Skip to content

Commit 60c9040

Browse files
jaysin586claude
andauthored
chore: add pnpm minimumReleaseAge supply-chain delay (#154)
Set minimumReleaseAge to 2880 minutes (48h) so newly published dependency versions must age before install, mitigating supply-chain attacks. Exclude our own '@humanspeak/*' scope so first-party releases are not delayed. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent b611c53 commit 60c9040

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

pnpm-workspace.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
11
packages:
22
- .
33
- docs
4+
minimumReleaseAge: 2880
5+
minimumReleaseAgeExclude:
6+
- '@humanspeak/*'

0 commit comments

Comments
 (0)