Harden npm install security (#153)

ybiquitous · web-flow · commit 99403a03ce17 · 2026-05-05T15:21:21.000+09:00
diff --git a/.npmrc b/.npmrc
@@ -1,2 +1,5 @@
+allow-git = "none"
 engine-strict = true
+ignore-scripts = true
+min-release-age = 3 # days
 tag-version-prefix = ""
