Ancestors

Toot

Written by Andrey Sitnik on 2025-01-16 at 16:52

pnpm 10 turned off implicit postinstall in npm dependencies, and it is very good for security.

And at BlueSky, the Yarn team announced that they're going to do the same.

https://bsky.app/profile/yarnpkg.dev/post/3lelyznjs422j

=> View attached media

=> More informations about this toot | More toots from sitnik_en@mastodon.social

Descendants