From fc409a103b1ac2bf28ac53544dbe10e457fe5014 Mon Sep 17 00:00:00 2001
From: Etienne Dusseault <etienne.dusseault@gmail.com>
Date: Thu, 4 Feb 2021 09:23:12 +0800
Subject: [PATCH] Add .yarnrc to disable scripts (#10354)

* add yarn rc file to disable scripts

* remove ignore scripts in CI

* re-add entry

* add lavamoat preinstall always fail

* allow-scripts - add missing package to denylist

Co-authored-by: kumavis <kumavis@users.noreply.github.com>
---
 .circleci/scripts/deps-install.sh | 2 +-
 .yarnrc                           | 1 +
 package.json                      | 4 +++-
 yarn.lock                         | 5 +++++
 4 files changed, 10 insertions(+), 2 deletions(-)
 create mode 100644 .yarnrc

diff --git a/.circleci/scripts/deps-install.sh b/.circleci/scripts/deps-install.sh
index 06b4748a9..cba42c416 100755
--- a/.circleci/scripts/deps-install.sh
+++ b/.circleci/scripts/deps-install.sh
@@ -5,7 +5,7 @@ set -x
 # Exit immediately if a command exits with a non-zero status.
 set -e
 
-yarn --frozen-lockfile --ignore-scripts --har
+yarn --frozen-lockfile --har
 
 # Move HAR file into directory with consistent name so that we can cache it
 mkdir -p build-artifacts/yarn-install-har
diff --git a/.yarnrc b/.yarnrc
new file mode 100644
index 000000000..2088d635c
--- /dev/null
+++ b/.yarnrc
@@ -0,0 +1 @@
+ignore-scripts true
\ No newline at end of file
diff --git a/package.json b/package.json
index c731fbfe4..6fd78e3cb 100644
--- a/package.json
+++ b/package.json
@@ -75,6 +75,7 @@
     "@download/blockies": "^1.0.3",
     "@formatjs/intl-relativetimeformat": "^5.2.6",
     "@fortawesome/fontawesome-free": "^5.13.0",
+    "@lavamoat/preinstall-always-fail": "^1.0.0",
     "@material-ui/core": "^4.11.0",
     "@metamask/contract-metadata": "^1.22.0",
     "@metamask/controllers": "^5.1.0",
@@ -322,7 +323,8 @@
       "ursa-optional": false,
       "gc-stats": false,
       "github:assemblyscript/assemblyscript": false,
-      "tiny-secp256k1": false
+      "tiny-secp256k1": false,
+      "@lavamoat/preinstall-always-fail": false
     }
   }
 }
diff --git a/yarn.lock b/yarn.lock
index f937017d1..89f28bf8b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1962,6 +1962,11 @@
     yargs "^16.2.0"
     yarn-logical-tree "^1.0.2"
 
+"@lavamoat/preinstall-always-fail@^1.0.0":
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/@lavamoat/preinstall-always-fail/-/preinstall-always-fail-1.0.0.tgz#e78a6e3d9e212a4fef869ec37d4f5fb498dea373"
+  integrity sha512-vD2DcC0ffJj1w2y1Lu0OU39wHmlPEd2tCDW04Bm6Kf4LyRnCHCezTsS8yzeSJ+4so7XP+TITuR5FGJRWxPb+GA==
+
 "@material-ui/core@^4.11.0":
   version "4.11.0"
   resolved "https://registry.yarnpkg.com/@material-ui/core/-/core-4.11.0.tgz#b69b26e4553c9e53f2bfaf1053e216a0af9be15a"