Skip to content

Commit e28eed0

Browse files
committed
chore: add min-release-age npm policy
Require package versions to be at least one day old before npm resolves them from the registry, reducing exposure to freshly published supply-chain attacks.
1 parent b5bc8b0 commit e28eed0

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

.npmrc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
min-release-age=1

0 commit comments

Comments
 (0)