This is why i removed nodejs from my userspace completely (and cargo, and uv) and just work in containers now. For review, I no longer diff npm packages on git sources but on npm tarballs and after i have it do postinstall, also in docker, with diffoci.

Could maybe do something with less friction by templating bwrap, but for now, the container overhead does help with retention too (docker save has been promoted to be among my fav tools now)