Cursor AgentandRotimi Best 9adc38bd8a chore(ci): harden supply-chain controls before reopening PRs ...

Isolate npm publish from PR CI, enforce frozen lockfiles and a 24h
minimumReleaseAge, and document safe pull_request_target usage so fork
PRs cannot reach publish credentials.

Co-authored-by: Rotimi Best <[email protected]>

2026-08-10 21:00:29 +01:00

..

ISSUE_TEMPLATE

docs: add dev setup guide and make package scripts cross-platform (Windows) (#664)

2026-06-15 17:40:06 +01:00

workflows

chore(ci): harden supply-chain controls before reopening PRs

2026-08-10 21:00:29 +01:00

CODEOWNERS

chore(ci): harden supply-chain controls before reopening PRs

2026-08-10 21:00:29 +01:00

PULL_REQUEST_TEMPLATE.md

chore(ci): harden supply-chain controls before reopening PRs

2026-08-10 21:00:29 +01:00