From dde19d3829d87a2cea530da2447f951bac53b085 Mon Sep 17 00:00:00 2001
From: Michael Geers <michael@geers.tv>
Date: Wed, 3 Dec 2025 12:27:39 +0100
Subject: [PATCH] chore: npm disable script installs (#25779)

---
 .npmrc | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 .npmrc

diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..fdd3e982e
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,4 @@
+# Disable automatic execution of install scripts for security
+# This protects against supply chain attacks that use postinstall hooks
+# If a package needs its install script, run: npm install --ignore-scripts=false <package>
+ignore-scripts=true