[lategloriousgnu]

We patch our dependencies.

This adds a diff to your repo, not an entire fork of the dependency.

A package manager like pnpm will install the package as usual, then apply your patch over the top.

https://pnpm.io/cli/patch

[lhnz]

Yes, good shout -- I do this sometimes, too. The only thing is that it doesn't work if what you're releasing is a shared package or installable and is not part of an application.