diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..011be5909
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+# Prevent accidental package upgrades from a private registry and avoid writing private URLs to the lock file.
+registry=https://registry.npmjs.org/