From 805a98139a4abebee5939470fd472be0f3d4ce51 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:03:00 +0200 Subject: [PATCH 1/3] chore: add npm supply-chain hardening: .npmrc --- .npmrc | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 .npmrc diff --git a/.npmrc b/.npmrc new file mode 100644 index 0000000..f28ba90 --- /dev/null +++ b/.npmrc @@ -0,0 +1,2 @@ +ignore-scripts=true +min-release-age=3 From 781b2180da8098e9bb899ddf2031db8a63d1c471 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:03:04 +0200 Subject: [PATCH 2/3] chore: add npm supply-chain hardening: bunfig.toml --- bunfig.toml | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 bunfig.toml diff --git a/bunfig.toml b/bunfig.toml new file mode 100644 index 0000000..55af992 --- /dev/null +++ b/bunfig.toml @@ -0,0 +1,2 @@ +[install] +minimumReleaseAge = 259200 From 352c10ccb00789d19f4dbac3094923a88223eadb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?kitze=20=F0=9F=9A=80?= Date: Wed, 13 May 2026 08:03:07 +0200 Subject: [PATCH 3/3] chore: add npm supply-chain hardening: .github/dependabot.yml --- .github/dependabot.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..cbde4bb --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: / + schedule: + interval: weekly + cooldown: + default-days: 7 + semver-major-days: 7 + semver-minor-days: 7 + semver-patch-days: 7