pnpm 10.16
· 閱讀時間約 3 分鐘
Minor Changes
New setting for delayed dependency updates
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.