# Reviewed install-script (postinstall) packages, exempt from
# scripts/check_new_install_scripts.py. Pin each as "name@version" -- a
# maintainer compromise shipping a new malicious version must NOT slip
# through the same allowlist line.
#
# Rules: read the install body before adding. Entries MUST land on main
# first; the gate rejects head-only additions that self-approve a new dep.

# evanw/esbuild: postinstall downloads platform native binary. Pulled in
# transitively by vitest for dev-only test transforms; no runtime exposure.
esbuild@0.21.5