From 41c33a57df165f595f1cc26786cd0faa80dd06bb Mon Sep 17 00:00:00 2001
From: Zeke Foppa <bfops@users.noreply.github.com>
Date: Thu, 21 May 2026 09:08:20 -0700
Subject: [PATCH] [develop-md]: develop.md

---
 DEVELOP.md | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 DEVELOP.md

diff --git a/DEVELOP.md b/DEVELOP.md
new file mode 100644
index 00000000000..f64effcf159
--- /dev/null
+++ b/DEVELOP.md
@@ -0,0 +1,15 @@
+## Enforce minimum npm package age
+Please run this before doing TypeScript work or running tests in our repo:
+```bash
+pnpm config set --global minimumReleaseAge 1440
+```
+This will close most of the surface area for npm supply chain attacks.
+
+## Install Git hooks
+Please run:
+```bash
+git-hooks/install-hooks.sh
+```
+**Note that this removes everything in `.git/hooks`, and doesn't work if you're in a submodule**.
+
+This will install our git hooks, for instance running formatting on commit.