Post

Did you know pnpm can protect you from these supply chain attacks? Here are two config settings that most devs should enable: pnpm config set trustPolicy no-downgrade -g pnpm config set minimum-release-age 4320 -g

`minimumReleaseAge` is the documented field, does `minimum-release-age` work too?

ahhh it looks like the fields are camel case for e.g. the yaml workspace config but normalized to kebab for npm/pnpm global rc files