ignore script related changes

Author: cx-aniket-shinde

.github/workflows/ci.yml

@@ -18,12 +18,19 @@ jobs:
           sudo apt-get install git-lfs
           git lfs install
 
+      - name: Verify single lockfile
+        run: |
+          if [ -f package-lock.json ] && [ -f yarn.lock ]; then
+            echo "ERROR: Both lockfiles exist"
+            exit 1
+          fi
+
       - name: Use Node.js 22.11.0
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 22.11.0
           registry-url: https://npm.pkg.github.com/
-      - run: npm ci
+      - run: npm ci --ignore-scripts
       - name: Code Linting
         run: npm run lint
       - run: npm run build --if-present

.github/workflows/release.yml

@@ -77,6 +77,14 @@ jobs:
           fetch-depth: 0
           lfs: true  # Ensure LFS files are checked out
 
+      # VERIFY SINGLE LOCKFILE
+      - name: Verify single lockfile
+        run: |
+          if [ -f package-lock.json ] && [ -f yarn.lock ]; then
+            echo "ERROR: Both lockfiles exist"
+            exit 1
+          fi
+
       # GIT CONFIGURATION
       - run: |
           git config user.name github-actions
@@ -133,7 +141,7 @@ jobs:
       # RUN NPM INSTALL AND BUILD
       - name: NPM ci and build
         run: |
-          npm ci
+          npm ci --ignore-scripts
           npm run build
 
       # CREATE PR FOR VERSION

.npmrc

@@ -0,0 +1,5 @@
+Default registry for most packages
+registry=https://npm.echohq.com/
+
+# Supply Chain Security Policy: Block lifecycle scripts
+ignore-scripts=true