From 240e705373018bfc83b0efb9c54038848912261d Mon Sep 17 00:00:00 2001
From: Cameron Marshall <5210281+marshacb@users.noreply.github.com>
Date: Wed, 20 May 2026 12:36:14 -0400
Subject: [PATCH] Disable Yarn install scripts by default and allowlist
 required build packages

---
 .yarnrc.yml  |  5 +----
 package.json | 14 ++++++++++++++
 yarn.lock    |  8 ++++++++
 3 files changed, 23 insertions(+), 4 deletions(-)

diff --git a/.yarnrc.yml b/.yarnrc.yml
index dc6128107..a388ff902 100644
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -1,6 +1,3 @@
-approvedGitRepositories:
-  - "**"
-
-enableScripts: true
+enableScripts: false
 
 nodeLinker: node-modules
diff --git a/package.json b/package.json
index 17494020d..57d2ce703 100644
--- a/package.json
+++ b/package.json
@@ -39,5 +39,19 @@
   "devDependencies": {
     "prettier": "3.4.2",
     "wasm-pack": "^0.13.1"
+  },
+  "dependenciesMeta": {
+    "@swc/core": {
+      "built": true
+    },
+    "esbuild": {
+      "built": true
+    },
+    "sharp": {
+      "built": true
+    },
+    "wasm-pack": {
+      "built": true
+    }
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 25c7f8837..7d8d877ed 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -12589,8 +12589,16 @@ __metadata:
     prettier: "npm:3.4.2"
     wasm-pack: "npm:^0.13.1"
   dependenciesMeta:
+    "@swc/core":
+      built: true
+    esbuild:
+      built: true
     glob:
       optional: true
+    sharp:
+      built: true
+    wasm-pack:
+      built: true
   languageName: unknown
   linkType: soft