# Refuse to install package versions younger than 12 hours (0.5 days). Guards
# against supply-chain attacks where malicious versions get yanked within hours
# of publication.
#
# Honored by npm (>=11.5) and npx. NOT honored by Yarn 1 — yarn.lock-managed
# projects (root, tools/fleetctl-npm, tools/fleet-slackbot, ee/tools/license)
# rely on their pinned lockfile entries instead.
min-release-age=0.5