diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..22f89c2
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,3 @@
+# Delay installs of newly published packages to reduce exposure to fresh
+# supply-chain compromises.
+min-release-age=7