Comment by tln

How can we stop having post-install scripts with such access?

Can I turn off those post install scripts globally?

Are there alternatives to npm that do a better job here?