Disable auto run of NPM package install scripts for security

2 weeks ago · d3bce29e7a
1 changed files with 2 additions and 0 deletions
--- a/ansible/roles/nodejs/tasks/main.yml
+++ b/ansible/roles/nodejs/tasks/main.yml
@ -18,3 +18,5 @@
    # --no-bin-links option is needed to prevent npm from creating symlinks in the .bin
    # directory, which doesn't work inside Vagrant on Windows
    no_bin_links: true
+    # Disable automatic running of package install scripts, for security
+    ignore_scripts: true