Commit 4e26bdb

authored and

committed

npmrc: disable lifecycle scripts

Due to all the recent supply-chain attacks, we should set this at the project level so that we don't run any post-install scripts. This is a security mitigation against malicious packages and prevents them from running scripts when installing

1 parent 29382df commit 4e26bdbCopy full SHA for 4e26bdb

1 file changed

.npmrc

`‎.npmrc‎`

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ignore-scripts=true`

Comments

(0)