From d66d6311bffa91f4d291db01131fb75e59f38127 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Thu, 6 Aug 2026 08:14:41 +0000
Subject: [PATCH] Add npm min-release-age security setting

Delays installing newly published npm packages to reduce exposure to supply-chain compromises, and excludes .npmrc from the distribution build.
---
 .distignore | 1 +
 .npmrc      | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 .npmrc

diff --git a/.distignore b/.distignore
index 9ba16a1..eb690e2 100644
--- a/.distignore
+++ b/.distignore
@@ -15,6 +15,7 @@ composer.lock
 node_modules/
 package.json
 package-lock.json
+.npmrc
 
 # WordPress
 .wordpress-org
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..7253a5c
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+min-release-age=7