Pre-Install Always Fail
Worried about accidentally running yarn or npm with script hooks enabled such as preinstall or postinstall?
Adding this package to a project mitigates the likelihood of running any lifecycle scripts by throwing an error during the preinstall script execution.
Install
yarn add @lavamoat/preinstall-always-fail
npm i @lavamoat/preinstall-always-fail
Usage
If the --ignore-scripts [1] flag is missing, running yarn or npm i will fail.
Enable the flag and use in conjunction with Lavamoat's allow-scripts to manually whitelist packages running scripts.
References
[1]: https://docs.npmjs.com/cli/v7/commands/npm-install#ignore-scripts