I came across a package that was updating its git hooks with a post install script: ``` "postinstall": "npx simple-git-hooks", ``` When that package was installed as a dependency of another package, it installed the hooks in the parent package.