chore: adjust pnpm/pip/uv min-release-age

https://cooldowns.dev/
2026-07-10 22:52:41 +02:00 · 2026-06-03 18:12:11 +08:00
parent 92aca13c40
commit 839bd3c330
2 changed files with 15 additions and 3 deletions
@@ -1,9 +1,14 @@
 { config, ... }:
 {
-  # 1. make `npm install -g <pkg>` happey
-  # 2. set min-release-age(in days) for security
+  # make `npm install -g <pkg>` happey
+  # npm - set min-release-age(in days) for supply-chain security
  home.file.".npmrc".text = ''
    prefix=${config.home.homeDirectory}/.npm
    min-release-age=2
  '';
+
+  # npm - set min release age (in minutes) for supply-chain security
+  xdg.configFile."pnpm/config.yaml".text = ''
+    minimumReleaseAge: 2880
+  '';
 }