10 Commits

Author SHA1 Message Date
minori 153edfeb43 deps: update typescript to 6.0.2
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m27s
2026-04-03 07:02:37 -07:00
hikari 9a4c1dd7b2 chore: replace .npmrc with pnpm-workspace.yaml
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 2m24s
2026-03-02 16:28:26 -08:00
minori f14b281e29 Merge pull request 'deps: update typescript to 5.9.3' (#6) from dependencies/update-typescript into main
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m50s
2026-02-26 07:03:15 -08:00
minori 46a78266d8 Merge pull request 'deps: update fastify to 5.7.1' (#3) from dependencies/update-fastify into main
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m26s
2026-02-25 07:03:02 -08:00
minori 42f36ecb41 Merge pull request 'deps: update @nhcarrigan/logger to 1.1.1' (#1) from dependencies/update--nhcarrigan-logger into main
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m20s
2026-02-23 20:46:29 -08:00
minori 85c7e51c05 deps: update fastify to 5.7.4
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m14s
2026-02-13 07:07:52 -08:00
minori 5b5731a2a1 deps: update fastify to 5.7.2
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 2m12s
2026-02-05 07:12:23 -08:00
minori f460ac5315 deps: update typescript to 5.9.3
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m34s
2026-02-04 08:37:41 -08:00
minori 71ca78aeee deps: update fastify to 5.7.1
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m25s
2026-02-04 08:37:23 -08:00
minori 96a7cc97d6 deps: update @nhcarrigan/logger to 1.1.1
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m32s
2026-02-04 08:37:09 -08:00
4 changed files with 289 additions and 303 deletions
-25
View File
@@ -1,25 +0,0 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+4 -4
View File
@@ -15,15 +15,15 @@
"license": "ISC",
"packageManager": "pnpm@10.15.0",
"dependencies": {
"@nhcarrigan/logger": "1.0.0",
"@nhcarrigan/logger": "1.1.1",
"discord.js": "14.22.1",
"fastify": "5.5.0"
"fastify": "5.7.4"
},
"devDependencies": {
"@nhcarrigan/eslint-config": "5.2.0",
"@nhcarrigan/typescript-config": "4.0.0",
"@types/node": "24.3.0",
"eslint": "10.0.0",
"typescript": "5.9.2"
"eslint": "9.34.0",
"typescript": "6.0.2"
}
}
+264 -274
View File
File diff suppressed because it is too large Load Diff
+21
View File
@@ -0,0 +1,21 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false