If you don't `npm config set ignore-scripts true` then you are basically executing random unknown code every time you do an `npm install`. Modules can change ha

If you don't `npm config set ignore-scripts true` then you are basically executing random unknown code every time you do an `npm install`. Modules can change hands and become malicious, which is much more plausible when there are thousands of sub-dependencies in a pretty standard modern web app.