registry=https://registry.npmjs.org/
# Security: block transitive deps from using git/tarball sources outside the registry
# If you hit ERR_PNPM_EXOTIC_SUBDEP on a legit package, this may be a pnpm bug — check pnpm/pnpm#10324
block-exotic-subdeps=true