Skip to content

fix: don't warn about allowScripts on a root that is its own workspace - #10211

Open
Vanilagy wants to merge 1 commit into
npm:latestfrom
Vanilagy:fix-root-self-workspace-allow-scripts-warning
Open

Vanilagy wants to merge 1 commit into
npm:latestfrom
Vanilagy:fix-root-self-workspace-allow-scripts-warning

Conversation

@Vanilagy

@Vanilagy Vanilagy commented Nov 3, 2026 •

Copy link
Copy Markdown

With "workspaces": [".", ...], the root also appears as a workspace link (node_modules/<root>) whose package is the root package.json.
npm install then warns that the root's own allowScripts is ignored and should be moved to the project root package.json.

I have precisely this setup in Mediabunny where I hit this warning.

AI disclosure: Fix written by Opus 5.5.

@Vanilagy
Vanilagy requested a review from a team as a code owner November 3, 2026 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant