diff --git a/home/base/core/npm.nix b/home/base/core/npm.nix
index eaa3499c..c6d463ef 100644
--- a/home/base/core/npm.nix
+++ b/home/base/core/npm.nix
@@ -1,10 +1,9 @@
 { config, ... }:
 {
-  # make `npm install -g <pkg>` happey
-  #
-  # mainly used to install npm packages that updates frequently
-  # such as opencode, codex, etc.
+  # 1. make `npm install -g <pkg>` happey
+  # 2. set min-release-age for security
   home.file.".npmrc".text = ''
     prefix=${config.home.homeDirectory}/.npm
+    min-release-age=7
   '';
 }