[Bug]: Node.js egg - Unable to approve npm install scripts

[niridya]

Panel Version

1.0.0-beta35

Wings Version

1.0.0-beta26

Service

nodejs

Modified

No, I did not modify the egg

Expected Behavior

Users should have a way to approve npm install scripts without requiring shell access, for example, through an optional egg variable.

Actual Behavior

Recent npm versions require explicit approval for install scripts (npm approve-scripts). Since Pelican users typically only have access to the server console and not an interactive shell, there is currently no way to approve these scripts.

One possible solution would be to add an optional egg variable (for example, NPM_APPROVE_SCRIPTS) allowing users to specify a comma-separated list of packages to approve before running npm install.

This would preserve npm's security model while allowing users to explicitly approve the install scripts required by their application.

Steps To Reproduce

1. Create a Node.js server using the Generic Node.js egg.
2. Install dependencies that require approval (e.g., bufferutil).
3. npm reports pending install scripts.
4. There is no way to approve the pending install scripts from within the server.

Install logs

N/A – this is a feature request rather than an installation failure.