Possibly outdated FAQ or unclear README

Hiya! There is (at least from my socket-inexperienced perspective) an inconsistency from the safe npm FAQ and this project's README.

The FAQ (chapter "How is the wrapper implemented?") says safe npm only currently works with npm, whilst the README mentions wrapping pnpm and yarn with security features

Does the latter refer to non-install security features? Or is the FAQ behind on this documentarion?

比较 README 的“Core Commands”部分与链接的 safe npm FAQ，重点关注其中关于 npm、pnpm 和 yarn 的说法。与 maintainer 确认预期范围，然后更新相关文档，使两个来源保持一致，并清楚描述受支持的命令和安全功能。