Console’s review
· Reviewed by David Mytton
What we like
Wraps around the common but risky pattern of piping scripts to bash from curl. Provides a temporary location for the download, shows a diff if you previously ran the script, analyzes the code for malicious patterns, provides confirmation for everything.
Tradeoffs
Could it actually sandbox the download - that would be a full solution.