Skip to content

Commit d2e2377

Browse files
jrjohnsonjrjohnson
authored
Merge pull request #43 from jrjohnson/pnpm-protections
Add pnpm Ecosystem Protections
2 parents 7cb96a8 + 9537765 commit d2e2377

2 files changed

Lines changed: 17 additions & 0 deletions

File tree

‎pnpm-lock.yaml‎

Lines changed: 13 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pnpm-workspace.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Protect against package ecosystem threats
2+
minimumReleaseAge: 1440 # only install things that are at least one day old
3+
trustPolicy: no-downgrade # never install anything where the publication provenance is less than it was
4+
blockExoticSubdeps: true # block installing things not from the registry

0 commit comments

Comments
 (0)