chore: set security best practices npm flags in npmrc

2026-05-01 16:09:36 +00:00 · 2025-12-16 10:40:04 +00:00
parent 93baf5207a
commit 45960c6ec7
1 changed files with 5 additions and 0 deletions
@@ -0,0 +1,5 @@
+# Do not run any npm lifecycle hook scripts (especially after installation).
+# Most dependencies should be fine with this.
+ignore-scripts=true
+# Always prefer locked versions from lockfile when installing.
+save-exact=true