For what it's worth, npm supports an option "ignore-scripts" for both "npm install" and "npm ci" (the latter of which ensures the installed packages match the i

For what it's worth, npm supports an option "ignore-scripts" for both "npm install" and "npm ci" (the latter of which ensures the installed packages match the integrity hashes from the package-lock.json file). https://docs.npmjs.com/cli/v7/commands/npm-install/#ignore-scripts https://docs.npmjs.com/cli/v7/commands/npm-install/#ignore-s... https://docs.npmjs.com/cli/v7/commands/npm-ci/#ignore-scripts https://docs.npmjs.com/cli/v7/commands/npm-ci/#ignore-script...