Post

We just released the 4.14 branch! 🎊 Two important security changes: - `enableScripts` now defaults to `false` (can be overridden on a per-package basis) - A new `approvedGitRepositories` setting should be used to tell Yarn which git repos are safe to pack.

Yarn

@yarnpkg.dev

Neither of those are breaking: if you migrate from an older version Yarn will automatically update your `.yarnrc.yml` to explicitly apply the old default settings, which you can remove whenever you're ready. New projects on the other hand will immediately benefit from these changes.

17/4/26, 6:05 am0 reposts0 likes

No replies yet.