From 52bd60a79997a10694d54d203d3fe31db1e60fad Mon Sep 17 00:00:00 2001 From: Jan Laupetin Date: Fri, 3 Apr 2026 10:17:44 +0200 Subject: [PATCH] chore: refuse to use npm version that does not support min-release-age --- src/ModManUi/.npmrc | 3 ++- src/ModManUi/package-lock.json | 3 +++ src/ModManUi/package.json | 6 ++++++ 3 files changed, 11 insertions(+), 1 deletion(-) diff --git a/src/ModManUi/.npmrc b/src/ModManUi/.npmrc index 276540c2..d33a11a7 100644 --- a/src/ModManUi/.npmrc +++ b/src/ModManUi/.npmrc @@ -5,4 +5,5 @@ ignore-scripts=true save-exact=true # Only take packages that are at least 3 days old since most supply-chain attacks may be mitigated until then min-release-age=3 - +# Refuse to use engines lower than specified +engine-strict=true diff --git a/src/ModManUi/package-lock.json b/src/ModManUi/package-lock.json index f2d10292..60543e3d 100644 --- a/src/ModManUi/package-lock.json +++ b/src/ModManUi/package-lock.json @@ -37,6 +37,9 @@ "vite-plugin-vue-devtools": "8.1.1", "vitest": "4.1.2", "vue-tsc": "3.2.6" + }, + "engines": { + "npm": ">=11.10.0" } }, "node_modules/@asamuzakjp/css-color": { diff --git a/src/ModManUi/package.json b/src/ModManUi/package.json index 9379c9c1..4d0669eb 100644 --- a/src/ModManUi/package.json +++ b/src/ModManUi/package.json @@ -42,5 +42,11 @@ "vite-plugin-vue-devtools": "8.1.1", "vitest": "4.1.2", "vue-tsc": "3.2.6" + }, + "enginesComment":{ + "npm": "Required for min-release-age setting" + }, + "engines": { + "npm": ">=11.10.0" } }