Skip to content

Conversation

Fdawgs
Copy link
Member

@Fdawgs Fdawgs commented Sep 21, 2025

See fastify/deepmerge#78.
This repo has a prepare script so that will just need to be ran on install when doing local development.

Signed-off-by: Frazer Smith <[email protected]>
Copy link

No linked issues found. Please add the corresponding issues in the pull request description.
Use GitHub automation to close the issue when a PR is merged

@Fdawgs Fdawgs requested review from Eomm and Copilot September 24, 2025 10:58
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a .npmrc configuration file to prevent npm scripts from running during package installation, which is a common security practice to avoid executing untrusted code from dependencies.

  • Adds .npmrc file with ignore-scripts=true setting
  • Helps secure the development environment by disabling automatic script execution
  • Requires manual execution of the prepare script during local development

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@Uzlopak Uzlopak merged commit e1916b4 into main Sep 26, 2025
5 of 6 checks passed
@Uzlopak Uzlopak deleted the chore/npmrc branch September 26, 2025 00:31
@github-actions github-actions bot mentioned this pull request Sep 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants