A package.json with the "prepare" script "compromise-the-supply-chain".
A gentle reminder that while `pnpm install` (or `bun install`) doesn't run the lifecycle scripts of the dependencies by default, it *does* run them from the repo's own package.json.
Let's be mindful when cloning and exploring all those new & exciting projects on our local machines.