sam-4screen-desktop 2026-6-1:13:35:23
This commit is contained in:
@@ -11,6 +11,9 @@ aliases: []
|
||||
---
|
||||
# [[Security NPM packages tools]]
|
||||
|
||||
## Check video
|
||||
source_url: https://www.youtube.com/watch?v=Wq6yMdt11LM
|
||||
|
||||
## Set minimum release age
|
||||
**NPM:**
|
||||
- file min-release-age=7 days
|
||||
@@ -31,4 +34,16 @@ aliases: []
|
||||
- block curated / trusted lists of packages.
|
||||
|
||||
## Block gitbased dependecies
|
||||
**NPM**
|
||||
- allow-git=none
|
||||
- allow-git=root
|
||||
**PNPM**
|
||||
- blockExoticSubdps: true
|
||||
- trustPolicy: no-downgrade
|
||||
|
||||
## Scan dependecies
|
||||
Ensure you use aliases so that these are use before we install.
|
||||
**Socket Firewall**
|
||||
|
||||
**npq**
|
||||
source_url: https://github.com/lirantal/npq
|
||||
|
||||
Reference in New Issue
Block a user