pnpm cool off

gistfile1.txt

## Setup

```
curl -fsSL https://get.pnpm.io/install.sh | sh -
npm uninstall npm -g
```

## Prompt

In this repo and ../recordimpact.com I need to level up security in a couple ways:
  - Switch to pnpm
  - A 3-day install cooldown plus ignore-scripts=true plus allow-git=none

  Something like

```
# .npmrc
save-exact=true
engine-strict=true
ignore-scripts=true
# 3 days
min-release-age=4320
audit-level=high
fund=false
package-lock=true
prefer-offline=true```