nanocoder/pnpm-workspace.yaml at main · MsfPablo/nanocoder · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
packages:
  - .
  - plugins/*

minimumReleaseAge: 10080
blockExoticSubdeps: true
trustPolicy: no-downgrade

overrides:
  tmp: ">=0.2.6"

allowBuilds:
  '@vscode/vsce-sign': true
  esbuild: true
  keytar: true
  node-llama-cpp: false

auditConfig: {}

ignoredBuiltDependencies:
  - protobufjs

# semver@5.7.2 (via @vscode/vsce -> parse-semver) is the 2023 ReDoS-fix
# release of the v5 line; it predates npm provenance while later-published
# 7.x releases have it, so the no-downgrade trust check flags it on fresh
# resolution. Already present in the committed lockfile - exact version only.
trustPolicyExclude:
  - semver@5.7.2

minimumReleaseAgeExclude:
  - brace-expansion@1.1.14
  - '@hono/node-server@1.19.14'
  - fast-uri@3.1.2
  - hono@4.12.18

onlyBuiltDependencies:
  - '@biomejs/biome'
  - '@vscode/vsce-sign'
  - esbuild
  - keytar

patchedDependencies:
  '@ai-sdk/openai@3.0.71': patches/@ai-sdk__openai@3.0.71.patch
  ink@6.8.0: patches/ink@6.8.0.patch