Re:Pnpm has a new setting to stave off supply chain attacks
by cluckindan on Thursday September 18, 2025 @11:47AM
(#45291122)
Are you 100% on that?
[ Parent
| on HN ]
Re:Pnpm has a new setting to stave off supply chain attacks
by Rockslide on Thursday September 18, 2025 @12:13PM
(#45291430)
Yes. As someone who's using npm install daily, and given the update cadence of npm packages, I would end up with dirty lock files very frequently if the parent statement were true. It just doesn't happen.