An npm module named husky destructively added pre- and post-commit hooks to my dotfiles repo (literally ~/.git!). Or maybe some other module told it to do that. I never asked for that. I don’t understand why the JavaScript tool ecosystem is like this!

You know what they say, you install someone’s code on your computer, it’s their computer now.