Mitigating Supply Chain Attacks with pnpm by pnpmpnpm v10 introduces built-in protections against npm supply chain attacks through script blocking, dependency restrictions, and release delays.securitydeveloper-experiencebest-practicesJan 2, 2026