compressionLevel: mixed enableGlobalCache: false # Don't run third-party dependency build/install scripts by default. Packages that # genuinely need to build are allowlisted via dependenciesMeta..built in package.json. # This closes the postinstall code-execution vector; see the note in AGENTS.md. enableScripts: false enableInlineBuilds: true nodeLinker: node-modules npmMinimalAgeGate: '7d'