fix(npm): ignore scripts on full install

lib/manager/npm/post-update/lerna.js

@@ -31,7 +31,7 @@ async function generateLockFiles(lernaClient, tmpDir, env, skipInstalls) {
       if (skipInstalls) {
         params = '--package-lock-only --no-audit';
       } else {
-        params = '--no-audit';
+        params = '--ignore-scripts  --no-audit';
       }
     } else {
       params =

lib/manager/npm/post-update/npm.js

@@ -56,7 +56,7 @@ async function generateLockFile(tmpDir, env, filename, skipInstalls) {
     if (skipInstalls) {
       cmd += ' --package-lock-only --no-audit';
     } else {
-      cmd += ' --no-audit';
+      cmd += ' --ignore-scripts --no-audit';
     }
     logger.debug(`Using npm: ${cmd}`);
     // TODO: Switch to native util.promisify once using only node 8