Preinstall still not aborted in dependencies when using NPM

[neolitec]

Description

I would like to re-open #2 because the fix doesn't work for me.

I'm on OSX and process.cwd() === /Users/neolitec/.npm/_cacache/tmp/git-clone-15806b2b no matter if I use npm 6, 7, or 8.

process.cwd() doesn't contain node_modules so the package is not detected as a dependency (for which we don't want to check the PM) but actually as the root project.

It works for yarn and pnpm because they don't even seem to trigger the preinstall scripts from the dependencies for some reason.

Reproduction

You can reproduce by creating a new project using NPM and try npm i neolitec/repro-pnpm-project.

[nailuoGG]

in my case npm i in project-root

process.env.INIT_CWD is project root, but process.cwd() return the node_modules path

{
  cwd: '/Volumes/caseSensitiveDisk/Code/project-xxx/node_modules/@yt/sub-module',
  isInstalledAsDependency: true,
  INIT_CWD: '/Volumes/caseSensitiveDisk/Code/project-xxx',
  PROCESS_CWD: '/Volumes/caseSensitiveDisk/Code/project-xxx/node_modules/@yt/sub-module'
}

only-allow/bin.js

Line 16 in da4620f

const cwd = process.env.INIT_CWD || process.cwd()

so i delete process.env.INIT_CWD,and eveything is ok

env:
node v14.19.3
npm 6.14.17