Migrate to pnpm - #145

Merged

infeo merged 14 commits into

feature/improve-security

May 8, 2026

Commits on Apr 28, 2026

fix high vulnerablillities
infeo
committed
fad78ab
Use pnpm
infeo
committed
1b0b179
use pnpm specifc allowBuilds to allow/deny lifecycle scripts
infeo
committed
70eee5c
Add pnpm cooldown period for new packages
infeo
committed
1970d70

Commits on May 4, 2026

Add CI check to mitigate lock file injections
infeo
committed
061e0bb
Add dependabot file
infeo
committed
b34558c
Make CI fail if not-allowed post-install scripts run
infeo
committed
be07dac
Exclude npm package-lock file from repo
infeo
committed
397c522
use pnpms blockExoticSubdeps
infeo
committed
8733c95
use js script to check if pnpm is used for development
infeo
committed
f2ca112
update README to use frozen-lockfile flag
infeo
committed
3fb96ef
cleanup
infeo
committed
16f743a

Commits on May 5, 2026

add comments
infeo
committed
486d5c5
apply suggestions from code review
infeo
committed
26caa17