# All npm traffic is proxied through the Nexus npm-group repository. npm rewrites # the registry.npmjs.org hosts found in package-lock.json to this mirror at # install time (default replace-registry-host=npmjs), so the committed lockfile # is reused as-is — no regeneration needed. registry=http://mirror.soroushasadi.com/repository/npm-group/ # Auth is never committed. CI and the Docker build append an `_authToken` line # from the NPM_TOKEN secret at install time; for local installs put the token in # your personal ~/.npmrc. See .gitea/workflows/*.yml. # Trim install noise and avoid extra round-trips to the public registry. audit=false fund=false