* docs: route planned work to pnpm/tasks and stop labeling bug reports
pnpm/pnpm issues are now reserved for bug reports against released pnpm
behavior. Planned work (PR follow-ups, refactors, performance, parity gaps,
CI and benchmark work, post-release docs) moved to the pnpm/tasks repository,
feature ideas go to Discussions, and security reports go through private
advisories.
AGENTS.md tells agents where to file each kind of issue. The bug report
template no longer adds the "type: bug" label, since every issue in this
repository is now a bug report.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: defer security reporting to SECURITY.md
SECURITY.md sends pacquet and pnpr security issues to public issues while
they are not production ready, so AGENTS.md must not require a private
advisory for every vulnerability.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>