mirror of
https://github.com/Skyvern-AI/skyvern.git
synced 2026-04-28 03:30:10 +00:00
5 lines
319 B
Text
5 lines
319 B
Text
# Supply chain protection: do not run lifecycle scripts (preinstall, install,
|
|
# postinstall) on npm install. Blocks worms like "Shai-Hulud" from executing
|
|
# on a compromised dependency before we notice. If a package genuinely needs
|
|
# its install script, use @lavamoat/allow-scripts to allowlist it.
|
|
ignore-scripts=true
|