From 821085845964b3ac03c5fab23d69925ef2c95e1e Mon Sep 17 00:00:00 2001
From: Sheraff <me@florianpellet.com>
Date: Sun, 17 May 2026 16:09:45 +0200
Subject: [PATCH] security: stricter pnpm config blockExoticSubdeps &
 trustPolicy

---
 pnpm-workspace.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2d492f7f5..8ec7014b6 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,7 +1,8 @@
 cleanupUnusedCatalogs: true
 linkWorkspacePackages: true
 preferWorkspacePackages: true
-blockExoticSubdeps: false
+blockExoticSubdeps: true
+trustPolicy: 'no-downgrade'
 
 packages:
   - packages/**