Block install scripts for npm plugins

CHANGELOG · original

Changed plugins installed from an npm source to be fetched with npm pack --ignore-scripts and integrity-verified, so a package's install scripts no longer run