emdash-cms/emdash @emdash-cms/registry-lexicons@0.5.0 on GitHub

#3078 befce6d Thanks @ascorbic! - Adds a fail-closed first-release exemption to the plugin registry's optional minimum release age policy. A package's first release can install immediately only when the aggregator reports exactly one retained release and confirms that it continuously observed the package's release history.
Existing packages, backfilled packages, and packages with missing or incomplete history remain subject to the configured holdback. Deleted releases still count, and explicit publisher or package exemptions continue to work.
#2742 4cc150e Thanks @ascorbic! - Adds moderation-manipulation findings so labelers can distinguish direct attempts to bypass automated moderation from quoted or descriptive discussion of prompt injection.