@pnpm/plugin-trusted-deps 0.2.0 → 0.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/plugin-trusted-deps",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A list of OSS packages that are known to require lifecycle scripts to function properly",
   "main": "index.js",
   "files": [
@@ -8,11 +8,19 @@
     "allow.json",
     "pnpmfile.cjs"
   ],
+  "scripts": {
+    "lint": "eslint .",
+    "test": "node test.js",
+    "update-list": "ts-node updateList.ts"
+  },
   "keywords": [
     "pnpm-config"
   ],
   "license": "MIT",
+  "packageManager": "pnpm@10.27.0",
   "devDependencies": {
+    "eslint": "^9.39.2",
+    "neostandard": "^0.12.2",
     "ts-node": "^10.9.2"
   },
   "funding": "https://opencollective.com/pnpm",
@@ -23,9 +31,5 @@
   "homepage": "https://github.com/pnpm/trusted-deps#readme",
   "bugs": {
     "url": "https://github.com/pnpm/trusted-deps/issues"
-  },
-  "scripts": {
-    "test": "node test.js",
-    "update-list": "ts-node updateList.ts"
   }
-}
+}

package/pnpmfile.cjs

@@ -4,9 +4,18 @@ module.exports = {
       if (config.onlyBuiltDependencies == null) {
         config.onlyBuiltDependencies = []
       }
-      config.onlyBuiltDependencies.push(...require('./allow.json'))
+      const defaultAllowed = require('./allow.json')
+      if (!config.ignoredBuiltDependencies?.length) {
+        config.onlyBuiltDependencies.push(...defaultAllowed)
+      } else {
+        const ignored = new Set(config.ignoredBuiltDependencies)
+        for (const allowed of defaultAllowed) {
+          if (!ignored.has(allowed)) {
+            config.onlyBuiltDependencies.push(allowed)
+          }
+        }
+      }
       return config
-    }
-  }
+    },
+  },
 }
-