chore: npm disable script installs (#25779)
This commit is contained in:
parent
d351253403
commit
dde19d3829
1 changed files with 4 additions and 0 deletions
4
.npmrc
Normal file
4
.npmrc
Normal file
|
|
@ -0,0 +1,4 @@
|
||||||
|
# Disable automatic execution of install scripts for security
|
||||||
|
# This protects against supply chain attacks that use postinstall hooks
|
||||||
|
# If a package needs its install script, run: npm install --ignore-scripts=false <package>
|
||||||
|
ignore-scripts=true
|
||||||
Loading…
Add table
Add a link
Reference in a new issue