chore: Set dependency sandboxing (#478)

onbloc · Apr 9, 2024 · f061650 · f061650
1 parent 5808190
commit f061650
Show file tree

Hide file tree

Showing 4 changed files with 242 additions and 7 deletions.
diff --git a/.yarnrc b/.yarnrc
@@ -0,0 +1 @@
+ignore-scripts true
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -11,3 +11,4 @@ pnpMode: loose
 enableTelemetry: false
 
 yarnPath: .yarn/releases/yarn-3.4.1.cjs
+enableScripts: false
diff --git a/package.json b/package.json
@@ -5,6 +5,7 @@
   "license": "Adena License",
   "private": true,
   "scripts": {
+    "setup": "yarn install && yarn allow-scripts",
     "develop": "yarn workspace adena-extension build:dev",
     "build": "yarn build:module && yarn build:service && yarn",
     "build:module": "yarn workspaces foreach -ptR --from '{adena-module,adena-torus-signin}' run build",
@@ -20,6 +21,8 @@
   "devDependencies": {
     "@babel/core": "7.23.9",
     "@babel/runtime": "7.23.9",
+    "@lavamoat/allow-scripts": "^3.0.3",
+    "@lavamoat/preinstall-always-fail": "^2.0.0",
     "@storybook/react": "^7.6.17",
     "@yarnpkg/sdks": "3.1.0",
     "babel-loader": "9.1.3",
@@ -40,5 +43,11 @@
       "prettier --write",
       "git add"
     ]
+  },
+  "lavamoat": {
+    "allowScripts": {
+      "@lavamoat/preinstall-always-fail": false,
+      "@storybook/react>@storybook/docs-tools>@storybook/core-common>esbuild": false
+    }
   }
 }