feat: Phase 1 of `allowScripts` opt-in install-script policy#9360

Open

JamieMagee wants to merge 7 commits into

JamieMagee:jamiemagee/install-scripts-phase-1

Commits on May 14, 2026

feat(config): add allow-scripts, strict-script-builds, dangerously-allow-all-scripts configs
JamieMagee
committed

Commits on May 15, 2026

feat(install): read allowScripts policy from root package.json and CLI configs
JamieMagee
committed
feat(arborist): add identity matcher for allowScripts policy
JamieMagee
committed
feat(install): walk tree and emit advisory warning for unreviewed install scripts
JamieMagee
committed
feat: add npm approve-scripts and npm deny-scripts commands
JamieMagee
committed
feat(install): warn on allowScripts in non-root workspaces
JamieMagee
committed
chore: add coverage tests and istanbul ignores for defensive branches
JamieMagee
committed