Pre-Install Always Fail

Worried about accidentally running yarn or npm with script hooks enabled such as preinstall or postinstall?

Adding this package to a project mitigates the likelihood of running any lifecycle scripts by throwing an error during the preinstall script execution.

Install

yarn add @lavamoat/preinstall-always-fail
npm i @lavamoat/preinstall-always-fail

Usage

If the --ignore-scripts [1] flag is missing, running yarn or npm i will fail. Enable the flag and use in conjunction with Lavamoat's allow-scripts to manually whitelist packages running scripts.

References

[1]: https://docs.npmjs.com/cli/v7/commands/npm-install#ignore-scripts