pnpm 11.5 now properly recognizes npm’s staged publishing approvals as a strong security signal in release metadata, preventing packages using npm’s newer 2FA-backed release workflow from triggering false downgrade warnings. This fix addresses a broader need for clearer publishing signals in package registry metadata as npm adds more secure release mechanisms.