Function checkAllowScripts

deps/npm/lib/utils/check-allow-scripts.js:18–25

({ arb, npm, tree, includeWhenIgnored = false })

// ignore-scripts is set, so approve/deny can show what you'd move from a
// blanket ignore-scripts to an allowlist. Execution callers leave it false.
const checkAllowScripts = async ({ arb, npm, tree, includeWhenIgnored = false }) =>
  collectUnreviewedScripts({
    tree: tree || arb.actualTree,
    policy: arb.options?.allowScripts || null,
    ignoreScripts: !!arb.options?.ignoreScripts,
    dangerouslyAllowAllScripts: !!npm?.flatOptions?.dangerouslyAllowAllScripts,
    includeWhenIgnored,
  })

module.exports = checkAllowScripts