openclaw/.npmrc
Peter Steinberger 939ca50837
chore(deps): enforce seven-day npm cooldowns and refresh eligible pins (#132385)
* chore(deps): enforce seven-day npm cooldowns

* fix(ci): preserve lint policy and isolate npm config fixtures

* docs(deps): clarify source cooldown toolchain requirements

* refactor(qa): share credential-safe setup error boundary

* test(deps): align reporting fixture with cooldown policy
2026-08-29 02:07:05 -07:00

8 lines
432 B
Text

# Source installs require pinned pnpm; its settings are in pnpm-workspace.yaml.
# npm tooling needs npm 11.19+ for install/pack cooldowns and exclusions.
# Node 22's bundled npm 10 does not enforce these settings.
# npm expresses release age in days; pnpm uses minutes.
min-release-age=7
# Trusted Codex runtimes are outside the dependency cooldown.
min-release-age-exclude[]=@openai/codex
min-release-age-exclude[]=@openai/codex-*