Merge pull request #15 from browserstack/sec/LTS-3294-npmrc-hardening

LTS-3294: add supply-chain hardened .npmrc

Author: pattu777

.npmrc

@@ -0,0 +1,24 @@
+# Supply-chain hardening directives (SC-12282 / LTS-3294)
+# See: https://browserstack.atlassian.net/wiki/spaces/ENG/pages/6091571922/Supply+Chain+Security+Enhancements+Tech+Spec
+#
+# access=restricted is intentionally OMITTED — this is a public, customer-facing
+# sample repository, not a published private package.
+#
+# ignore-scripts=true is now safe: browserstack-node-sdk is pinned directly in
+# package.json to 1.60.1 — the version the Playwright BLU runner enforces in prod
+# (docker-selenium/Playwright/download-test.js SDK_VERSION on lts-main) — so the old
+# `postinstall: npm update browserstack-node-sdk` (the only install-script this
+# sample needed) has been removed.
+#
+# engine-strict=true enforces the package.json `engines.node` floor (>=18), which
+# matches the Node version in our runner pod and what Playwright + the SDK already
+# require. Customers on EOL Node (<18) get a clear upgrade message instead of an
+# obscure runtime failure.
+
+strict-ssl=true
+save-exact=true
+audit-level=high
+legacy-peer-deps=false
+ignore-scripts=true
+engine-strict=true
+min-release-age=7

browserstack-load.yml

@@ -22,10 +22,13 @@ testName: Default Test
 # Set 'testType' to the type of load test that you want to execute. Example:'Playwright', 'Selenium'. This is a required parameter. 
 testType: Playwright
 
-# Set 'vus' to the maximum number of virtual users to simulate during the test.  
+# Set 'vus' to the maximum number of virtual users to simulate during the test.
 vus: 1
 
-# Set multiple regions from which you would want to generate the load (percent should total 100 across all loadzones). 
+# Set 'duration' to how long the load should be sustained (required). Example: '1m', '5m'.
+duration: 1m
+
+# Set multiple regions from which you would want to generate the load (percent should total 100 across all loadzones).
 regions:
   - loadzone: us-east-1
     percent: 100 
@@ -40,6 +43,6 @@ language: nodejs
 # Add list of file paths under 'testConfigs' to define which configuration files should be used to run tests. Example: path to 'playwright.config.ts' for Playwright (Node.js), path to 'testng.xml' for Selenium (TestNG). 
 files: 
   dependencies:
-   - ./package.json                 
-  testConfigs: 
-   - ./playwright.config.js
+   - package.json
+  testConfigs:
+   - playwright.config.js