mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 09:39:25 +00:00
* chore(deps): enforce seven-day npm cooldowns * fix(ci): preserve lint policy and isolate npm config fixtures * docs(deps): clarify source cooldown toolchain requirements * refactor(qa): share credential-safe setup error boundary * test(deps): align reporting fixture with cooldown policy
8 lines
432 B
Text
8 lines
432 B
Text
# Source installs require pinned pnpm; its settings are in pnpm-workspace.yaml.
|
|
# npm tooling needs npm 11.19+ for install/pack cooldowns and exclusions.
|
|
# Node 22's bundled npm 10 does not enforce these settings.
|
|
# npm expresses release age in days; pnpm uses minutes.
|
|
min-release-age=7
|
|
# Trusted Codex runtimes are outside the dependency cooldown.
|
|
min-release-age-exclude[]=@openai/codex
|
|
min-release-age-exclude[]=@openai/codex-*
|