can i set a secure list？ block specific name of npm packege？

[skimhugo]

because：vuejs/vue-cli#7054

[zkochan]

I guess you may use a hook

https://pnpm.io/pnpmfile#hooksreadpackagepkg-context-pkg--promisepkg

.pnpmfile.cjs:

module.export = {
  hooks: {
    readPackage: (manifest) => {
      if (manifest.name === 'peacenotwar') throw new Error('The peacenotwar package is not allowed')
      return manifest
    }
  }
}