Remove use of "--unsafe-perm" with npm #5791

Activity

1. knolleary

   added

   needs-triage

   runtime

   and removed

   needs-triage

   on Jun 9, 2026
2. knolleary

   added this to the 5.0 milestone on Jun 9, 2026
3. knolleary

   added the

   Task

   issue type on Jun 12, 2026
4. nycynik commented on Aug 11, 2026

   

   nycynik

   on Aug 11, 2026

   More actions

   Just a happy user here, adding some information from the web. And a note, this one almost made me not use node-red to begin with. The flag is scary.

   Here is what the docs say it's for:

   The --unsafe-perm flag in npm allows package scripts to run with root/administrator privileges. It stops npm from switching the user ID (UID) and group ID (GID) down to a lower-level user during global installations. This prevents permission errors when building native modules as a root user