Tag

devops

2 posts

How to Set Minimum Release Age for Your Package Manager (npm, pnpm, Yarn, Bun & Deno)

No package manager supports minimum release age natively — but you can enforce it. Here's a complete guide for npm, pnpm, Yarn, Bun, and Deno, plus a universal CI script that works everywhere.

July 19, 2026

javascriptnpm

npm RFC: Making Install Scripts Opt-In — A Deep Dive into What It Means for JavaScript Security

A landmark npm RFC proposes making install scripts opt-in by default. This deep-dive covers how the current system works, why it's dangerous, what the RFC proposes, the tradeoffs involved, and how you can protect yourself right now.

June 1, 2026