- Notifications
You must be signed in to change notification settings - Fork 3.7k
Closed
Labels
Awaiting Informationfurther information is requestedfurther information is requested
Description
Many places recommend setting ignore-scripts for the global config for security purposes.
This is to prevent third party packages from executing arbitrary code.
The problem is that setting this has resulted in no scripts running including from npm run ...
I also see no warnings when executing npm run ... with ignore-scripts enabled.
Is there any way to ignore scripts purely for the security concerns?
Metadata
Metadata
Assignees
Labels
Awaiting Informationfurther information is requestedfurther information is requested