From 741e6fe72c6549da05e1b2bc9ef6bf07edce5cf7 Mon Sep 17 00:00:00 2001
From: David Anson <david@dlaa.me>
Date: Sun, 18 Dec 2022 16:01:59 -0800
Subject: [PATCH] Default npm's ignore-scripts flag to true to prevent running
 pre- or post-scripts in package dependencies.

---
 .npmrc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.npmrc b/.npmrc
index 43c97e71..3757b304 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,2 @@
+ignore-scripts=true
 package-lock=false