CLI install commands?

[karlhorky]

Thanks for this package, default-trusted-dependencies.txt list from bun extracted to separate package looks quite helpful!

Looking at the readme, it appears that adding build-scripts-allowlist to package.json is a manual installation step (copy and paste from the readme at https://github.com/haoqunjiang/build-scripts-allowlist):

In your project using PNPM 10, add the following field to your package.json:

"pnpm": {
  "configDependencies": {
    "build-scripts-allowlist": "0.20250131.0+sha512-vuePnd+0F3PtuyFIHT1XsfOK7/BGkK1QmIMRHHPo+6LW7Wr/37QsQV3R/UztxoFWHHm9pSbCUovigSmeapfdLA=="
  },
  "onlyBuiltDependenciesFile": "node_modules/.pnpm-config/build-scripts-allowlist/common.json"
}

What are your thoughts on adding a command line installation command to always get the latest version? (or update, in case the config is already there)

Some first implementation ideas:

1. Is there a pnpm command to add a package to pnpm.configDependencies? If not, maybe using pnpm info?

   $ pnpm info build-scripts-allowlist version
   0.20250131.0

2. Is there a pnpm command to add a value to pnpm.onlyBuiltDependenciesFile? If not, could either use node -e "..." (more widely installed) or jq/yq