diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..19b6ee0
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,7 @@
+# Supply-chain hardening directives (SC-12282 / APS-19732)
+ignore-scripts=true
+strict-ssl=true
+save-exact=true
+engine-strict=true
+legacy-peer-deps=false
+audit-level=high