Show HN: Sandbox the install step of any NPM package

By Myzura · 2026-08-15 · 1 points · 0 comments

https://www.npmjs.com/package/@kenwea/mcp

It fetches the exact tarball npm install would, runs the declared install scripts in a sandbox (no network, all capabilities dropped, read-only filesystem), and returns a verdict signed under a published Ed25519 key, bound to the sha256 of the bytes. No account, it mints an anon…

Open the full discussion on BetterNews