From 00e34d8a23412f023b4d1a3db77cd100db736075 Mon Sep 17 00:00:00 2001
From: mtyszczak <mateusz.tyszczak@gmail.com>
Date: Thu, 13 Mar 2025 14:50:53 +0100
Subject: [PATCH] Fail postinstall dependency scripts
---
.gitlab-ci.yml | 2 +-
README.md | 4 ++--
package.json | 1 +
pnpm-lock.yaml | 9 +++++++++
4 files changed, 13 insertions(+), 3 deletions(-)
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index d28c9da..df58520 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -26,7 +26,7 @@ default:
- corepack enable
- corepack prepare pnpm@10.0.0 --activate
- pnpm config set store-dir .pnpm-store
- - pnpm install --frozen-lockfile
+ - pnpm install --frozen-lockfile --ignore-scripts # Do not run lifecycle postinstall scripts
build:
extends: .npm_based_job
diff --git a/README.md b/README.md
index b4b4bae..3021a74 100644
--- a/README.md
+++ b/README.md
@@ -8,11 +8,11 @@ Hive wallet extension allowing you to sign transactions using keys derived from
# Clone the repository and its submodules
git clone --recurse-submodules https://gitlab.syncad.com/hive/metamask-snap.git
# Install dependencies
-pnpm install
+pnpm install --ignore-scripts
# Start development server
pnpm start
```
-# License
+## License
[MIT License](LICENSE.md)
diff --git a/package.json b/package.json
index 011a310..b29f5e2 100644
--- a/package.json
+++ b/package.json
@@ -37,6 +37,7 @@
"devDependencies": {
"@hiveio/beekeeper": "1.27.10-250304140859",
"@hiveio/wax": "1.27.6-rc7-250304235913",
+ "@lavamoat/preinstall-always-fail": "^2.0.0",
"@metamask/key-tree": "^10.0.2",
"@metamask/snaps-cli": "~6.6.0",
"@metamask/snaps-sdk": "~6.14.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index da5de2f..b8745eb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -20,6 +20,9 @@ importers:
'@hiveio/wax':
specifier: 1.27.6-rc7-250304235913
version: 1.27.6-rc7-250304235913
+ '@lavamoat/preinstall-always-fail':
+ specifier: ^2.0.0
+ version: 2.1.0
'@metamask/key-tree':
specifier: ^10.0.2
version: 10.1.0
@@ -818,6 +821,10 @@ packages:
'@jridgewell/trace-mapping@0.3.9':
resolution: {integrity: sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==}
+ '@lavamoat/preinstall-always-fail@2.1.0':
+ resolution: {integrity: sha512-9xSsxxryPMyBWxfV+Ver7FZhvC1PhE1wDCsYFwsiqZzmeWH8e7Y7gWRFJqPw4M8WNbfeuPhKbLdCK3GsPz9gKg==}
+ engines: {node: ^16.20.0 || ^18.0.0 || ^20.0.0 || ^22.0.0}
+
'@metamask/abi-utils@3.0.0':
resolution: {integrity: sha512-a/l0DiSIr7+CBYVpHygUa3ztSlYLFCQMsklLna+t6qmNY9+eIO5TedNxhyIyvaJ+4cN7TLy0NQFbp9FV3X2ktg==}
engines: {node: ^18.18 || ^20.14 || >=22}
@@ -5218,6 +5225,8 @@ snapshots:
'@jridgewell/resolve-uri': 3.1.2
'@jridgewell/sourcemap-codec': 1.5.0
+ '@lavamoat/preinstall-always-fail@2.1.0': {}
+
'@metamask/abi-utils@3.0.0':
dependencies:
'@metamask/superstruct': 3.1.0
--
GitLab