diff --git a/frontend/.gitignore b/frontend/.gitignore
index cb5d437..3e6420a 100644
--- a/frontend/.gitignore
+++ b/frontend/.gitignore
@@ -37,3 +37,6 @@ __screenshots__/
 
 # Playwright browser downloads (if ever installed locally)
 .pw-browsers/
+
+# npm project config (audit/fund off: the audit endpoint stalls installs)
+!.npmrc
diff --git a/frontend/.npmrc b/frontend/.npmrc
new file mode 100644
index 0000000..09b35cd
--- /dev/null
+++ b/frontend/.npmrc
@@ -0,0 +1,2 @@
+audit=false
+fund=false