add @lavamoat/allow-scripts package to restrict running npm lifecycle…

… scripts
NilFoundation · Feb 11, 2025 · bc762b3 · bc762b3
1 parent 742bd86
commit bc762b3
Show file tree

Hide file tree

Showing 10 changed files with 2,961 additions and 7,291 deletions.
diff --git a/.npmrc b/.npmrc
@@ -0,0 +1 @@
+ignore-scripts=true
diff --git a/nix/clijs.nix b/nix/clijs.nix
@@ -40,6 +40,8 @@ stdenv.mkDerivation rec {
   preUnpack = ''
     echo "Setting UV_USE_IO_URING=0 to work around the io_uring kernel bug"
     export UV_USE_IO_URING=0
+
+    export npm_config_ignore_scripts=true
   '';
 
   postUnpack = ''

diff --git a/nix/nildocs.nix b/nix/nildocs.nix
@@ -50,6 +50,8 @@ stdenv.mkDerivation rec {
   preUnpack = ''
     echo "Setting UV_USE_IO_URING=0 to work around the io_uring kernel bug"
     export UV_USE_IO_URING=0
+
+    export npm_config_ignore_scripts=true
   '';
 
   preBuild = ''

diff --git a/nix/nilexplorer.nix b/nix/nilexplorer.nix
@@ -41,6 +41,8 @@ stdenv.mkDerivation rec {
 
     export CYPRESS_INSTALL_BINARY=0
     export CYPRESS_RUN_BINARY=${cypress}/bin/Cypress
+
+    export npm_config_ignore_scripts=true
   '';
 
   buildPhase = ''

diff --git a/nix/niljs.nix b/nix/niljs.nix
@@ -30,6 +30,8 @@ stdenv.mkDerivation rec {
   preUnpack = ''
     echo "Setting UV_USE_IO_URING=0 to work around the io_uring kernel bug"
     export UV_USE_IO_URING=0
+
+    export npm_config_ignore_scripts=true
   '';
 
   buildPhase = ''

diff --git a/nix/nilsmartcontracts.nix b/nix/nilsmartcontracts.nix
@@ -28,6 +28,8 @@ stdenv.mkDerivation rec {
   preUnpack = ''
     echo "Setting UV_USE_IO_URING=0 to work around the io_uring kernel bug"
     export UV_USE_IO_URING=0
+
+    export npm_config_ignore_scripts=true
   '';
 
   buildPhase = ''

diff --git a/nix/npmdeps.nix b/nix/npmdeps.nix
@@ -18,5 +18,6 @@ in
       ../uniswap/package.json
     ];
   };
-  hash = "sha256-Fhwhf+fJZyznk5pzmvTsvcD4uEcPZ+EveXy03rfJ+D0=";
+  hash = "sha256-I5UsMa9k7zMg7Rp9/f7eUeuvPOnPg6Sxs/9iMWlzLcQ=";
+  npmFlags = [ "--ignore-scripts" ];
 })
diff --git a/nix/uniswap.nix b/nix/uniswap.nix
@@ -41,6 +41,8 @@ stdenv.mkDerivation rec {
   preUnpack = ''
     echo "Setting UV_USE_IO_URING=0 to work around the io_uring kernel bug"
     export UV_USE_IO_URING=0
+
+    export npm_config_ignore_scripts=true
   '';
 
   buildPhase = ''