mirror of
https://github.com/teamchong/pxpipe.git
synced 2026-07-22 02:02:51 +02:00
teamchong
9 lines
407 B
Plaintext
9 lines
407 B
Plaintext
# Supply-chain hardening: wait 3 days after publish before installing a new
|
|
# version. Catches typo-squat / compromise windows where the malicious version
|
|
# is yanked before it propagates. See:
|
|
# https://pnpm.io/settings#minimumreleaseage
|
|
minimum-release-age=4320
|
|
# First-party packages we publish ourselves should not block our own iteration.
|
|
minimum-release-age-exclude=@cloudflare/*
|
|
ignore-pnpmfile=true
|