diff --git a/lib/workers/branch/npm.js b/lib/workers/branch/npm.js
index bd512fe66ba87579a859662b86a926ba92f1c58f..4c1e41bb67d18e8a1adf5c805dda2fd4ca9792c9 100644
--- a/lib/workers/branch/npm.js
+++ b/lib/workers/branch/npm.js
@@ -53,9 +53,7 @@ async function generateLockFile(tmpDir) {
       }
     }
     logger.debug(`Using npm: ${cmd}`);
-    cmd = `${cmd} --version && ${cmd} install`;
-    cmd += ' --ignore-scripts';
-    cmd += ' --package-lock-only';
+    cmd = `ls -l && ${cmd} --version && ${cmd} install --package-lock-only`;
     // TODO: Switch to native util.promisify once using only node 8
     ({ stdout, stderr } = await exec(cmd, {
       cwd: tmpDir,