From 477a25807a8c6cb323474d7d473ad38c3fa33726 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bed=C5=99ich=20Schindler?= <bedrich.schindler@gmail.com>
Date: Thu, 13 Aug 2026 11:51:47 +0000
Subject: [PATCH] Skip writing lockfile hash in `postinstall` when installed as
 a dependency (#725)

---
 scripts/write-lockfile-hash.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/scripts/write-lockfile-hash.sh b/scripts/write-lockfile-hash.sh
index 6b63f2f6..6148df12 100755
--- a/scripts/write-lockfile-hash.sh
+++ b/scripts/write-lockfile-hash.sh
@@ -11,5 +11,11 @@ SCRIPT_DIR="$( cd "$( dirname "$0" )" && pwd )"
 # Change to the parent directory of the script
 cd "$SCRIPT_DIR/.."
 
+# Skip when running as an installed dependency,
+# the published package contains no package-lock.json.
+if [ ! -f package-lock.json ]; then
+  exit 0
+fi
+
 # Record the hash of the lockfile we just installed against
 sha256sum package-lock.json | awk '{print $1}' > "$LOCK_HASH_FILE"