chore: npm disable script installs (#25779)

This commit is contained in:
Michael Geers 2025-12-03 12:27:39 +01:00 • committed by GitHub
parent d351253403
commit dde19d3829
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

4
.npmrc Normal file
View file

@ -0,0 +1,4 @@
# Disable automatic execution of install scripts for security
# This protects against supply chain attacks that use postinstall hooks
# If a package needs its install script, run: npm install --ignore-scripts=false <package>
ignore-scripts=true