build: disable NODE_OPTIONS

Production binaries shall NOT take NODE_OPTIONS from end-users. Only the users (developers who use pkg to package their project) should have control over the flags via the "bake in" (--options) mechanism. Bug: vercel/pkg#954, vercel/pkg#989, vercel/pkg#1194, vercel/pkg#1517
Hypfer · May 7, 2022 · 624cfb0 · 624cfb0
1 parent 1f4840f
commit 624cfb0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/build.ts b/lib/build.ts
@@ -48,6 +48,9 @@ function getConfigureArgs(major: number, targetPlatform: string): string[] {
     }
   }
 
+  // production binaries do NOT take NODE_OPTIONS from end-users
+  args.push('--without-node-options');
+
   // DTrace
   args.push('--without-dtrace');