- Adds extensive security hardening: config dependencies are verified against the registry, unsafe git dependencies are rejected, lockfile integrity checks are stricter, and large or malformed package archives are blocked.
- Improves performance and reliability by reading cached registry metadata faster, using bounded memory for large downloads, and fixing hangs on problematic archives.
- Updates configuration handling and commands: global config commands now show only global settings, dlx respects workspace nodeDownloadMirrors, run/exec forward config flags, and several warning/message refinements.
