pnpm 11.10 Hardens Registry Authentication to Block Token Redirection
Socket ·
pnpm 11.10 was released over the weekend as a small update that includes several supply chain hardening changes. The main change is a new way to configure registry authentication that keeps a repository's own files from redirecting your registry token to a different host. The release also tightens a few build and packaging commands and adds an install path for pnpm v12, the Rust rewrite. The new _auth setting ties each token to its registry # pnpm 11.10 adds an _auth setting that stores…
Soutenez Socket en consultant la ressource originale
Lire l'article original
