pnpm-workspace.yaml

# Supply-chain posture (matches CI and dev machines):
# - 4-day release quarantine on new versions (minutes)
# - build scripts blocked except the narrow allowBuilds list below.
#   ignoreScripts: false restores pnpm's default gated behaviour where a
#   global config hard-disables all scripts, so allowBuilds can take effect.
minimumReleaseAge: 5760
ignoreScripts: false
allowBuilds:
  # optional watcher for serverless-esbuild watch mode; chokidar fallback works
  "@parcel/watcher": false
  # postinstall only prints funding messages
  core-js: false
  es5-ext: false
  # downloads its platform binary in a postinstall script
  esbuild: true