# Use public npm registry only (avoids E401 from user-level auth)
registry=https://registry.npmjs.org/
# supply-chain cooldown, npm >= 11.10, ignored by npm ci (pinned lockfile) so no build impact
min-release-age = 7
