From 4fd6b3b2226327903f28fa586d51244bc57483d3 Mon Sep 17 00:00:00 2001 From: Pragyash Date: Tue, 28 Jul 2026 21:49:44 +0530 Subject: [PATCH 1/2] DATA-13529: add hardened .npmrc for supply-chain audit --- .npmrc | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .npmrc diff --git a/.npmrc b/.npmrc new file mode 100644 index 0000000..2de2387 --- /dev/null +++ b/.npmrc @@ -0,0 +1,6 @@ +ignore-scripts=true +strict-ssl=true +save-exact=true +audit-level=high +engine-strict=true +legacy-peer-deps=false From 12a127829b9b01f069ebd8f7e5820cc7ea4a4fbb Mon Sep 17 00:00:00 2001 From: Pragyash Date: Tue, 28 Jul 2026 21:55:01 +0530 Subject: [PATCH 2/2] DATA-13529: add min-release-age=7 to satisfy semgrep npm-missing-minimum-release-age --- .npmrc | 1 + 1 file changed, 1 insertion(+) diff --git a/.npmrc b/.npmrc index 2de2387..47384c0 100644 --- a/.npmrc +++ b/.npmrc @@ -4,3 +4,4 @@ save-exact=true audit-level=high engine-strict=true legacy-peer-deps=false +min-release-age=7