Skip to content

docs: Clarify additional use-case of npmMinimalAgeGate #6945

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 22 commits into
base: master
Choose a base branch
from
+1 −1
Open

docs: Clarify additional use-case of npmMinimalAgeGate #6945

Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
a05df86
feat: implement `minimumNpmReleaseAge` and `minimumNpmReleaseAgeExclu…
bienzaaron Sep 17, 2025
db24b78
fix: support `npm:` prefix for locators too
bienzaaron Sep 17, 2025
900a7d2
test: adding tests for `minimumNpmReleaseAge` and `minimumNpmReleaseA…
bienzaaron Sep 17, 2025
11f5edd
fix: rename options to better align with existing npm-related options
bienzaaron Sep 17, 2025
eccba6c
fix: change the way unknowns are resolved to fix `add`/`up`
bienzaaron Sep 17, 2025
257fa2d
fix: fix release packages based on ci output
bienzaaron Sep 17, 2025
84d4b5d
refactor: rename options
bienzaaron Sep 17, 2025
0c7b130
Revert "fix: change the way unknowns are resolved to fix `add`/`up`"
bienzaaron Sep 17, 2025
ebd41b5
refactor: move exclusion logic to a helper
bienzaaron Sep 17, 2025
79d3aa7
fix: crawl package versions from highest to lowest if `latest` tag do…
bienzaaron Sep 17, 2025
55b5185
refactor: rename gate check function
bienzaaron Sep 17, 2025
9db6b3b
docs: update doc language to match option name
bienzaaron Sep 17, 2025
93957a6
refactor: move npm-related configs into plugin-npm
bienzaaron Sep 17, 2025
98e58ad
fix: if latest is unsuitable, ensure we don't select a higher version
bienzaaron Sep 17, 2025
fb35bc8
simplify `npmPreapprovedPackages`
bienzaaron Sep 17, 2025
ef35b65
Couple of tweaks
arcanis Sep 17, 2025
b0d4031
Merge remote-tracking branch 'origin/master' into pr/bienzaaron/6901
arcanis Sep 17, 2025
0cdbdfb
Merge remote-tracking branch 'origin/master' into pr/bienzaaron/6901
arcanis Sep 17, 2025
e4cd5dd
Versions
arcanis Sep 17, 2025
aa5ac1c
docs: Clarify additional use-case of npmMinimalAgeGate
IchordeDionysos Oct 15, 2025
7e974ed
Merge remote-tracking branch 'main/master' into patch-1
IchordeDionysos Oct 15, 2025
821db3f
Delete incorrect versions file
IchordeDionysos Oct 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/docusaurus/static/configuration/yarnrc.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -482,7 +482,7 @@
"npmMinimalAgeGate": {
"_package": "@yarnpkg/core",
"title": "Minimum age of a package version according to the publish date on the npm registry in minutes to be considered for installation.",
"description": "If a package version is newer than the minimal age gate, it will not be considered for installation. This can be used to reduce the likelihood of installing compromised packages.",
"description": "If a package version is newer than the minimal age gate, it will not be considered for installation. This can be used to reduce the likelihood of installing compromised packages or not to install packages that are still unpublishable. (e.g. NPM allows to uninstall packages in the first 72h; use `4320` for 3 days)",
"type": "number",
"default": 0
},
Expand Down
Loading