🧰 Yarn

The items that name it 12

• Software supply chain security best practices for 2026
  articleas affected products2026-10-21
• upm Launches as a Fast, Tiny Package Manager Written in TypeScript
  articleas tools2026-09-29It is written here as Yarn (berry).

  Package manager mentioned as a comparison point, described as complex

• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• PackageGuard
  repoas affected products2026-08-31

  Package ecosystem scanned by PackageGuard for dependencies, licenses and risk

• Control Which Package Registries Your CI Jobs and Developer Machines Use
  articleas affected products2026-08-12

  falls back to registry.yarnpkg.com if not configured

• Socket: Fake Corepack Site Distributes Infostealer and Proxyware to Developers
  writeupas affected products2026-07-25

  Package manager managed via Corepack, confused by the fake site's AI-generated FAQ with yarn the textile craft

• What is a dependency firewall?
  articleas affected products2026-07-13

  package manager; supports minimum release age setting

• Socket: Introducing Manifest Alerts
  articleas affected products2026-06-18

  supported ecosystem for missing lockfile detection and remediation guidance

• The Pros and Cons of NPM v12's Security Improvements
  articleas affected products2026-06-10

  Added npmMinimalAgeGate cooldown setting in September 2025

• CVE Lite CLI
  repoas classification.technologies2026-05-31
• VSCode Lifecycle Script Malware
  writeupas affected products2026-05-16
• Cooldowns.dev
  articleas tools2026-05-06

  Node.js package manager; npmMinimalAgeGate cooldown option (added 4.10.0), default 1-day gate since 4.15.0.