chore: harden npm install defaults#2

sedge-bot wants to merge 3 commits into

fielding:mainfielding/sigil:mainfrom

sedge-bot:sedge/npm-supply-chain-hardeningsedge-bot/sigil:sedge/npm-supply-chain-hardeningCopy head branch name to clipboard