I wish npm packages could request permissions from developers, like your apps ask to use your location data.

"suspicious-package is requesting access to the file system, but 'allow-fs' is not enabled in your package.json"

Source: x.com/mattpocockuk/status/1842239423561285744