install-scripts
Stop dependency install scripts from executing - a committed ignore-scripts for npm, --no-build for uv - then allowlist by name the few packages that genuinely build something. Use when the user wants to block postinstall scripts, harden a project against a compromised release, or mentions ignore-scripts, lifecycle scripts, or npm rebuild. Covers npm and uv.
Pinned to revision f47e86ba9d44, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.