# Lockfile tarballs must use the npmjs path layout (no /npm/ prefix).
# Path-prefixed mirrors (e.g. mirrors.tencent.com/npm/...) break under
# replace-registry-host: host swap keeps /npm/ and CI fetches
# registry.npmjs.org/npm/<pkg> → 404.
# Pin the project registry so local installs cannot re-pollute the lockfile.
registry=https://registry.npmjs.org
# npm 12 refuses lockfile tarballs whose host matches neither the canonical
# registry nor the configured registry (allow-remote defaults to none).
# Rewriting every registry host to the installer's configured registry keeps
# fetched hosts exempt from that gate without disabling the check.
# npm < 8.4 ignores this key (and has no gating to bypass anyway).
replace-registry-host=always
