Convert to npm

[peachbits]

CHANGELOG

Does this branch warrant an entry to the CHANGELOG?

• Yes
• No

Dependencies

none

Description

none

---

Note

Low Risk
Tooling-only changes to install behavior; no application runtime code is modified in this diff.

Overview
Switches the repo from Yarn to npm for installs and lockfile management.

.npmrc is added with legacy-peer-deps=true and ignore-scripts=true (replacing the old .yarnrc ignore-scripts setting). .yarnrc is removed. .gitignore no longer ignores package-lock.json, so the npm lockfile can be committed.

^{Reviewed by Cursor Bugbot for commit 8fc2ef5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Stale comment

Identified one net-new, high-confidence security regression in install-time supply-chain hardening.

  

_{Sent by Cursor Security Agent: Security Reviewer}