I think it's a `pnpm-workspace.yaml` setting, for now, but PNPM has been pretty aggressive with expanding this feature set [1]. [1] https://pnpm.io/supply-chai

I think it's a `pnpm-workspace.yaml` setting, for now, but PNPM has been pretty aggressive with expanding this feature set [1]. [1] https://pnpm.io/supply-chain-security https://pnpm.io/supply-chain-security