From 2dbee482b8c89be8b22454b77cd80a29c4d97ade Mon Sep 17 00:00:00 2001
From: dev-hari-prasad <webdev.byhari@gmail.com>
Date: Mon, 7 Sep 2026 03:57:22 +0530
Subject: [PATCH] chore: configure 3-day release age gate for npm packages

Set npmMinimalAgeGate to 3d in web/.yarnrc.yml and runtime/.yarnrc.yml to prevent immediately installing freshly-published packages, providing a grace period against npm supply-chain compromises.
---
 runtime/.yarnrc.yml | 2 ++
 web/.yarnrc.yml     | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/runtime/.yarnrc.yml b/runtime/.yarnrc.yml
index 6413a424d82..83bdb53e0fc 100644
--- a/runtime/.yarnrc.yml
+++ b/runtime/.yarnrc.yml
@@ -5,3 +5,5 @@ logFilters:
     level: discard
 
 nodeLinker: node-modules
+
+npmMinimalAgeGate: 3d
diff --git a/web/.yarnrc.yml b/web/.yarnrc.yml
index 9960d2bd622..187f853c0d1 100644
--- a/web/.yarnrc.yml
+++ b/web/.yarnrc.yml
@@ -10,3 +10,5 @@ logFilters:
     level: discard
 
 nodeLinker: node-modules
+
+npmMinimalAgeGate: 3d