diff --git a/.npmrc b/.npmrc
--- a/.npmrc
+++ b/.npmrc
@@ -1,1 +1,6 @@
 shared-workspace-lockfile=false
+
+# Supply-chain hardening for pnpm 10.
+minimum-release-age=10080
+block-exotic-subdeps=true
+strict-dep-builds=true
diff --git a/package.json b/package.json
--- a/package.json
+++ b/package.json
@@ -84,6 +84,9 @@
     "overrides": {
       "vite-node": "^5.2.0",
       "esbuild": "^0.25.0"
+    },
+    "allowBuilds": {
+      "esbuild": true
     }
   },
   "devDependencies": {