archetech / archon / 25751062079

95%

main: 95%

push

github

add npm supply-chain protections (min release age, dep-review)

Defense against Shai-Hulud-class worm attacks: refuse fresh package
versions until they have had time to be flagged and unpublished.

- .npmrc: minimum-release-age=4320 (72h) — requires npm 11.5.1+
- .gitignore: track repo-root .npmrc, keep ignoring child .npmrc files
- dependabot: weekly + 3-day cooldown to match
- dependency-review action: fail-on-severity moderate (was high)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2093 of 2358 branches covered (88.76%)

Branch coverage included in aggregate %.

4419 of 4576 relevant lines covered (96.57%)

1115.62 hits per line