Feature Description

Details

Some supply chain attacks are using postinstall scripts in the CI to infect dev machines.

AC

• make sure we are not depended on any of preinstall, install, postinstall in our packages
• replace npm install with npm install --ignore-scripts in all github actions and make files or other scripts
• replace npm ci with npm ci --ignore-scripts in all github actions and make files or other scripts

Searched for Related Issues

• I have done a search for related issues and either found none, or noted them