Possibly outdated FAQ or unclear README

[Denperidge]

Hiya! There is (at least from my socket-inexperienced perspective) an inconsistency from the safe npm FAQ and this project's README.

The FAQ (chapter "How is the wrapper implemented?") says safe npm only currently works with npm, whilst the README mentions wrapping pnpm and yarn with security features

Does the latter refer to non-install security features? Or is the FAQ behind on this documentarion?

[jdalton]

The README is right and the FAQ is behind. socket pnpm and socket yarn are real commands that wrap their package manager the same way socket npm does, and they run the same install-time alert lookup — the shadow layer under src/shadow/pnpm and src/shadow/yarn goes through the same getAlertsMapFromPurls path socket npm uses, so it is install scanning and not just non-install features. The safe npm FAQ page lives on the docs site rather than in this repo, so correcting the "npm only" wording there is a separate change; thanks for flagging the mismatch.