Comment by dorilama

You can probably feed a curated list of allowed packages for this step