From 12cdb69ff27d5eb9bfcacfac88d0e7d9c279fa35 Mon Sep 17 00:00:00 2001
From: David Anson <david@dlaa.me>
Date: Fri, 23 Dec 2022 15:33:43 -0800
Subject: [PATCH] Default npm's ignore-scripts flag to true to prevent running
 pre- or post-scripts in package dependencies.

---
 .npmrc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.npmrc b/.npmrc
index 43c97e7..3757b30 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,2 @@
+ignore-scripts=true
 package-lock=false