diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..7d4647e
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,3 @@
+# Disable automatic execution of dependency lifecycle scripts during install/ci
+# Mitigates supply-chain compromise risks from malicious package install scripts
+ignore-scripts=true
diff --git a/test-project/.npmrc b/test-project/.npmrc
new file mode 100644
index 0000000..7d4647e
--- /dev/null
+++ b/test-project/.npmrc
@@ -0,0 +1,3 @@
+# Disable automatic execution of dependency lifecycle scripts during install/ci
+# Mitigates supply-chain compromise risks from malicious package install scripts
+ignore-scripts=true