chore(repo): harden npm installs (#405)

rwaskiewicz · web-flow · commit 67ba033f4638 · 2026-05-14T19:57:45.000-04:00
add allow-git to npmrc to prevent git based dependencies from being
installed. add ignore-scripts to prevent pre/post scripts from running
diff --git a/.npmrc b/.npmrc
@@ -1 +1,3 @@
+allow-git="none"
+ignore-scripts=true
 min-release-age=7
