fix: deny postject build scripts in allowBuilds

Author: jdalton

pnpm-workspace.yaml

@@ -1,20 +1,13 @@
-# Migrated from .npmrc (pnpm v11 only reads auth/registry from .npmrc).
-ignoreScripts: true
-linkWorkspacePackages: false
-
-# Wait 7 days (10080 minutes) before installing newly published packages.
-minimumReleaseAge: 10080
-minimumReleaseAgeExclude:
-  - '@anthropic-ai/claude-code@2.1.98'
-  - '@socketaddon/*'
-  - '@socketbin/*'
-  - '@socketregistry/*'
-  - '@socketsecurity/*'
 
 packages:
   - packages/*
   - '!packages/package-builder/build'
 
+# Packages allowed to run build scripts (pnpm v11 strictDepBuilds default).
+allowBuilds:
+  esbuild: true
+  postject: false
+
 catalog:
   '@anthropic-ai/claude-code': 2.1.98
   '@babel/core': 7.28.4
@@ -80,10 +73,10 @@ catalog:
   compromise: 14.14.4
   del-cli: 6.0.0
   dev-null-cli: 2.0.0
+  ecc-agentshield: 1.4.0
   emoji-regex: 10.6.0
   es-define-property: npm:@socketregistry/es-define-property@^1.0.7
   es-set-tostringtag: npm:@socketregistry/es-set-tostringtag@^1.0.10
-  ecc-agentshield: 1.4.0
   esbuild: 0.25.11
   fast-glob: 3.3.3
   fast-xml-parser: 5.5.1
@@ -154,11 +147,18 @@ catalog:
   yargs-parser: 21.1.1
   yoctocolors-cjs: 2.1.3
   zod: 4.1.8
+# Migrated from .npmrc (pnpm v11 only reads auth/registry from .npmrc).
+ignoreScripts: true
+linkWorkspacePackages: false
 
-# Packages allowed to run build scripts (pnpm v11 strictDepBuilds default).
-allowBuilds:
-  esbuild: true
-  postject: true
+# Wait 7 days (10080 minutes) before installing newly published packages.
+minimumReleaseAge: 10080
+minimumReleaseAgeExclude:
+  - '@anthropic-ai/claude-code@2.1.98'
+  - '@socketaddon/*'
+  - '@socketbin/*'
+  - '@socketregistry/*'
+  - '@socketsecurity/*'
 
 # Dependency overrides (migrated from package.json pnpm.overrides).
 overrides:
@@ -199,8 +199,8 @@ overrides:
   shell-quote: 'catalog:'
   side-channel: 'catalog:'
   signal-exit: '4.1.0'
-  string_decoder: 'catalog:'
   string-width: 'catalog:'
+  string_decoder: 'catalog:'
   strip-ansi: 'catalog:'
   tiny-colors: 'catalog:'
   typedarray: 'catalog:'