Add pre-install npm dependency guard

2026-08-27 12:46:55 +01:00
parent 7574b31b8c
commit f28b9ee87d
22 changed files with 1321 additions and 137 deletions
@@ -0,0 +1,15 @@
+export const DEFAULT_POLICY = Object.freeze({
+  allowInstallScripts: ["fsevents"],
+  allowDirectLifecycleScripts: [],
+  sourceEvidenceExceptions: {},
+  trustedRepositories: {},
+  trustedMaintainers: {},
+  minimumReleaseAgeHours: 72,
+  freshReleaseAction: "warn",
+  maxTarballSizeBytes: 20 * 1024 * 1024,
+  maxUnpackedSizeBytes: 100 * 1024 * 1024,
+});
+
+export const HTTP_TIMEOUT_MS = 15_000;
+export const COMMAND_TIMEOUT_MS = 120_000;
+export const REPORT_VERSION = 1;