diff --git a/.npmrc b/.npmrc
new file mode 100644
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+# supply chain security!
+ignore-scripts=true