Add Yarn npm package age gate (#6281)

## Summary
- add Yarn's native `npmMinimalAgeGate` with a 2 day / 2880 minute
cooldown to help protect against supply chain attacks
- rely on the existing Yarn 4.12.0 install path instead of a custom
package-age script

Closes #5974.

## Verification
- `corepack yarn config get npmMinimalAgeGate` -> `2880`
- `corepack yarn install --immutable`
- `corepack yarn check`
This commit is contained in:
Kevin van Zonneveld 2026-05-07 15:36:44 +02:00 committed by GitHub
parent e99a17f1fe
commit f1de25fd6e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -9,5 +9,6 @@ initScope: uppy
nodeLinker: node-modules
npmPublishAccess: public
npmMinimalAgeGate: 2880
npmPublishAccess: public