WHAT THE AXIOS SUPPLY CHAIN ATTACK REVEALED ABOUT LOCKFILES AND PNPM 10

Summary from the TLDR Dev newsletter

The Axios supply chain attack showed the importance of lockfiles for making sure predictable dependency versions and pnpm v10's safeguards for controlling install-time script execution to mitigate similar supply chain risks.