YARN 4.0

Summary from the TLDR newsletter

Yarn 4.0 has now been released. It introduces a new hardened mode that performs extra validations to prevent attackers from modifying lock files when making pull requests using Yarn. The update also implements many commonly used features and commands in the main distribution so users can access them without plugins. This article discusses the many more changes made in the Yarn 4.0 update.