Prevents installed package from executing malicious code via postinstall (#6777)

2026-03-31 22:53:53 +08:00
parent e7fc00c747
commit d1c596533f
1 changed files with 1 additions and 1 deletions
--- a/composer.json
+++ b/composer.json
@@ -36,7 +36,7 @@
            "@php -r \"file_exists('.env') || copy('.env.example', '.env');\"",
            "@php artisan key:generate",
            "@php artisan migrate --force",
-            "npm install",
+            "npm install --ignore-scripts",
            "npm run build"
        ],
        "dev": [