From 3dad33e47582d236db4b3dbbd45862436ead1553 Mon Sep 17 00:00:00 2001
From: bastien <chanot.bastien@gmail.com>
Date: Wed, 30 Sep 2026 14:26:56 +0200
Subject: [PATCH] fix(settings): deny the npm global-install aliases

The deny list matched `npm install -g` only; `npm i -g` and the
`--global` spellings went through.
---
 settings.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/settings.json b/settings.json
index a008190..c99289a 100644
--- a/settings.json
+++ b/settings.json
@@ -119,6 +119,9 @@
       "Bash(systemctl *)",
       "Bash(service *)",
       "Bash(npm install -g *)",
+      "Bash(npm i -g *)",
+      "Bash(npm install --global *)",
+      "Bash(npm i --global *)",
       "Read(**/.env)",
       "Read(**/.env.*)",
       "Read(**/secrets/**)",