Skip to content

npm: harden default config#1740

Open
alxndrsn wants to merge 3 commits intogetodk:nextfrom
alxndrsn:ignore-scripts
Open

npm: harden default config#1740
alxndrsn wants to merge 3 commits intogetodk:nextfrom
alxndrsn:ignore-scripts

Conversation

@alxndrsn
Copy link
Copy Markdown
Contributor

@alxndrsn alxndrsn commented Mar 31, 2026

  • ignore scripts
  • add 14 day cooldown period for dependencies

See:

What has been done to verify that this works as intended?

CI.

Why is this the best possible solution? Were any other approaches considered?

Other approaches not considered.

How does this change affect users? Describe intentional changes to behavior and behavior that could have accidentally been affected by code changes. In other words, what are the regression risks?

Might affect devs or CI if there is a dep which requires scripts, or is too new. This should be detected quickly and would not affect users.

Does this change require updates to documentation? If so, please file an issue here and include the link below.

No.

Before submitting this PR, please make sure you have:

  • branched off and targeted the next branch OR only changed documentation/infrastructure (master is stable and used in production)
  • verified that any code or assets from external sources are properly credited in comments or that everything is internally sourced

@alxndrsn alxndrsn changed the base branch from master to next March 31, 2026 08:44
@alxndrsn alxndrsn changed the title Ignore scripts npm: ignore scripts by default Mar 31, 2026
@alxndrsn alxndrsn marked this pull request as ready for review March 31, 2026 08:51
@alxndrsn alxndrsn changed the title npm: ignore scripts by default npm: harden default config Mar 31, 2026
alxndrsn and others added 2 commits April 4, 2026 07:51
Co-authored-by: Matthew White <matthew-white@users.noreply.github.com>
Co-authored-by: Alex Anderson <191496+alxndrsn@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants