tree 289c4d10e130da6094f229c3f64e03cf559af1c4
parent ffedde078d0e5757f4af5e024bee9458c1b1952a
author André Wegmüller <awe@bsiag.com> 1586252486 +0200
committer André Wegmüller <awe@bsiag.com> 1586252486 +0200

[Security] added --ignore-script flag to pnpm install and update

This prevents external dependencies from executing npm script hooks
like 'postinstall'. The flag works for the install and the update
command, even tough it is not documented for the latter.

See: https://pnpm.js.org/en/cli/install#ignore-scripts

260684