Merge pull request #31 from gitpod-io/pde-128-disable-npm-scripts

Disable npm lifecycle scripts and fix npx usage for security

Author: jespino

.gitpod.yml

@@ -3,13 +3,13 @@
 image: gitpod/workspace-postgres
 
 tasks:
-  - init: npm install
+  - init: npm install --ignore-scripts
     command: |
       export HMR_HOST=`gp url 3000`
       npm run dev
     env:
       DATABASE_URL: postgres://gitpod@localhost/todos
-  - command: npx prisma studio
+  - command: yarn prisma studio
     env:
       DATABASE_URL: postgres://gitpod@localhost/todos