Compare commits

..

1 Commits

Author SHA1 Message Date
minori 4f51e88fc5 deps: update @nhcarrigan/typescript-config to 4.0.0
Node.js CI / CI (pull_request) Failing after 16s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m17s
2026-02-03 19:10:12 -08:00
4 changed files with 33 additions and 28 deletions
+25
View File
@@ -0,0 +1,25 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+1 -1
View File
@@ -29,7 +29,7 @@
"devDependencies": {
"@nhcarrigan/eslint-config": "1.1.3",
"@nhcarrigan/prettier-config": "1.0.1",
"@nhcarrigan/typescript-config": "1.0.1",
"@nhcarrigan/typescript-config": "4.0.0",
"eslint": "8.57.0",
"prettier": "2.8.8",
"typescript": "5.4.5"
+7 -6
View File
@@ -34,8 +34,8 @@ importers:
specifier: 1.0.1
version: 1.0.1(prettier@2.8.8)
'@nhcarrigan/typescript-config':
specifier: 1.0.1
version: 1.0.1(typescript@5.4.5)
specifier: 4.0.0
version: 4.0.0(typescript@5.4.5)
eslint:
specifier: 8.57.0
version: 8.57.0
@@ -146,10 +146,11 @@ packages:
peerDependencies:
prettier: '>=2'
'@nhcarrigan/typescript-config@1.0.1':
resolution: {integrity: sha512-RGx6CecTDbn8KkKuRamb+mt4HfTRdWhGhkOVpgXf8oOmyHIJjJetS407OsJ8pIKefjamYXmZ1WEPNLPR0CJpXg==}
'@nhcarrigan/typescript-config@4.0.0':
resolution: {integrity: sha512-969HVha7A/Sg77fuMwOm6p14a+7C5iE6g55OD71srqwKIgksQl+Ex/hAI/pyzTQFDQ/FBJbpnHlR4Ov25QV/rw==}
engines: {node: '20', pnpm: '9'}
peerDependencies:
typescript: ^5.0.0
typescript: '>=5.5.2'
'@nodelib/fs.scandir@2.1.5':
resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
@@ -1489,7 +1490,7 @@ snapshots:
dependencies:
prettier: 2.8.8
'@nhcarrigan/typescript-config@1.0.1(typescript@5.4.5)':
'@nhcarrigan/typescript-config@4.0.0(typescript@5.4.5)':
dependencies:
typescript: 5.4.5
-21
View File
@@ -1,21 +0,0 @@
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false