From 34e9ee57f59d680db718e3a3466caceef7c24932 Mon Sep 17 00:00:00 2001 From: Niklas Wenzel Date: Fri, 7 Aug 2026 14:53:51 +0200 Subject: [PATCH] ui: set npm `min-release-age` to protect against supply-chain attacks (#26711) * ui: set npm `min-release-age` to protect against supply-chain attacks * ui: bump to 7 days --- tools/ui/.npmrc | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/ui/.npmrc b/tools/ui/.npmrc index 32e6012709..0a690322a4 100644 --- a/tools/ui/.npmrc +++ b/tools/ui/.npmrc @@ -1,2 +1,3 @@ engine-strict=true ignore-scripts=true +min-release-age=7