Function GenerateNpmInstallSteps

pkg/workflow/nodejs.go:55–57

By default, --ignore-scripts is added to the install command to prevent pre/post install scripts from executing (supply chain security). Pass runInstallScripts=true to allow scripts. By default, a 3-day npm dependency cooldown is enabled via NPM_CONFIG_MIN_RELEASE_AGE. Pass cooldownEnabled=false to

(packageName, version, stepName, cacheKeyPrefix string, includeNodeSetup bool, runInstallScripts bool, cooldownEnabled bool)

//
// Returns steps for installing the npm package (optionally with Node.js setup)
func GenerateNpmInstallSteps(packageName, version, stepName, cacheKeyPrefix string, includeNodeSetup bool, runInstallScripts bool, cooldownEnabled bool) []GitHubActionStep {
	return GenerateNpmInstallStepsWithScope(packageName, version, stepName, cacheKeyPrefix, includeNodeSetup, true, runInstallScripts, cooldownEnabled)
}

// BuildStandardNpmEngineInstallSteps creates standard npm installation steps for engines.
// This helper extracts the common pattern shared by Copilot, Codex, and Claude engines.