From 45960c6ec7d3bdccc087b63936a621f715ec156f Mon Sep 17 00:00:00 2001
From: Jan Laupetin <jan@laupetin.net>
Date: Tue, 16 Dec 2025 10:40:04 +0000
Subject: [PATCH] chore: set security best practices npm flags in npmrc

---
 src/ModManUi/.npmrc | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 src/ModManUi/.npmrc

diff --git a/src/ModManUi/.npmrc b/src/ModManUi/.npmrc
new file mode 100644
index 00000000..62b96bc3
--- /dev/null
+++ b/src/ModManUi/.npmrc
@@ -0,0 +1,5 @@
+# Do not run any npm lifecycle hook scripts (especially after installation).
+# Most dependencies should be fine with this.
+ignore-scripts=true
+# Always prefer locked versions from lockfile when installing.
+save-exact=true