diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index b15d966..d958d2a 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -3,6 +3,10 @@ # # minimumReleaseAge: a package version younger than this many minutes is not installable, so a # compromised release has to survive a day of public scrutiny before it can reach this tree. +# @cosyte is exempt by operator decision; every third-party package keeps the floor. # trustPolicy: `no-downgrade` refuses a resolution that moves a package backwards. minimumReleaseAge: 1440 +minimumReleaseAgeExclude: + # reason: first-party @cosyte package, exempt from the floor by operator decision + - "@cosyte/*" trustPolicy: no-downgrade