Remove --ignore-scripts from pnpm dlx helper

jdalton · jdalton · commit fcc8f6573ccc · 2025-09-22T07:24:27.000-04:00
diff --git a/src/utils/dlx.mts b/src/utils/dlx.mts
@@ -128,10 +128,6 @@ export async function spawnDlx(
           npm_config_dlx_cache_max_age: '0',
         },
       }
-      // Add --ignore-scripts for extra security.
-      // While pnpm dlx allows the executed package's scripts by default,
-      // we disable them since coana/cdxgen/synp don't need postinstall scripts.
-      spawnArgs.push('--ignore-scripts')
     }
     if (silent) {
       spawnArgs.push(FLAG_SILENT)

Original file line number	Diff line number	Diff line change
`@@ -128,10 +128,6 @@ export async function spawnDlx(`
`128`	`128`	`npm_config_dlx_cache_max_age: '0',`
`129`	`129`	`},`
`130`	`130`	`}`
`131`		`- // Add --ignore-scripts for extra security.`
`132`		`- // While pnpm dlx allows the executed package's scripts by default,`
`133`		`- // we disable them since coana/cdxgen/synp don't need postinstall scripts.`
`134`		`- spawnArgs.push('--ignore-scripts')`
`135`	`131`	`}`
`136`	`132`	`if (silent) {`
`137`	`133`	`spawnArgs.push(FLAG_SILENT)`