See what a lockfile's install scripts actually run, then generate an npm/pnpm/Yarn/Bun allowlist.
npm yarn developer-tools postinstall pnpm lockfile bun allowlist supply-chain-security sveltekit install-scripts lifecycle-scripts trusted-dependencies
-
Updated
Aug 7, 2026 - TypeScript