diff --git a/dev/aws-cdk/.npmrc b/dev/aws-cdk/.npmrc
new file mode 100644
index 00000000..acdfa8f6
--- /dev/null
+++ b/dev/aws-cdk/.npmrc
@@ -0,0 +1,4 @@
+# Block lifecycle scripts at install time.
+ignore-scripts=true
+# 3-day cooldown — honored by npm >= 11.10 (Node >= 20). No-op on older npm.
+min-release-age=3