Just dont use npm. Use a package manager which doesn't execute postinstall by default. The switch is incredibly simple.
Which package manager is that, and what caveats does it offer?
alt Hacker News
Which package manager is that, and what caveats does it offer?