Skip to content

[infra] enforce npm package age gate (14 days)#239

Open
hung3a8-pendle wants to merge 2 commits intomasterfrom
chore/npm-age-gate
Open

[infra] enforce npm package age gate (14 days)#239
hung3a8-pendle wants to merge 2 commits intomasterfrom
chore/npm-age-gate

Conversation

@hung3a8-pendle
Copy link
Copy Markdown
Contributor

Summary

  • Adds npmMinimalAgeGate: 14d to .yarnrc.yml — Yarn will refuse to resolve any package version published less than 14 days ago
  • Excludes @pendle/* scoped packages via npmPreapprovedPackages
  • Part of org-wide supply chain security hardening

Test plan

  • Verify yarn install works without issues
  • Verify yarn add <recent-package> is blocked if published < 14 days ago

🤖 Generated with Claude Code

Add npmMinimalAgeGate: 14d to .yarnrc.yml to prevent installing
npm packages published less than 14 days ago. Excludes @pendle/*
scoped packages.
Add npmMinimalAgeGate: 14d to .yarnrc.yml to prevent installing
npm packages published less than 14 days ago. Excludes @pendle/*
scoped packages.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant