Socket on Mythryl: “After recent npm supply chain attacks, @pnpm.io 10.16 adds a setting…”

After recent npm supply chain attacks, @pnpm.io 10.16 adds a setting for delayed dependency updates. Tools like Taze and npm-check-updates are testing similar “maturity” options, hinting at a cautious new trend in #JavaScript package management. socket.dev/blog/pnpm-10... #NodeJS

socket.devpnpm 10.16 Adds New Setting for Delayed Dependency Updates -...pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.

15/9/25, 6:28 pm8 reposts18 likes

Post