Comment by tiagod

Or use pnpm. The latest versions have all dependency lifecycle scripts ignored by default. You must whitelist each package.