Comment by ryanto

You can use pnpm, which forces you to approve the install scripts you want to run.