Post

Steven ⬢
@styfle.dev

Did you know pnpm can protect you from these supply chain attacks? Here are two config settings that most devs should enable: pnpm config set trustPolicy no-downgrade -g pnpm config set minimum-release-age 4320 -g

3 reposts21 likes

leah 🛸
@spacegirl.ing

ahhh it looks like the fields are camel case for e.g. the yaml workspace config but normalized to kebab for npm/pnpm global rc files