chore(deps): enforce npm package release age policy · e6e9e11b18 - recipe-app

chore(deps): enforce npm package release age policy

Test Suite / backend-pr-quick (push) Has been skipped

Details

Test Suite / quick-import-pr-quick (push) Has been skipped

Details

Test Suite / backend-full (push) Successful in 2m40s

Details

Test Suite / flutter-quality (push) Failing after 1m9s

Details

- Added `min-release-age=1` to backend/.npmrc to require packages to be at least 1 day old
- GitHub Actions backend jobs already use `npm ci` in backend/ directory, automatically enforcing the policy
- Updated README.md with supply-chain protection policy and operational procedures

BREAKING CHANGE: npm install/npm ci will now fail for packages younger than 1 day unless policy is temporarily overridden

This commit is contained in:

Nils-Johan Gynther

2026-05-24 19:40:48 +02:00

parent b04d157915

commit e6e9e11b18

3 changed files with 58 additions and 0 deletions

backend/.npmrc

View File

				`@@ -0,0 +1 @@`
				`min-release-age=1`