From b6757c5ed3081ea5832f746663d4aeb7af400d18 Mon Sep 17 00:00:00 2001
From: David Lane <42013603+ReenigneArcher@users.noreply.github.com>
Date: Tue, 3 Feb 2026 08:17:35 -0500
Subject: [PATCH] build: add --ignore-scripts to npm install commands (#4655)

---
 .github/workflows/ci-bundle.yml  | 2 +-
 .github/workflows/ci-flatpak.yml | 2 +-
 cmake/targets/common.cmake       | 5 ++---
 3 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci-bundle.yml b/.github/workflows/ci-bundle.yml
index 893be6eb..68f536b7 100644
--- a/.github/workflows/ci-bundle.yml
+++ b/.github/workflows/ci-bundle.yml
@@ -21,7 +21,7 @@ jobs:
         uses: actions/setup-node@v6
 
       - name: Install npm dependencies
-        run: npm install
+        run: npm install --ignore-scripts
 
       - name: Build
         env:
diff --git a/.github/workflows/ci-flatpak.yml b/.github/workflows/ci-flatpak.yml
index d5058423..3b02acec 100644
--- a/.github/workflows/ci-flatpak.yml
+++ b/.github/workflows/ci-flatpak.yml
@@ -50,7 +50,7 @@ jobs:
           node-version: ${{ env.NODE_VERSION }}
 
       - name: Install npm dependencies
-        run: npm install --package-lock-only
+        run: npm install --ignore-scripts --package-lock-only
 
       - name: Debug package-lock.json
         run: cat package-lock.json
diff --git a/cmake/targets/common.cmake b/cmake/targets/common.cmake
index ba378cbb..7cdedede 100644
--- a/cmake/targets/common.cmake
+++ b/cmake/targets/common.cmake
@@ -54,10 +54,9 @@ endif()
 #WebUI build
 find_program(NPM npm REQUIRED)
 
+set(NPM_INSTALL_FLAGS "--ignore-scripts")
 if (NPM_OFFLINE)
-    set(NPM_INSTALL_FLAGS "--offline")
-else()
-    set(NPM_INSTALL_FLAGS "")
+    set(NPM_INSTALL_FLAGS "${NPM_INSTALL_FLAGS} --offline")
 endif()
 
 add_custom_target(web-ui ALL