Files
Fabrizio Rinaldi 660637fe09 chore: harden npm installs (#21)
This keeps the open-source skills repo on npm while adding the npm 11
safeguards we wanted.

## Summary
- **npm baseline**: pins `packageManager: npm@11.13.0`, adds Node/npm
engines, and commits a deterministic `package-lock.json`.
- **Install hardening**: adds `.npmrc` with `min-release-age=7`,
`allow-git=none`, and `engine-strict=true`.
- **CI hardening**: drops Node 18 from the matrix, installs pinned npm
11, and switches dependency install from `npm install` to `npm ci`.

## Validation
- [x] `npx -y npm@11.13.0 ci`
- [x] `npx -y npm@11.13.0 test`

## After Merge
*No action required*
2026-05-01 12:51:04 +01:00

28 lines
823 B
JSON

{
"name": "agent-skills",
"private": true,
"type": "commonjs",
"packageManager": "npm@11.13.0",
"scripts": {
"test": "vitest run",
"test:drafts": "vitest run tests/drafts.test.js",
"test:media": "vitest run tests/media.test.js",
"test:queue": "vitest run tests/queue.test.js",
"test:config": "vitest run tests/config.test.js",
"test:analytics": "vitest run tests/analytics.test.js",
"test:social-sets": "vitest run tests/social-sets.test.js",
"test:tags": "vitest run tests/tags.test.js",
"test:me": "vitest run tests/me.test.js",
"test:common": "vitest run tests/common.test.js",
"test:all": "vitest run tests/*.test.js"
},
"engines": {
"node": ">=20.0.0",
"npm": ">=11.0.0"
},
"devDependencies": {
"execa": "^9.6.1",
"vitest": "^4.0.18"
}
}