[WhyNotHugo]

> To see what would be blocked, run npm approve-scripts --allow-scripts-pending

This naming is atrocious: the verb is "allow", but this actually _displays_ a list of those unapproved? Was --show-blocked too obvious?