PORTREVISION=	1

SUB_FILES=	pkg-message

======================================================================

You have installed NPM, Node Package Manager.

** SECURITY ADVISORY: INSTALLED PACKAGES AUTHENTICITY NOT VERIFIED **

Please note that npm downloads packages from https://npmjs.com server

without verifying their authenticity. This makes your system

vulnerable to the MITM (man-in-the-middle) attacks. Attackers can

potentially impersonate https://npmjs.com server, and transparently

substitute legitimate packages with malicious ones. Npm running on

this system will not be able to detect such situation, and attackers

can potentially gain control over this, and connected to it systems.

** SECURITY ADVISORY: NPM ALLOWS SEAMLESS DOWNLOADS OF RANDOM CODE **

Please note that npm allows to download and install unverified code

from arbitrary GitHub projects with innocently looking commands. Such

projects can contain arbitrary code, which may turn out to be

malicious. No verification, testing, or approval of such code is done

by NPM administrators, or by FreeBSD maintainers. Such code can allow

attackers to potentially gain control over this, and connected to it

systems.

NPM is not recommended for use on production systems because of the

above security concerns. Please exercise extreme caution if you have

to use npm, or any other packages that use npm.

USE NPM AT YOUR OWN RISK!

======================================================================