NxEnterprise
    Nx
    fix(js): preserve npm allowScripts allowlist in pruned package.json The @nx/js:prune-lockfile executor built its output package.json from only the project package.json, so the npm `allowScripts` install-script allowlist (which `npm approve-scripts` writes to the workspace root) was dropped from the pruned output. `npm ci` in the deployed artifact then ran install scripts the allowlist was meant to gate, and under npm's upcoming strict mode an approved script would instead be blocked. Carry the root `allowScripts` into the pruned package.json, with any project-level entries preserved and winning on conflict. This mirrors the existing `pnpm.allowBuilds` handling in createPackageJson.
    nx affected --targets=lint,test,build,e2e,e2e-ci,format-native,lint-native,gradle:build-ci,vale,run
Sign in / Sign up
Succeeded
CI Pipeline Execution

nx affected --targets=lint,test,build,e2e,e2e-ci,format-native,lint-native,gradle:build-ci,vale,run

Click to copy
read-write access token used
c1944c4636016
1%

Potential flaky tasks

4 of 614 tasks retried.

32%

Cache hits

198 of 614 tasks used cache.

97%

Distribution saved time

41m 55s instead of 25h 10m 04s.

Atomizer enabled

48 groups of tasks optimized.

© 2026 - Nx Cloud

Terms of ServicePrivacy PolicyChangelogStatusDocsContact Nx CloudPricingCompany@NxDevTools