https://blog.ast.moe/en/tags/sandbox/Recent posts: GorimuchuHugohttps://blog.ast.moe/en/blog/2026-10-08-3/Thu, 08 Oct 2026 22:24:12 +0900https://blog.ast.moe/en/blog/2026-10-08-3/<p>When you run <code>npm install</code>, it not only downloads the package but may also execute scripts that the package provides. If you run that code in your regular development environment, you can access files readable by the executing user and the environment variables passed to the process.</p> <p>To isolate such development commands and track what they access, we have built Izanagi in Rust (<a href="https://github.com/ieee0824/izanagi">source</a>). It records file accesses, network communications, and child‑process launches so you can examine the behavior of the executed code.</p>