From fb1d8118e3c7bdb6375a6ea68382729d0d4c324f Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Fri, 17 Apr 2026 16:20:46 +0800
Subject: [PATCH] feat: npmrc min-release-age

---
 home/base/core/npm.nix | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/home/base/core/npm.nix b/home/base/core/npm.nix
index eaa3499c..c6d463ef 100644
--- a/home/base/core/npm.nix
+++ b/home/base/core/npm.nix
@@ -1,10 +1,9 @@
 { config, ... }:
 {
-  # make `npm install -g <pkg>` happey
-  #
-  # mainly used to install npm packages that updates frequently
-  # such as opencode, codex, etc.
+  # 1. make `npm install -g <pkg>` happey
+  # 2. set min-release-age for security
   home.file.".npmrc".text = ''
     prefix=${config.home.homeDirectory}/.npm
+    min-release-age=7
   '';
 }