.npmrc

# Node.js version enforcement
engine-strict=true

# Package version control
save-exact=true                    # Always save exact versions in package.json
package-lock=true                  # Ensure package-lock.json is always generated
package-lock-only=false            # Allow both package.json and package-lock.json updates

# Dependency resolution and installation
resolution-mode=highest           # Use the highest version that satisfies the range
verify-store-integrity=true       # Verify the integrity of packages in the store

# Security settings
audit=true                        # Run security audits during installation
audit-level=high                  # Only fail on high or critical vulnerabilities
ignore-scripts=true               # Ignore scripts in dependencies for security