You can probably feed a curated list of allowed packages for this step