# Fail installs when a dependency adds a lifecycle script not explicitly
# reviewed in package.json's `allowScripts`. Reviewed dependencies keep
# scripts denied (their real binaries resolve via optionalDependencies
# platform packages instead); a new scripted dependency fails the build
# until it's added to the allowlist.
strict-allow-scripts=true
