pnpm Blog company blog
Pnpm has a new setting to stave off supply chain attacks
There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly...
- Points
- 238
- HN comments
- 146
- Submissions
- 1
- Cited by
- 3 commenters
Infrastructure & DevOpsOpen Source2025
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Sep 18, 2025 | Pnpm has a new setting to stave off supply chain attacks by ivanb | 238 | 146 |
Cited in comments
Linked from 3 Hacker News comments by 3 different people, from Sep 2025 to Sep 2025.
Most recent:
- glennericksen · Sep 17, 2025
- spion · Sep 16, 2025
- CraftThatBlock · Sep 16, 2025
