NPM Supply Chain Security
•1 min read
npmsecuritysupply chain
implementation
pnpm config
cat $(pnpm config get globalconfig)
minimum-release-age=2880
trust-policy=no-downgrade.zshrc config
npm i -g sfw
npm i -g npq
alias pnpm="NPQ_PKG_MGR=pnpm sfw npq-hero"delete packages incl. cache
⚠️ be careful
find . -name "node_modules" -type d -prune -exec rm -rf '{}' +
pnpm store prune
rm -rf $(pnpm store path) # more aggressive