Two small package manager surprises: npm 10 runs a git dependency's prepare script even with --ignore-scripts, and Yarn runs a repository's yarnPath on any command, including yarn --version.