1005fcd592
npm's `min-release-age` config has type `[null, Number]`. The value `3d` parses to NaN, which propagates into `before = new Date(NaN)` (Invalid Date). Pacote then calls `.toISOString()` on it and throws `RangeError: Invalid time value`, breaking every local `npm install`. Drop the `d` suffix in all six `.npmrc` files. The `<days>` in npm's type hint is a label, not part of the value. This is a no-op for CI (`npm ci` ignores this setting per the comment in the file) but unblocks local `npm install`.
6 lines
190 B
Plaintext
6 lines
190 B
Plaintext
# Supply-chain hardening
|
|
# Packages needing lifecycle scripts: npm rebuild <pkg>
|
|
ignore-scripts=true
|
|
# Protects local npm install only — npm ci (used in CI) ignores this
|
|
min-release-age=3
|