From b54315881e46a5a28cce97d14bd71ecea9c18ab5 Mon Sep 17 00:00:00 2001
From: Surface <surface@paddypowerbetfair.com>
Date: Thu, 14 May 2026 17:31:54 +0000
Subject: [PATCH] chore: harden npm install (ignore-scripts + age gate)

---
 dev/aws-cdk/.npmrc | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 dev/aws-cdk/.npmrc

diff --git a/dev/aws-cdk/.npmrc b/dev/aws-cdk/.npmrc
new file mode 100644
index 00000000..acdfa8f6
--- /dev/null
+++ b/dev/aws-cdk/.npmrc
@@ -0,0 +1,4 @@
+# Block lifecycle scripts at install time.
+ignore-scripts=true
+# 3-day cooldown — honored by npm >= 11.10 (Node >= 20). No-op on older npm.
+min-release-age=3