# Refuse to install package versions published less than 7 days ago,
# reducing exposure to freshly compromised or malicious releases. npm
# applies it when it resolves versions (npm install, npm update); npm ci
# installs the committed package-lock.json as it is.
min-release-age=7