We want a list of scripts that are allowed to run post install, this prevents a typo, or genuine new dep from running something untrusted without explicit approval from the engineer adding it.

We want to just take our current set of scripts and allow list them to prevent new scripts from running automatically.

https://docs.npmjs.com/cli/v12/using-npm/config#strict-allow-scripts