The project provides lockfiles for every supported package manager. If you only have Python and a JS runtime, then you may instead run ./hatch_build.py. This will transparently invoke one of the ...
Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.