diff --git a/.npmrc b/.npmrc
index 135f7a0..68cb41e 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,6 @@
 shared-workspace-lockfile=false
+
+# Supply-chain hardening for pnpm 10.
+minimum-release-age=10080
+block-exotic-subdeps=true
+strict-dep-builds=true
diff --git a/package.json b/package.json
index 427b8f1..f9d1e85 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,10 @@
     "overrides": {
       "vite-node": "^5.2.0",
       "esbuild": "^0.25.0"
-    }
+    },
+    "ignoredBuiltDependencies": [
+      "esbuild"
+    ]
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.15",