diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 51928d7b..2d54713f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,4 @@
 version: 2
-
 registries:
   npm-github:
     type: npm-registry
@@ -10,7 +9,6 @@ registries:
     url: https://github.com
     username: x-access-token
     password: '${{ secrets.GH_TOKEN }}'
-
 updates:
   - package-ecosystem: npm
     schedule:
@@ -27,7 +25,11 @@ updates:
     registries:
       - npm-github
       - git-github
-
+    cooldown:
+      default:
+        days: 7
+      exclude-patterns:
+        - "@typeform/*"
   - package-ecosystem: github-actions
     schedule:
       interval: weekly
diff --git a/.yarnrc b/.yarnrc
new file mode 100644
index 00000000..7a6bbb48
--- /dev/null
+++ b/.yarnrc
@@ -0,0 +1,2 @@
+ignore-scripts true   # blocks all postinstall scripts
+save-exact true       # forces exact pins on yarn add