pnpm Criticized for Closing Private Vulnerability Reporting Channel

Ruff author charliermarsh slammed pnpm's decision to shut its private vulnerability reporting channel, warning users stay exposed unless an alternative responsible disclosure mechanism exists.

2026-10-05 ~ 2026-10-05 · 2 related posts

• Ruff Author Urges pnpm Not to Disable Private Vulnerability Reporting Without Alternative — charliermarsh · 2026-10-05
• Ruff Author Slams pnpm Over Disabling Private Vulnerability Reporting — charliermarsh · 2026-10-05