diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 40081f1..177ff0e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,4 @@
 version: 2
-
 updates:
   - package-ecosystem: npm
     directory: '/'
@@ -17,7 +16,11 @@ updates:
       typeform:
         patterns:
           - '@typeform*'
-
+    cooldown:
+      default:
+        days: 7
+      exclude-patterns:
+        - "@typeform/*"
 registries:
   gh-packages:
     type: npm-registry
diff --git a/.yarnrc b/.yarnrc
new file mode 100644
index 0000000..7a6bbb4
--- /dev/null
+++ b/.yarnrc
@@ -0,0 +1,2 @@
+ignore-scripts true   # blocks all postinstall scripts
+save-exact true       # forces exact pins on yarn add