1 Commits

Include renames

Author	SHA1	Message	Date
Cursor AgentandRotimi Best	9adc38bd8a	chore(ci): harden supply-chain controls before reopening PRs ... Isolate npm publish from PR CI, enforce frozen lockfiles and a 24h minimumReleaseAge, and document safe pull_request_target usage so fork PRs cannot reach publish credentials. Co-authored-by: Rotimi Best <[email protected]>	2026-08-10 21:00:29 +01:00