chore: harden pnpm supply-chain config
Add minimumReleaseAge cooldown + blockExoticSubdeps to block transitive git/tarball deps (npm-security-best-practices).
E
Eduardo Calvo committed
eba92bfec34c2c8fc15f02f07acf976ce8beb15b
Parent: 16d17ec