[stickerdaniel]

build_deps runs npm install, and npm also sends the installed dependency tree to the registry's audit endpoint. Nothing reads the audit report here. When that endpoint stalls, the install waits for it, and on a self-hosted backend this ran pushes into the 300 s evaluate_push timeout. --no-audit skips only the audit request.

I ran both commands against a local registry proxy that never answers the audit request. npm install was still waiting after 60 s, and npm install --no-audit finished in 2 s with the same packages installed.

Implemented with Claude Opus 5.5 (xhigh) in Claude Code via T3 Code.

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

[cubic-dev-ai]

No issues found across 1 file

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}