Skip to content

Enforce minimum age limitation for packages#545

Merged
Dargon789 merged 1 commit into
Dargon789:0xsequence-v2from
0xsequence:master
May 8, 2026
Merged

Enforce minimum age limitation for packages#545
Dargon789 merged 1 commit into
Dargon789:0xsequence-v2from
0xsequence:master

Conversation

@Dargon789
Copy link
Copy Markdown
Owner

No description provided.

@bolt-new-by-stackblitz
Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@vercel
Copy link
Copy Markdown

vercel Bot commented May 8, 2026

@taylanpince is attempting to deploy a commit to the Foundry development Team on Vercel.

A member of the Team first needs to authorize it.

Copy link
Copy Markdown

@sourcery-ai sourcery-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @Dargon789, you have reached your weekly rate limit of 500000 diff characters.

Please try again later or upgrade to continue using Sourcery

@snyk-io
Copy link
Copy Markdown

snyk-io Bot commented May 8, 2026

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a minimumReleaseAge configuration to pnpm-workspace.yaml intended to prevent the installation of package releases less than two weeks old. However, feedback indicates that this property is not a standard pnpm configuration and will be ignored by the package manager, meaning the security policy is not actually enforced. Additionally, the reviewer pointed out that the exclusion list mentioned in the comments is missing a corresponding configuration key.

Comment thread pnpm-workspace.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants