This repository has been archived by the owner on Aug 11, 2022. It is now read-only.

Piping `npm token create` causes password to be displayed #19177

Open

Qix- opened this issue Nov 16, 2017 · 0 comments

Qix- commented Nov 16, 2017

The 'secure' prompt used by the npm token create command happily displays the password of the user if the command is being piped to something.

$ npm token create --read-only
npm password:

$ npm token create --read-only | cat
npm password: rustydingo15

The text was updated successfully, but these errors were encountered:

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.