Summary & Key Takeaways ​

• The pnpr resolver now prevents connections to private network addresses, enhancing security.
• Workspace projects are now linked using their publishConfig.directory setting.
• Transitive git and tarball dependencies are checked against the fetch allowlist.
• Cargo dependency resolution for sparse-index registries has been made faster.

Our Commentary ​

It's good to see security baked into an alpha release like this, especially for network resolvers. The publishConfig.directory linking is a nice touch for monorepo users. We appreciate the focus on both security and developer experience, even in these early stages.