security: stricter pnpm config blockExoticSubdeps & trustPolicy (#6272)

Sheraff · web-flow · commit 24b36ff542a8 · 2026-05-17T13:34:33.000-05:00
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
@@ -36,3 +36,5 @@ cleanupUnusedCatalogs: true
 
 linkWorkspacePackages: true
 preferWorkspacePackages: true
+blockExoticSubdeps: true
+trustPolicy: 'no-downgrade'
