Comment by blktiger

Both NPM and Yarn have a way to disable install scripts which everyone should do if at all possible.