What is the status of `inspector` relative to the recent node.js supply chain compromise?

[jwoehr]

Is it safe to use this tool?

[olaservo]

Hi @jwoehr are you referring to the September compromise of chalk@5.6.1 or debug@4.4.2? Those aren't being referenced by Inspector, but please let me know if there's a specific supply chain attack that you're referring so I can make sure I'm not missing something here. Thanks!

[jwoehr]

Just asking out of general paranoia ... Wondering if your team feels it is on top of the various threats and if it's "safe to go back in the water" ... Thanks for your response.

[olaservo]

@jwoehr his repo has quite a few eyes on it so we tend to hear about anything critical quickly. Both NPM and GitHub also regularly upgrade their security features, and we get alerts on those as well.

[jwoehr]

Thank you @olaservo