From 3a53eb3ff9b1cca4db28cd5ec5f2d936d3349f66 Mon Sep 17 00:00:00 2001
From: Veronika Al Raheem <veronika.alraheem@ibm.com>
Date: Thu, 6 Aug 2026 16:20:01 +0200
Subject: [PATCH] chore: add npmrc supply chain security hardening

---
 .npmrc       | 2 ++
 package.json | 6 +++++-
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 .npmrc

diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..ee5862e16
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+strict-allow-scripts=true
+min-release-age=4
diff --git a/package.json b/package.json
index 4cac600ab..627394443 100644
--- a/package.json
+++ b/package.json
@@ -100,5 +100,9 @@
     "/auth",
     "/cloudant",
     "/lib"
-  ]
+  ],
+  "allowScripts": {
+    "fsevents": false,
+    "unrs-resolver": false
+  }
 }