Cleared 1m ago · thunder-id/thunderid #2096 · Go · ★ 614 · Apache-2.0

Implement pnpm trustPolicy for secure and delayed dependency updates

Current Limitation Currently, the repository does not implement the 'trustPolicy' setting as recommended by pnpm. This means that dependency updates are not delayed, which exposes the project to supply chain vulnerabilities from rapidly published, potentially malicious package…

What we checked

Similar unclaimed issues