not creative, they base themselves on what has come before. If you want to innovate you need to do it yourself. They do not provide fresh ideas and most likely will not net you the next big thing. Do not delegate everything to AI.

I'll stop here for now - in any case, it's fun, it's definitely faster and it does feel good to see a prototype up and running like never before. It's here to stay, people just need to know how to use it right and with right mindset.

I got a bit lost above but I think that shows a bit more of how Origami came to be than if I just showed you yet another app. Take a look at the website if interested, it's free!

In summary: - It's a terminal manager - It supports multiple workspaces at the same time - Each workspace has organized tabs within them that you can configure - Has integrated git support - Has its MCP so it can be controller from within itself - Bring your own agents, shells and whatever else - it does not replace them.

See everyone around.

Comments URL: https://news.ycombinator.com/item?id=48101738

Points: 2

# Comments: 0

Categories: Hacker News

Devon

Hacker News - Mon, 05/11/2026 - 6:37pm
Categories: Hacker News

Pages