ui: set npm `min-release-age` to protect against supply-chain attacks (#26711)

* ui: set npm `min-release-age` to protect against supply-chain attacks

* ui: bump to 7 days

diff --git a/tools/ui/.npmrc b/tools/ui/.npmrc
index 32e6012709b58d16a42eaa706c3c0a6b82fcd180..0a690322a452d2da8990615bc9823cda6cd055c9 100644 (file)
--- a/tools/ui/.npmrc
+++ b/tools/ui/.npmrc
@@ -1,2 +1,3 @@
 engine-strict=true
 ignore-scripts=true
+min-release-age=7