security: stricter pnpm config blockExoticSubdeps & trustPolicy (#569) view more