[Fix] getLockfile: use --ignore-scripts when generating a lockfile

ljharb · Dec 9, 2021 · 0587433 · 0587433
1 parent 90b099c
commit 0587433
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/getLockfile.js b/getLockfile.js
@@ -40,7 +40,7 @@ module.exports = function getLockfile(packageFile, date, {
 		const PATH = path.join(tmpDir, '../node_modules/.bin');
 		logger(chalk.blue(`Running npm install to create lockfile for ${date || '“now”'}...`));
 		exec(
-			`npm install --package-lock --package-lock-only${date ? ` --before=${date}` : ''}${only ? ` --only=${only}` : ''}`,
+			`npm install --ignore-scripts --package-lock --package-lock-only${date ? ` --before=${date}` : ''}${only ? ` --only=${only}` : ''}`,
 			{
 				cwd: tmpDir,
 				env: {