Repository navigation

Fix npm 12 pinned allowScripts lost on scan (#1595) - #1657

Merged

Mikola Lysenko (mikolalysenko) merged 6 commits into

mainfrom

agent/fix-npm-allow-scripts-pins

Oct 22, 2026

Merged

Fix npm 12 pinned allowScripts lost on scan (#1595)#1657
Mikola Lysenko (mikolalysenko) merged 6 commits into
mainfrom
agent/fix-npm-allow-scripts-pins

Commits on Oct 21, 2026
- Start fix for #1595
  Claude (claude)
  committed
  94066be
- Warn when npm 12 script approvals stop matching
  Claude (claude)
  committed
  f5cf6e1
- Match npm's allowScripts rules more exactly
  Claude (claude)
  committed
  46ccb14
- Use the shared BOM helper for package.json
  Claude (claude)
  committed
  63b4504
- Read a BOM-prefixed package-lock.json in hosted
  Claude (claude)
  committed
  6c41e51
Commits on Oct 22, 2026
- Compare single-version allowScripts pins as npm does
  Claude (claude)
  committed
  cd0cf07