# Do not install package versions published less than 7 days ago.
# Mirrors the 7-day Dependabot `cooldown` in .github/dependabot.yml so freshly
# published (potentially compromised) releases have time to bake.
# Requires npm >= 11.6; older npm versions ignore this key.
min-release-age=7
