-
Notifications
You must be signed in to change notification settings - Fork 59
Expand file tree
/
Copy path.npmrc
More file actions
42 lines (41 loc) · 2.21 KB
/
Copy path.npmrc
File metadata and controls
42 lines (41 loc) · 2.21 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# GENERATED by scripts/repo/gen/npmrc.mts — do not edit by hand. The cascade
# mirrors template/generated/.npmrc to every fleet repo; derived sections
# flow from SOCKET_PACKAGE_PATTERNS (socket-scopes.mts) and the manifest
# EXPECTED_RELEASE_AGE_EXCLUDE (workspace.mts).
# npm v11+ settings (not pnpm — pnpm v11 only reads auth/registry from .npmrc).
ignore-scripts=true
# The single fleet registry — npm AND pnpm read it here (installs + lookups).
# LOCKSTEP with scripts/fleet/constants/npm-registry.mts NPM_REGISTRY; a test
# asserts the two match (code is law), and the soak-exclude publish-date
# verification fetches packuments from this same registry.
registry=https://registry.npmjs.org/
min-release-age=7
# min-release-age-exclude (npm >= 11.17.0): packages exempt from the soak.
# Socket-owned scopes ship through Socket’s own provenance pipeline.
min-release-age-exclude[]=@abitious/*
min-release-age-exclude[]=@decmpfs/*
min-release-age-exclude[]=@node-smol/*
min-release-age-exclude[]=@sdxgen/*
min-release-age-exclude[]=@socketoverride/*
min-release-age-exclude[]=@socketregistry/*
min-release-age-exclude[]=@socketsecurity/*
min-release-age-exclude[]=@stuie/*
min-release-age-exclude[]=@ultrathink/*
min-release-age-exclude[]=sdxgen
min-release-age-exclude[]=sfw
min-release-age-exclude[]=socket
min-release-age-exclude[]=sockeye
# Per-platform native binding families currently inside their 7-day soak
# (pnpm pins the exact versions; see pnpm-workspace.yaml for publish/removable
# dates). One glob exempts every binding in the family, and the globs are
# derived from the pins rather than listed, so a new family needs no edit here.
# Name-only npm mirror of the dated `name@version` pins the manifest’s
# EXPECTED_RELEASE_AGE_EXCLUDE carries (npm matches by NAME or glob only —
# npm/cli#9532 — so the version lives on the pnpm side).
min-release-age-exclude[]=dtu-github-actions
min-release-age-exclude[]=run-local-ci
# Everything ABOVE this sentinel is fleet-canonical and is replaced from
# the wheelhouse source on every placement. Host-only npm settings, and the
# line scripts/fleet/soak-bypass.mts appends for a member-local soak
# bypass, must live BELOW it; placement preserves that tail byte-for-byte.
#fleet-canonical-end