Set 7-day minimum release age for npm and bun installs - #25
Open
akan72 wants to merge 3 commits into
Open
Conversation
88 tasks
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:29
33c6da9 to
2dbbaaf
Compare
akan72
changed the base branch from
akan72/claude-statusline-settings
to
akan72/uv-python-management
August 22, 2026 19:36
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:36
2dbbaaf to
74abeb6
Compare
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:42
74abeb6 to
bda5fad
Compare
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:46
bda5fad to
a6fdf28
Compare
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:50
a6fdf28 to
6bc2af5
Compare
Add an idempotent step to assimilate.sh that sets Claude Code's commit/PR attribution to empty in ~/.claude/settings.json. It only appends the "attribution" key when it isn't already present (via jq merge), so existing local settings are never overridden — matching the 'append if absent' intent. Makes the attribution-off behavior reproducible on new machines.
Extends the supply-chain protection uv got in #23 to the JS package managers actually in use: - npm: min-release-age=7 (days) appended to ~/.npmrc by assimilate.sh, append-only since npm login writes auth tokens there. Enforced by npm >= 11.10; older npms warn about the unknown key and ignore it. - bun: [install].minimumReleaseAge = 604800 (seconds) in .bunfig.toml at the repo root — bun's global config path is $XDG_CONFIG_HOME/.bunfig.toml and XDG_CONFIG_HOME points at this repo. Also symlinked to ~/.bunfig.toml for contexts without XDG_CONFIG_HOME. Verified on this machine: with vite@8.1.3 published 3 days ago, both npm and bun resolve vite to 8.1.0, the newest version older than 7 days.
akan72
force-pushed
the
akan72/min-release-age
branch
from
August 22, 2026 19:54
6bc2af5 to
2399176
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Test Plan
min-release-age=7is appended to.npmrcand.bunfig.tomlis linked.bash -n assimilate.shandgit diff --check.