Pinned
stop using curl | sh to download *any* installer you find on the internet, stop using npm to download global dependencies
this guy just built `safe`, a utility that inspects remote installer scripts before executing them, (all of this for just one star on github)
it downloads
