With npm 12.x post install is not anymore allowed
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 40.1k
- Forks
- 1.3k
- PR merge metrics
- No merged PRs in 30d
Description
When installing esbuild with npm 12.x I get the following warning
```bash
npm warn install-scripts 6 packages had install scripts blocked because they are not covered by allowScripts:
npm warn install-scripts esbuild@0.28.1 (postinstall: node install.js)
```
This is caused be change in node and post install script are not anymore allowed by default. There is migration guidance in https://installsafe.dev/ It would be nice if esbuild could be updated and drop the usage of post install scripts.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the npm warning and read node install.js, then review the migration guidance at installsafe.dev. Determine how esbuild can be installed under npm 12.x without a postinstall script while preserving the package's installation behavior. Done means the package installs without the blocked-script warning and still works correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, javascript, node.js
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100