All issues

Search results

harden: npm script-shell runner crashes without scriptsConfig and breaks installs of deps with install scripts

Status: Open.

#2108 In LavaMoat/LavaMoat;

· ChrisB85 opened on Sep 13, 2026

harden wizard overrides existing settings

Status: Open.

#2085 In LavaMoat/LavaMoat;

· jase88 opened on Aug 13, 2026

ci: enable strict collection mode when zizmor-action supports it

choreoverhead, tests, dev env, etc.overhead, tests, dev env, etc.

Status: Open.

#2071 In LavaMoat/LavaMoat;

· boneskull opened on Jul 17, 2026

Waht about npm approve-scripts command?

Status: Open.

#2041 In LavaMoat/LavaMoat;

· jer-sen opened on Jun 26, 2026

allow-scripts should allow transitive optional dependencies to fail

Status: Open.

#2029 In LavaMoat/LavaMoat;

· vincentrolfs opened on Jun 22, 2026

remove 'install' from .npmrc

choreoverhead, tests, dev env, etc.overhead, tests, dev env, etc.

Status: Open.

#1990 In LavaMoat/LavaMoat;

· boneskull opened on May 26, 2026

core: new warning emitted in endowmentsToolkit under Node.js v26

bugSomething isn't workingSomething isn't working

Status: Open.

#1987 In LavaMoat/LavaMoat;

· boneskull opened on May 26, 2026

pnpm scripts are incompatible with --bin

Status: Open.

#1948 In LavaMoat/LavaMoat;

· whymarrh opened on Apr 13, 2026

allow-scripts: extend shared config

Status: Open.

#1938 In LavaMoat/LavaMoat;

· everett1992 opened on Apr 8, 2026

How to whitelist root postinstall while blocking dependency scripts?

Status: Open.

#1937 In LavaMoat/LavaMoat;

· oatymart opened on Apr 3, 2026

confusing new user experience with node v25 -- old version of allow-scripts installs

Status: Open.

#1931 In LavaMoat/LavaMoat;

· danielbprice opened on Mar 31, 2026

lavamoat/node beta issues from testing

pkg:@lavamoat/nodeChanges in package @lavamoat/nodeChanges in package @lavamoat/node

Status: Open.

#1896 In LavaMoat/LavaMoat;

· naugtur opened on Mar 10, 2026