Repository navigation

chore(deps): deny esbuild/fsevents install scripts; guard unreviewed ones - #2714

Merged

cliffhall merged 7 commits into

v2/chore/2712-deny-install-scripts

Oct 13, 2026

Merged

chore(deps): deny esbuild/fsevents install scripts; guard unreviewed ones#2714
cliffhall merged 7 commits into
v2/mainfrom
v2/chore/2712-deny-install-scripts

Commits on Oct 13, 2026
- chore(deps): deny esbuild/fsevents install scripts; guard unreviewed ones (#2712)
  
  cliffhall
  and
  claude
  committed
  03c7dc3
- fix(scripts): match allowScripts keys and identity the way npm does (#2712)
  
  cliffhall
  and
  claude
  committed
  bfa1fbf
- fix(scripts): fail closed on bundled install scripts (#2712)
  
  cliffhall
  and
  claude
  committed
  fa4469e
- fix(scripts): require a decision for every non-registry dependency (#2712)
  
  cliffhall
  and
  claude
  committed
  685e6aa
- fix(scripts): apply the prepare fallback only to resolved non-registry sources (#2712)
  
  cliffhall
  and
  claude
  committed
  45c2815
- docs(scripts): state why the guard is needed under npm 10/11, not 'until npm 12' (#2712)
  
  cliffhall
  and
  claude
  committed
  5316f45
- docs: describe the non-registry and bundled cases verify:install-scripts reports (#2712)
  
  cliffhall
  and
  claude
  committed
  105d6f6