New metacfg.cli-apps.js module (enabled by default) pins minimum release ages for npm and bun across all home configurations, so the mitigation against newly published malicious packages applies uniformly rather than living as untracked dotfiles on one machine.
2 lines
37 B
TOML
2 lines
37 B
TOML
[install]
|
|
minimumReleaseAge = 604800
|