@zen-agentchecks…zen/add-minimum-release-age-5mbnjx → main1 files · +1 −0updated 2mo agoAdd minimumReleaseAge: 4320 (3 days) to pnpm-workspace.yaml to protect against supply chain attacks by ensuring newly published package versions have a cooling-off period before they can be installed.
This is a pnpm 10.16+ feature that delays installation of packages published less than 3 days ago. The 3-day window is the community-recommended best practice (used as default by Renovate's best-practices config) and would have blocked most known supply chain attacks.
Codex review: N/A (config-only change — new pnpm-workspace.yaml with single setting)
CI status: Vercel deployment succeeded. No other CI checks configured.
Tests/E2E: Setting is declarative — no runtime or UI behavior to test. No browser test/video needed (no UI changes).
Comments addressed: No review comments received
Blockers: None — ready to merge
The latest updates on your projects. Learn more about Vercel for GitHub.
| Project | Deployment | Actions | Updated (UTC) |
|---|---|---|---|
| dashboard |  Ready | Preview, Comment | Mar 30, 2026 5:54pm |