pnpm since v10.19.0 allows excluding specific dependencies from minReleaseAge by version.
replyWho will do the vetting process?
replyI think my vetting would settle for a repo diff against the previous version, confirming the only difference was the security fix (though that doesn't cover all the bases).
replyJia Tan
reply