Compare commits

..

1 Commits

Author SHA1 Message Date
minori 42d02ceeec deps: update @nhcarrigan/eslint-config to 5.2.0
Node.js CI / CI (pull_request) Failing after 22s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m19s
2026-02-03 19:09:54 -08:00
4 changed files with 3080 additions and 295 deletions
+25
View File
@@ -0,0 +1,25 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+1 -1
View File
@@ -27,7 +27,7 @@
}, },
"homepage": "https://github.com/nhcarrigan/oogie-woogie-boostie-woostie#readme", "homepage": "https://github.com/nhcarrigan/oogie-woogie-boostie-woostie#readme",
"devDependencies": { "devDependencies": {
"@nhcarrigan/eslint-config": "1.1.3", "@nhcarrigan/eslint-config": "5.2.0",
"@nhcarrigan/prettier-config": "1.0.1", "@nhcarrigan/prettier-config": "1.0.1",
"@nhcarrigan/typescript-config": "1.0.1", "@nhcarrigan/typescript-config": "1.0.1",
"eslint": "8.57.0", "eslint": "8.57.0",
+3054 -273
View File
File diff suppressed because it is too large Load Diff
-21
View File
@@ -1,21 +0,0 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false