# Unsloth Desktop release npm configuration. `npm ci --prefix studio` in
# release-desktop.yml installs the pinned Tauri CLI from package-lock.json here,
# and that CLI builds the app every Desktop user installs.
#
# Refuse tarballs published less than 7 days ago (npm >=11.10; bare integer
# means DAYS). `npm ci` still installs the locked versions.
min-release-age=7
save-exact=true
# No git/GitHub dependencies (they bypass the registry, the cooldown and the
# integrity pin). No locked package has install scripts.
allow-git=none
ignore-scripts=true
audit-level=high
fund=false
