Source-backed platform rule

pnpm approve-builds allowBuilds and permissions rules

The map and permissions setting are alternatives under a documented condition, not interchangeable instructions for every pnpm version. This record describes the pinned unversioned documentation, not a claim that older pnpm versions support permissions.

RuleRoster is independent and is not affiliated with or endorsed by pnpm.

Direct answer

What is the rule?

The pinned pnpm documentation says approve-builds writes approved dependencies as true and unapproved dependencies as false in allowBuilds in pnpm-workspace.yaml. Since v12.11.0, if that file already has permissions, it writes the decisions there as the build capability instead.

Scope: pinned_unversioned_documentation
Rule verified: October 14, 2026
Source checked: October 19, 2026

Published evidence

Rule details

Where decisions are stored

Version and configuration scope

Check the installed pnpm version and the version selector in the official documentation before applying this rule. An archive and the unversioned page describe different configurations; do not copy one into the other without checking support.

Approving a build is an explicit trust decision

Approval lets a dependency run scripts during installation. Review the package and the required build operation before approving it. This reference does not approve any dependencies or recommend blanket approval.

Evidence and renewal

The exact docs/cli/approve-builds.md document is pinned at 4a89ca5d576167ea6120f7030c895465ec186d8c. The extractor requires its exact bytes and scoped statement; source changes require a new reviewed revision.

Source attribution, license, and changes

pnpm documentation by Zoltan Kochan and other contributors. Copyright (c) 2016-2022 Zoltan Kochan and other contributors. MIT License: https://github.com/pnpm/pnpm.io/blob/4a89ca5d576167ea6120f7030c895465ec186d8c/LICENSE. RuleRoster extracted and paraphrased the scoped configuration. No endorsement is implied.

Evidence trail

Official sources

pnpm approve-builds allowBuilds and permissions rules
pnpm · verified October 14, 2026

Interpretation and accountability

Before you act

Confirm that the scope matches your case.
Keep recommendations, enforced limits, exceptions, and unstated details distinct.
Open the official source before relying on the rule for a consequential decision.

Record dates

Published: October 14, 2026
Rule verified: October 14, 2026
Source checked: October 19, 2026
Review due: November 2, 2026

Challenge this record

If the source or summary appears wrong, submit precise evidence for human review.

Submit a correction