X_DEPENDENCY_UNSCANNED

the dependency guard read no workspace manifest, or no manifest declared a dependency

the root manifest could not be read, or the workspace globs matched nothing — the allowlist then enforces nothing

run bun run scripts/dependency-allowlist.ts --json from the repository root