Monorepo/pnpm-workspace.yaml at main · Devographics/Monorepo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
packages:
    # Packages
    - 'shared/*'
    # CLI tools
    - 'capture'
    # API
    - 'api'
    # Webapps
    - 'surveyform'
    - 'surveyadmin'
    - 'results'
    - 'results-astro'
    - 'results-remix'
    - 'charts'
    - 'jobs'
    - 'homepage'
    - 'graphiql'
    - 'dot_com'

# Security baseline:
# - review dependency build scripts explicitly (default deny)
# - block exotic transitive dependencies
# - avoid very fresh releases from the registry
# - fail fast when dependency state is out of sync before running scripts
# - start with strict defaults and relax only if they cause real issues
strictDepBuilds: true
blockExoticSubdeps: true
verifyDepsBeforeRun: error
minimumReleaseAge: 1440
trustPolicy: no-downgrade
trustPolicyIgnoreAfter: 14400

allowBuilds:
    '@apollo/protobufjs': false
    '@parcel/watcher': false
    '@sentry/cli': false
    core-js: false
    core-js-pure: false
    es5-ext: false
    esbuild: false
    gatsby: false
    gatsby-cli: false
    lmdb: false
    mongodb-client-encryption: false
    mongodb-memory-server: false
    msgpackr-extract: false
    puppeteer: false
    sharp: false
    unrs-resolver: false