generated from nhcarrigan/template
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 4f51e88fc5 |
@@ -0,0 +1,25 @@
|
||||
# Package Manager Configuration
|
||||
# Force pnpm usage - breaks npm/yarn intentionally
|
||||
node-linker=pnpm
|
||||
|
||||
# Security: Disable all lifecycle scripts
|
||||
ignore-scripts=true
|
||||
enable-pre-post-scripts=false
|
||||
|
||||
# Security: Require packages to be 10+ days old before installation
|
||||
minimum-release-age=14400
|
||||
|
||||
# Security: Verify package integrity hashes
|
||||
verify-store-integrity=true
|
||||
|
||||
# Security: Enforce strict trust policies
|
||||
trust-policy=strict
|
||||
|
||||
# Security: Strict peer dependency resolution
|
||||
strict-peer-dependencies=true
|
||||
|
||||
# Performance: Use symlinks for node_modules
|
||||
symlink=true
|
||||
|
||||
# Lockfile: Ensure lockfile is not modified during install
|
||||
frozen-lockfile=false
|
||||
+1
-1
@@ -29,7 +29,7 @@
|
||||
"devDependencies": {
|
||||
"@nhcarrigan/eslint-config": "1.1.3",
|
||||
"@nhcarrigan/prettier-config": "1.0.1",
|
||||
"@nhcarrigan/typescript-config": "1.0.1",
|
||||
"@nhcarrigan/typescript-config": "4.0.0",
|
||||
"eslint": "8.57.0",
|
||||
"prettier": "2.8.8",
|
||||
"typescript": "5.4.5"
|
||||
|
||||
Generated
+7
-6
@@ -34,8 +34,8 @@ importers:
|
||||
specifier: 1.0.1
|
||||
version: 1.0.1(prettier@2.8.8)
|
||||
'@nhcarrigan/typescript-config':
|
||||
specifier: 1.0.1
|
||||
version: 1.0.1(typescript@5.4.5)
|
||||
specifier: 4.0.0
|
||||
version: 4.0.0(typescript@5.4.5)
|
||||
eslint:
|
||||
specifier: 8.57.0
|
||||
version: 8.57.0
|
||||
@@ -146,10 +146,11 @@ packages:
|
||||
peerDependencies:
|
||||
prettier: '>=2'
|
||||
|
||||
'@nhcarrigan/typescript-config@1.0.1':
|
||||
resolution: {integrity: sha512-RGx6CecTDbn8KkKuRamb+mt4HfTRdWhGhkOVpgXf8oOmyHIJjJetS407OsJ8pIKefjamYXmZ1WEPNLPR0CJpXg==}
|
||||
'@nhcarrigan/typescript-config@4.0.0':
|
||||
resolution: {integrity: sha512-969HVha7A/Sg77fuMwOm6p14a+7C5iE6g55OD71srqwKIgksQl+Ex/hAI/pyzTQFDQ/FBJbpnHlR4Ov25QV/rw==}
|
||||
engines: {node: '20', pnpm: '9'}
|
||||
peerDependencies:
|
||||
typescript: ^5.0.0
|
||||
typescript: '>=5.5.2'
|
||||
|
||||
'@nodelib/fs.scandir@2.1.5':
|
||||
resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
|
||||
@@ -1489,7 +1490,7 @@ snapshots:
|
||||
dependencies:
|
||||
prettier: 2.8.8
|
||||
|
||||
'@nhcarrigan/typescript-config@1.0.1(typescript@5.4.5)':
|
||||
'@nhcarrigan/typescript-config@4.0.0(typescript@5.4.5)':
|
||||
dependencies:
|
||||
typescript: 5.4.5
|
||||
|
||||
|
||||
@@ -1,21 +0,0 @@
|
||||
# Security
|
||||
|
||||
# Do not execute any scripts of installed packages (project scripts still run)
|
||||
ignoreDepScripts: true
|
||||
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
|
||||
enablePrePostScripts: false
|
||||
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
|
||||
minimumReleaseAge: 14400
|
||||
# Fail if a package's trust level has decreased compared to previous releases
|
||||
trustPolicy: no-downgrade
|
||||
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
|
||||
trustPolicyIgnoreAfter: 525960
|
||||
# Fail if there are missing or invalid peer dependencies
|
||||
strictPeerDependencies: true
|
||||
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
|
||||
blockExoticSubdeps: true
|
||||
|
||||
# Lockfile
|
||||
|
||||
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
|
||||
preferFrozenLockfile: false
|
||||
Reference in New Issue
Block a user