diff --git a/frontend/package.json b/frontend/package.json
index 525e47d..7b9c8c9 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -3,6 +3,7 @@
   "version": "0.1.0",
   "private": true,
   "type": "module",
+  "packageManager": "pnpm@10.33.1",
   "scripts": {
     "dev": "concurrently -k -n vite,ck -c cyan,magenta \"vite --host 0.0.0.0 --port 3000\" \"tsx watch server.ts\"",
     "build": "vite build",
diff --git a/frontend/pnpm-workspace.yaml b/frontend/pnpm-workspace.yaml
index 581a9d5..a29d083 100644
--- a/frontend/pnpm-workspace.yaml
+++ b/frontend/pnpm-workspace.yaml
@@ -1,3 +1,11 @@
+# Build-script review (pnpm 10 refuses to run unreviewed dependency scripts).
+# vite needs the native binaries these two postinstalls provide:
+onlyBuiltDependencies:
+  - "@swc/core"
+  - esbuild
+
+# Deliberately not built:
 ignoredBuiltDependencies:
+  - "@scarf/scarf" # telemetry only
   - sharp
   - unrs-resolver