From 0abbac9b578e24eea6dd8501a1de54b1944e1993 Mon Sep 17 00:00:00 2001
From: Dan Admin McCormick <124207373+danmcc-admin@users.noreply.github.com>
Date: Tue, 9 Jun 2026 21:48:41 -0400
Subject: [PATCH] Add .npmrc with ignore-scripts and save-exact

Security hardening: ignore-scripts prevents malicious install scripts
from running during npm install, and save-exact pins dependency versions.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .npmrc | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 .npmrc

diff --git a/.npmrc b/.npmrc
new file mode 100644
index 00000000..7c6e3384
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+ignore-scripts=true
+save-exact=true