Hermes desktop app raises concern over package installs
The installed a without asking for approval. The approval setting was on manual mode, not smart mode, so the install was unexpected. A can affect the whole machine because it is available system-wide.
That is more concerning on a main personal computer, especially while npm are a common worry. A smooth middle layer that blocks this kind of action without hurting daily is hard to find.
Key points
- Hermes installed a without a clear approval prompt.
- The concern is stronger because manual mode was enabled.
- A can affect the whole computer, not just one project.
- Main personal machines need stricter care than throwaway test environments.
- Users may need an extra safety layer, but seamless options are not obvious.