# GENERATED by scripts/repo/gen/npmrc.mts — do not edit by hand. The cascade

# mirrors template/generated/conditional/npm/.npmrc to every fleet repo;

# derived sections flow from SOCKET_PACKAGE_PATTERNS (socket-scopes.mts)

# and the manifest EXPECTED_RELEASE_AGE_EXCLUDE (workspace.mts).

# npm v11+ settings (not pnpm — pnpm v11 only reads auth/registry from .npmrc).

ignore-scripts=true

# The single fleet registry — npm AND pnpm read it here (installs + lookups).

# LOCKSTEP with scripts/fleet/constants/npm-registry.mts NPM_REGISTRY; a test

# asserts the two match (code is law), and the soak-exclude publish-date

# verification fetches packuments from this same registry.

registry=https://registry.npmjs.org/

min-release-age=7

# min-release-age-exclude (npm >= 11.17.0): packages exempt from the soak.

# Socket-owned scopes ship through Socket’s own provenance pipeline.

min-release-age-exclude[]=@abitious/*

min-release-age-exclude[]=@decmpfs/*

min-release-age-exclude[]=@node-smol/*

min-release-age-exclude[]=@sdxgen/*

min-release-age-exclude[]=@socketoverride/*

min-release-age-exclude[]=@socketregistry/*

min-release-age-exclude[]=@socketsecurity/*

min-release-age-exclude[]=@stuie/*

min-release-age-exclude[]=@ultrathink/*

min-release-age-exclude[]=sdxgen

min-release-age-exclude[]=sfw

min-release-age-exclude[]=socket

min-release-age-exclude[]=sockeye

# Per-platform native binding families currently inside their 7-day soak

# (pnpm pins the exact versions; see pnpm-workspace.yaml for publish/removable

# dates). One glob exempts every binding in the family, and the globs are

# derived from the pins rather than listed, so a new family needs no edit here.

min-release-age-exclude[]=@rolldown/binding-*

# Name-only npm mirror of the dated `name@version` pins the manifest’s

# EXPECTED_RELEASE_AGE_EXCLUDE carries (npm matches by NAME or glob only —

# npm/cli#9532 — so the version lives on the pnpm side).

min-release-age-exclude[]=@ata-validator/native-darwin-arm64

min-release-age-exclude[]=@ata-validator/native-darwin-x64

min-release-age-exclude[]=@ata-validator/native-linux-arm64-gnu

min-release-age-exclude[]=@ata-validator/native-linux-arm64-musl

min-release-age-exclude[]=@ata-validator/native-linux-x64-gnu

min-release-age-exclude[]=@ata-validator/native-linux-x64-musl

min-release-age-exclude[]=@ata-validator/native-win32-x64

min-release-age-exclude[]=@fallow-cli/darwin-arm64

min-release-age-exclude[]=@fallow-cli/darwin-x64

min-release-age-exclude[]=@fallow-cli/linux-arm64-gnu

min-release-age-exclude[]=@fallow-cli/linux-arm64-musl

min-release-age-exclude[]=@fallow-cli/linux-x64-gnu

min-release-age-exclude[]=@fallow-cli/linux-x64-musl

min-release-age-exclude[]=@fallow-cli/win32-arm64-msvc

min-release-age-exclude[]=@fallow-cli/win32-x64-msvc

min-release-age-exclude[]=ata-validator

min-release-age-exclude[]=fallow

min-release-age-exclude[]=fallow-type-aware

min-release-age-exclude[]=pnpm

min-release-age-exclude[]=rolldown

# Everything ABOVE this sentinel is fleet-canonical and is replaced from

# the wheelhouse source on every placement. Host-only npm settings, and the

# line scripts/fleet/soak-bypass.mts appends for a member-local soak

# bypass, must live BELOW it; placement preserves that tail byte-for-byte.

#fleet-canonical-end

# <repo>

# </repo>