security: disable yarn postinstall scripts (#69)

ChristopherChudzicki · web-flow · commit ee2214a24db7 · 2025-09-25T10:16:50.000-04:00
Disable yarn's postinstall scripts to improve security by setting enableScripts: false in .yarnrc.yml
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -1,3 +1,4 @@
 nodeLinker: node-modules
 
 yarnPath: .yarn/releases/yarn-4.5.1.cjs
+enableScripts: false

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`nodeLinker: node-modules`
`2`	`2`
`3`	`3`	`yarnPath: .yarn/releases/yarn-4.5.1.cjs`
	`4`	`+enableScripts: false`