Skip to content

Commit c0e618c

Browse files
committed
docs: document dangerouslyAllowAllBuilds
1 parent fef55e2 commit c0e618c

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

docs/settings.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1170,6 +1170,28 @@ ignoredBuiltDependencies:
11701170
- fsevents
11711171
```
11721172

1173+
### dangerouslyAllowAllBuilds
1174+
1175+
Added in: v10.9.0
1176+
1177+
* Default: **false**
1178+
* Type: **Boolean**
1179+
1180+
If set to `true`, all build scripts (e.g. `preinstall`, `install`, `postinstall`) from dependencies will run automatically, without requiring approval.
1181+
1182+
:::warning
1183+
1184+
This setting allows all dependencies—including transitive ones—to run install scripts, both now and in the future.
1185+
Even if your current dependency graph appears safe:
1186+
1187+
* Future updates may introduce new, untrusted dependencies.
1188+
* Existing packages may add scripts in later versions.
1189+
* Packages can be hijacked or compromised and begin executing malicious code.
1190+
1191+
For maximum safety, only enable this if you’re fully aware of the risks and trust the entire ecosystem you’re pulling from. It’s recommended to review and allow builds explicitly.
1192+
1193+
:::
1194+
11731195
## Node.js Settings
11741196

11751197
### useNodeVersion

0 commit comments

Comments
 (0)