diff --git a/.yarnrc.yml b/.yarnrc.yml
new file mode 100644
index 0000000..8a6f4b9
--- /dev/null
+++ b/.yarnrc.yml
@@ -0,0 +1,8 @@
+# Block packages published < 7 days ago
+npmMinimalAgeGate: 10080
+
+# Disable ALL lifecycle scripts (postinstall, etc.)
+enableScripts: false
+
+defaultSemverRangePrefix: ""
+nodeLinker: node-modules
diff --git a/cre/attestation/package.json b/cre/attestation/package.json
index dd45022..43fb309 100644
--- a/cre/attestation/package.json
+++ b/cre/attestation/package.json
@@ -10,16 +10,16 @@
     "postinstall": "bun run setup && (bun run build:save || echo 'Warning: @save/core build failed, run bun run build:save manually')"
   },
   "dependencies": {
-    "@chainlink/cre-sdk": "^1.0.9",
+    "@chainlink/cre-sdk": "1.0.9",
     "@save/core": "git+ssh://git@github.com:llama-risk/save.git#v0.1.0",
-    "@noble/hashes": "^1.6.1",
-    "pako": "^2.1.0",
+    "@noble/hashes": "1.6.1",
+    "pako": "2.1.0",
     "viem": "2.34.0",
     "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/bun": "1.2.21",
-    "@types/pako": "^2.0.3",
-    "typescript": "^5.7.2"
+    "@types/pako": "2.0.3",
+    "typescript": "5.7.2"
   }
 }
diff --git a/cre/package.json b/cre/package.json
index 2bd54d4..b4408fe 100644
--- a/cre/package.json
+++ b/cre/package.json
@@ -2,17 +2,17 @@
   "name": "midas-por-workflows",
   "private": true,
   "dependencies": {
-    "@chainlink/cre-sdk": "^1.0.9",
-    "@noble/hashes": "^1.6.1",
+    "@chainlink/cre-sdk": "1.0.9",
+    "@noble/hashes": "1.6.1",
     "save-attestation-workflow": "./attestation",
     "save-verification-workflow": "./verification",
-    "pako": "^2.1.0",
+    "pako": "2.1.0",
     "viem": "2.34.0",
     "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/bun": "1.2.21",
-    "@types/pako": "^2.0.3",
-    "typescript": "^5.7.2"
+    "@types/pako": "2.0.3",
+    "typescript": "5.7.2"
   }
 }
diff --git a/cre/verification/package.json b/cre/verification/package.json
index 7171cbb..37bc4fc 100644
--- a/cre/verification/package.json
+++ b/cre/verification/package.json
@@ -10,16 +10,16 @@
     "postinstall": "bun run setup && (bun run build:save || echo 'Warning: @save/core build failed, run bun run build:save manually')"
   },
   "dependencies": {
-    "@chainlink/cre-sdk": "^1.0.9",
+    "@chainlink/cre-sdk": "1.0.9",
     "@save/core": "git+ssh://git@github.com:llama-risk/save.git#v0.1.0",
-    "@noble/hashes": "^1.6.1",
-    "pako": "^2.1.0",
+    "@noble/hashes": "1.6.1",
+    "pako": "2.1.0",
     "viem": "2.34.0",
     "zod": "3.25.76"
   },
   "devDependencies": {
     "@types/bun": "1.2.21",
-    "@types/pako": "^2.0.3",
-    "typescript": "^5.7.2"
+    "@types/pako": "2.0.3",
+    "typescript": "5.7.2"
   }
 }