Skip to content

Harden npm installs and release 1.0.1 - #11

Merged
andersmyrmel merged 3 commits into
mainfrom
agent/npm-install-hardening-1.0.1
Aug 5, 2026
Merged

Harden npm installs and release 1.0.1#11
andersmyrmel merged 3 commits into
mainfrom
agent/npm-install-hardening-1.0.1

Conversation

@andersmyrmel

Copy link
Copy Markdown
Owner

Summary

  • install npm dependencies with lifecycle scripts disabled
  • audit lifecycle scripts against an exact-version allowlist and rebuild only reviewed packages
  • pin Node.js 24.19.0 and npm 11.17.0 across local development and CI
  • align npm package metadata with Chrome extension version 1.0.1

Verification

  • npm run deps:check-toolchain
  • npm run deps:audit
  • npm run deps:audit:test
  • npm run check
  • git diff --check

The Chrome Web Store ZIP is generated locally and is intentionally not committed.

@andersmyrmel
andersmyrmel marked this pull request as ready for review August 5, 2026 08:04
@andersmyrmel
andersmyrmel merged commit 7ae1eee into main Aug 5, 2026
1 check passed
@andersmyrmel
andersmyrmel deleted the agent/npm-install-hardening-1.0.1 branch August 5, 2026 08:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant