JavaScript hardening overview

Looking for sources not listed in the reference or config generator? They should be here!

Sources

• https://pnpm.io/blog/2025/12/05/newsroom-npm-supply-chain-security

Example repositories

Thanks to https://openalternative.co/

• Excalidraw uses yarn classic, no rc
• Affine uses yarn berry, with rc