MAINT: Harden frontend npm config (npm audit + min-release-age) (microsoft#2103)

romanlutz · Copilot · web-flow · commit 726e93302312 · 2026-06-30T21:50:48.000Z
Co-authored-by: Copilot &lt;223556219+Copilot@users.noreply.github.com&gt;
diff --git a/.gitignore b/.gitignore
@@ -201,3 +201,6 @@ doc/_autosummary/
 
 # Custom user instructions
 .github/instructions/user-custom.instructions.md
+
+# Impeccable skill local cache
+.impeccable/
diff --git a/frontend/.npmrc b/frontend/.npmrc
@@ -1,3 +1,7 @@
 # Pin npm registry — satisfies CSSC CFS0001 (sibling .npmrc required).
 registry=https://registry.npmjs.org/
 legacy-peer-deps=true
+
+min-release-age=7
+audit=true
+audit-level=high
