Merge pull request #7 from gitpod-io/pde-128-disable-npm-scripts

Disable npm lifecycle scripts for security

Author: jespino

.gitpod.yml

@@ -1,6 +1,6 @@
 # List the start up tasks. Learn more https://www.gitpod.io/docs/config-start-tasks/
 tasks:
-  - init: npm install # runs during prebuild
+  - init: npm install --ignore-scripts # runs during prebuild
     command: npm start
 
 # List the ports to expose. Learn more https://www.gitpod.io/docs/config-ports/