Socket on Mythryl: “📦 @pnpm.io 11.5 adds support for recognizing npm staged publishes…”

📦 @pnpm.io 11.5 adds support for recognizing npm staged publishes after staged approval metadata triggered a false downgrade signal. As npm adds more release paths, registry metadata needs to make it clear how each package version was published. socket.dev/blog/pnpm-11...

socket.devpnpm 11.5 Adds Support for Recognizing npm Staged Publishes ...pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publi...

4/6/26, 5:11 am10 reposts38 likes

Post