I wish package.json had an option where I could explicitly mark which packages can run postinstall scripts.
Here's an RFC on exactly that: https://github.com/npm/rfcs/discussions/80
Here's an RFC on exactly that: https://github.com/npm/rfcs/discussions/80