# Supply-chain hardening: every dependency is pinned to an exact version, so
# `npm install <pkg>` must never write a `^` or `~` range into package.json.
save-exact=true
