legacy-peer-deps = true
prefer-dedupe = true
min-release-age = 7

# Verified security patches; retain the cooldown for other packages.
min-release-age-exclude[]=nodemailer
min-release-age-exclude[]=@grpc/grpc-js
min-release-age-exclude[]=axios
min-release-age-exclude[]=brace-expansion
min-release-age-exclude[]=deepmerge-ts
min-release-age-exclude[]=engine.io
min-release-age-exclude[]=undici
min-release-age-exclude[]=fast-uri
min-release-age-exclude[]=morgan
min-release-age-exclude[]=qs
min-release-age-exclude[]=ts-deepmerge
min-release-age-exclude[]=adm-zip
min-release-age-exclude[]=dompurify
min-release-age-exclude[]=next
min-release-age-exclude[]=@next/*
