Nx
Enterprise
Nx
fix(js): preserve npm allowScripts allowlist in pruned package.json The @nx/js:prune-lockfile executor built its output package.json from only the project package.json, so the npm `allowScripts` install-script allowlist (which `npm approve-scripts` writes to the workspace root) was dropped from the pruned output. `npm ci` in the deployed artifact then ran install scripts the allowlist was meant to gate, and under npm's upcoming strict mode an approved script would instead be blocked. Carry the root `allowScripts` into the pruned package.json, with any project-level entries preserved and winning on conflict. This mirrors the existing `pnpm.allowBuilds` handling in createPackageJson.
nx-cloud record -- nx sync:check
Sign in / Sign up
Open main menu
Succeeded
CI Pipeline Execution
nx-cloud record -- nx sync:check
Click to copy
Linux
4 CPU cores
c1944c46
36016