chore: DH-22173: Use min-release-age flag in npm for extra security#2652
chore: DH-22173: Use min-release-age flag in npm for extra security#2652vbabich merged 4 commits intodeephaven:mainfrom
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2652 +/- ##
==========================================
- Coverage 49.76% 49.51% -0.26%
==========================================
Files 774 774
Lines 43872 43872
Branches 11295 11109 -186
==========================================
- Hits 21835 21724 -111
- Misses 22019 22130 +111
Partials 18 18
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
Updates npm install hardening by enforcing a minimum package release age before installation.
Changes:
- Add
min-release-age=3to the repository.npmrcconfiguration. - Update
package-lock.jsonaccordingly.
Reviewed changes
Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
.npmrc |
Enables npm’s min-release-age setting alongside existing security-related npm config. |
package-lock.json |
Lockfile update to reflect the updated npm install behavior/config. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
min-release-ageto 3 days