From 0695d31ae6a551ed177be24ca6aa109e34c0c3e1 Mon Sep 17 00:00:00 2001
From: "Amir H. Hashemi" <87268103+amirhhashemi@users.noreply.github.com>
Date: Wed, 7 Jan 2026 19:15:30 +0330
Subject: [PATCH] Verify that all packages are at least one week old before
 installation.

To minimize the risk of installing compromised packages, the minimumReleaseAge policy requires that all packages must have been released at least one week ago. Packages over which we have greater control are excluded from this requirement.

See also: https://pnpm.io/settings#minimumreleaseage
---
 pnpm-workspace.yaml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 pnpm-workspace.yaml

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 000000000..38971698f
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,5 @@
+minimumReleaseAge: 10080 # 1 week
+minimumReleaseAgeExclude:
+  - "solid-js"
+  - "@solidjs/*"
+  - "@kobalte/solidbase"