security: disable yarn postinstall scripts (#317)

ChristopherChudzicki · web-flow · commit f71b2f2ffe8d · 2025-09-25T10:29:42.000-04:00
Disable yarn's postinstall scripts to improve security by setting enableScripts: false in .yarnrc.yml
diff --git a/frontend-demo/.yarnrc.yml b/frontend-demo/.yarnrc.yml
@@ -1,3 +1,4 @@
 nodeLinker: node-modules
 
 yarnPath: .yarn/releases/yarn-4.5.1.cjs
+enableScripts: false

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`nodeLinker: node-modules`
`2`	`2`
`3`	`3`	`yarnPath: .yarn/releases/yarn-4.5.1.cjs`
	`4`	`+enableScripts: false`