[ashishb]

Tell me a better alternative that allows me to run, say, 'markdown lint', an npm package, on the current directory without giving access to the full system on Mac OS?

[ATechGuy]

sandbox-exec -f curr_dir_access_profile.sb markdownlint

[ashishb]

So you have to install npm package markdownlint on your machine and let it run it's potentially dangerous postinstall step?