Add "Subdeps" to JavaScript/TypeScript dictionary
Used to prevent supply chain attacks by pnpm-workspace.yaml:
```yaml
minimumReleaseAge: 1440
trustPolicy: no-downgrade
trustPolicyIgnoreAfter: 43200
blockExoticSubdeps: true
```
https://github.com/better-auth/better-auth/blob/c9ccdda1b854ef6846be3f1c1d49df4d59b63f80/pnpm-workspace.yaml#L8
https://pnpm.io/supply-chain-security#prevent-exotic-transitive-dependencies
https://pnpm.io/settings#blockexoticsubdeps
1 条评论