From a1c2a048fb280cb969e687e619ffdbadc53d033d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:07:46 +0200 Subject: [PATCH 1/3] chore: add npm supply-chain hardening: .npmrc --- .npmrc | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 .npmrc diff --git a/.npmrc b/.npmrc new file mode 100644 index 0000000..f28ba90 --- /dev/null +++ b/.npmrc @@ -0,0 +1,2 @@ +ignore-scripts=true +min-release-age=3 From fb93b020bee8e37fa1d49ebd18a2b1c524793436 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:07:51 +0200 Subject: [PATCH 2/3] chore: add npm supply-chain hardening: .yarnrc.yml --- .yarnrc.yml | 1 + 1 file changed, 1 insertion(+) create mode 100644 .yarnrc.yml diff --git a/.yarnrc.yml b/.yarnrc.yml new file mode 100644 index 0000000..a733421 --- /dev/null +++ b/.yarnrc.yml @@ -0,0 +1 @@ +npmMinimalAgeGate: "3d" From 167a7e32c151d3074360bf62c59163286b494fcd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:07:52 +0200 Subject: [PATCH 3/3] chore: add npm supply-chain hardening: .github/dependabot.yml --- .github/dependabot.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..cbde4bb --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: / + schedule: + interval: weekly + cooldown: + default-days: 7 + semver-major-days: 7 + semver-minor-days: 7 + semver-patch-days: 7