diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 2badf9f..66728b7 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -28,7 +28,11 @@ # usually detected quickly, delaying updates by 24 hours will most likely # prevent you from installing a bad version" # (https://pnpm.io/supply-chain-security). +# @cosyte is exempt by operator decision; every third-party package keeps the floor. minimumReleaseAge: 1440 +minimumReleaseAgeExclude: + # reason: first-party @cosyte package; the operator exempted every version from the floor + - "@cosyte/*" # Fail the install when a package's trust evidence is weaker than that of an # earlier-published version of the same package (a trusted publisher that