Skip to content

Commit 7ce26c6

Browse files
amitsi-bsclaude
andcommitted
LTS-3295: add min-release-age=7 to .npmrc (clears semgrep npm-missing-minimum-release-age)
Semgrep p/default flagged `npm-missing-minimum-release-age` on this .npmrc — a supply-chain rule (npm v11.10+) wanting a cooldown before resolving newly-published package versions. Adding `min-release-age=7` clears it (semgrep p/default now reports 0 findings locally). Validated inert-safe on the runner pod via the paired Playwright prod run (pod npm treats it as harmless today; activates as protection on npm >=11.10). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent b12f55b commit 7ce26c6

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

.npmrc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,3 +19,4 @@ audit-level=high
1919
legacy-peer-deps=false
2020
ignore-scripts=true
2121
engine-strict=true
22+
min-release-age=7

0 commit comments

Comments
 (0)