security
Installation
SKILL.md
Security: Minimum Release Age
Apply a seven-day registry package maturity window by default.
Constants
- Use seven days.
- Convert as needed:
7days =10080minutes =604800seconds. - Add only the package managers the repo actually uses.
- Keep auth tokens and secrets out of committed config.
Settings
| Tool | File | Key | Seven-day value |
|---|---|---|---|
| Bun | bunfig.toml [install] |
minimumReleaseAge |
604800 |
| npm | .npmrc |
min-release-age |
7 |
| pnpm | pnpm-workspace.yaml |
minimumReleaseAge |
10080 |
| uv | pyproject.toml [tool.uv] or uv.toml |
exclude-newer |
"7 days" |