Isolated-vm blocked by Nexus Policy

Questions
1

Hi everyone,

I am looking to deploy n8n within my organization, but we have run into a significant blocker. Our internal security policy explicitly flags and prohibits the use of the isolated-vm library.

Describe the problem/error/question

Our internal artifact repository (Nexus) blocks the download of isolated-vm entirely. As a result, npm install fails immediately because the dependency cannot be fetched. I also do not have direct access to GitHub to fork the repository.

As I understand it, n8n uses isolated-vm to sandbox the Code Node. Because this dependency is a violation of our security standards. Is there a way to install n8n without the isolated-vm dependency?

3

If you can run Docker, just use the official n8n Docker image instead of doing npm install, it comes pre-built so you skip the Nexus registry entirely and isolated-vm is already compiled in there