News for hackers. Stuff that matters.
Re:Pnpm has a new setting to stave off supply chain attacks by cluckindan on Thursday September 18, 2025 @11:47AM (#45291122)
Are you 100% on that?
Re:Pnpm has a new setting to stave off supply chain attacks by Rockslide on Thursday September 18, 2025 @12:13PM (#45291430)
Yes. As someone who's using npm install daily, and given the update cadence of npm packages, I would end up with dirty lock files very frequently if the parent statement were true. It just doesn't happen.