Add --ignore-scripts to npm install of fix

Author: jdalton

src/commands/fix/npm-fix.mts

@@ -29,7 +29,15 @@ async function install(
   } as InstallOptions
   try {
     await runAgentInstall(pkgEnvDetails, {
-      args,
+      args: [
+        '--ignore-scripts',
+        '--no-audit',
+        '--no-fund',
+        '--no-progress',
+        '--no-save',
+        '--silent',
+        ...(args ?? []),
+      ],
       spinner,
       stdio: isDebug('stdio') ? 'inherit' : 'ignore',
     })

src/commands/fix/pnpm-fix.mts

@@ -40,13 +40,13 @@ async function install(
   try {
     await runAgentInstall(pkgEnvDetails, {
       args: [
-        ...(args ?? []),
         // Enable pnpm updates to pnpm-lock.yaml in CI environments.
         // https://pnpm.io/cli/install#--frozen-lockfile
         '--no-frozen-lockfile',
         // Enable a non-interactive pnpm install
         // https://github.com/pnpm/pnpm/issues/6778
         '--config.confirmModulesPurge=false',
+        ...(args ?? []),
       ],
       spinner,
       stdio: isDebug('stdio') ? 'inherit' : 'ignore',

test/socket-npm.test.mts

@@ -49,9 +49,9 @@ for (const npmDir of ['npm9', 'npm10', 'npm11']) {
               entryPath,
               'npm',
               'install',
-              'bowserify',
               '--no-audit',
               '--no-fund',
+              'bowserify',
             ],
             {
               cwd: path.join(npmFixturesPath, 'lacking-typosquat'),