Commit Graph
3 Commits
Author SHA1 Message Date
Cursor AgentandRotimi Best 9adc38bd8a chore(ci): harden supply-chain controls before reopening PRs
Isolate npm publish from PR CI, enforce frozen lockfiles and a 24h
minimumReleaseAge, and document safe pull_request_target usage so fork
PRs cannot reach publish credentials.

Co-authored-by: Rotimi Best <[email protected]>
2026-08-10 21:00:29 +01:00
Rotimi Best c801323faa docs: improve PR template 2024-03-07 18:26:08 +01:00
Rotimi Best f01cf6d697 feat: add pull request template 2023-11-26 00:53:48 +00:00