diff --git a/.gitignore b/.gitignore
index 595b823..7a14a0b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,8 +6,5 @@ node_modules/
 npm-debug.log
 dist/
 
-# NPM file created by GitHub actions
-.npmrc
-
 # IDEs
 .idea
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..4d82617
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+# Supply chain protection: only resolve package versions published at least 7 days ago.
+min-release-age=7