Skip to content

Commit 4cc2a0d

Browse files
committed
Don't install new deps less than 1 day old #11465
To limit supply chain attacks
1 parent bef1d1e commit 4cc2a0d

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

pnpm-workspace.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,8 @@
1+
# The minimum age of a release to be considered for dependency installation.
2+
# The value is in minutes (1440 minutes = 1 day).
3+
minimumReleaseAge: 1440
4+
# List of packages to exclude from the minimum release age check.
5+
minimumReleaseAgeExclude:
6+
- '@ecodev/*'
7+
18
nodeLinker: hoisted

0 commit comments

Comments
 (0)