https://www.drupal.org/project/drupal/issues/3308369
Block access to yarn.lock and package.json [#3308369] | Drupal.org
Dec 15, 2022 - Problem/Motivation Currently, when building a Drupal website, you can visit core/package.json and core/yarn.lock, which exposes some info about the used...
access toblockyarn