GigaTap articles tagged pnpm.
- pnpm 11.4 makes locked installs harder to silently subvert - pnpm 11.4 turns tarball integrity mismatches into hard failures and tightens several install-time trust boundaries around credentials, git resolutions, pat
- pnpm 11 turns on default supply-chain protections - pnpm 11 makes safer installs the default with a 24-hour release delay, blocked exotic subdependencies, and clearer build-script controls.