? Verifying lockfile against supply-chain policies (410 entries)... Lockfile is up to date, resolution step is skipped Progress: resolved 1, reused 0, downloaded 0, added 0 Packages: +239 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Progress: resolved 239, reused 0, downloaded 91, added 8 Progress: resolved 239, reused 0, downloaded 202, added 20 Progress: resolved 239, reused 0, downloaded 239, added 205 Progress: resolved 239, reused 0, downloaded 239, added 239, done ✗ Lockfile failed supply-chain policy check (410 entries in 3.6s) [ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 2 lockfile entries failed verification: vite-plus@0.2.2 was published at 2026-07-02T09:59:26.000Z, within the minimumReleaseAge cutoff (2026-07-01T11:48:51.317Z) vite@8.1.3 was published at 2026-07-02T04:45:00.000Z, within the minimumReleaseAge cutoff (2026-07-01T11:48:51.317Z) The lockfile contains entries that the active policies reject. This can mean the lockfile is stale, or that someone committed a lockfile that bypassed the policy locally — inspect recent changes to pnpm-lock.yaml before trusting it. If the changes look expected, run "pnpm clean --lockfile" and then "pnpm install" to rebuild from a fresh resolution. Alternatively, relax the policy that flagged them.