diff --git a/.github/workflows/npm-package-release.yml b/.github/workflows/npm-package-release.yml
index 48fffd20f2..fdfadd9af2 100644
--- a/.github/workflows/npm-package-release.yml
+++ b/.github/workflows/npm-package-release.yml
@@ -79,6 +79,17 @@ jobs:
       - name: Test UI Components
         run: nix develop -c npm run test -w @rainlanguage/ui-components
 
+      # check for npm package blacklists pkgs across all orderbook related packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
       - name: Git Config
         run: |
           git config --global user.email "${{ secrets.CI_GIT_EMAIL }}"
diff --git a/.github/workflows/tauri-release.yml b/.github/workflows/tauri-release.yml
index 775c3c9050..bdb1e7b832 100644
--- a/.github/workflows/tauri-release.yml
+++ b/.github/workflows/tauri-release.yml
@@ -99,6 +99,21 @@ jobs:
           COMMIT_SHA: ${{ github.sha }}
           SENTRY_LOG_LEVEL: debug
 
+      # check for npm package blacklists pkgs across all tauri related packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: tauri-app
+
       - uses: tauri-apps/tauri-action@v0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/tauri.yaml b/.github/workflows/tauri.yaml
index 0e2a3f2059..d142823d2d 100644
--- a/.github/workflows/tauri.yaml
+++ b/.github/workflows/tauri.yaml
@@ -98,3 +98,18 @@ jobs:
       - run: rm -rf tauri-app/src-tauri/target/debug tauri-app/src-tauri/target/release
 
       - run: nix develop .#tauri-shell --command tauri-rs-test
+
+      # check for npm package blacklists pkgs across all tauri related packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: tauri-app
diff --git a/.github/workflows/test-ui-components.yaml b/.github/workflows/test-ui-components.yaml
index 416b28d0ef..39252fb2f6 100644
--- a/.github/workflows/test-ui-components.yaml
+++ b/.github/workflows/test-ui-components.yaml
@@ -44,7 +44,17 @@ jobs:
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID || 'test' }}
 
-      - run: nix develop -c npm run svelte-lint-format-check
-        working-directory: packages/ui-components
-      - run: nix develop -c npm run test
-        working-directory: packages/ui-components
+      - run: nix develop -c npm run svelte-lint-format-check -w @rainlanguage/ui-components
+
+      - run: nix develop -c npm run test -w @rainlanguage/ui-components
+
+      # check for npm package blacklists pkgs across all packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
diff --git a/.github/workflows/test-webapp.yaml b/.github/workflows/test-webapp.yaml
index 8ea834670e..cf18f50bea 100644
--- a/.github/workflows/test-webapp.yaml
+++ b/.github/workflows/test-webapp.yaml
@@ -44,12 +44,25 @@ jobs:
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID || 'test' }}
 
-      - run: nix develop -c npm run svelte-lint-format-check
-        working-directory: packages/webapp
+      - run: nix develop -c npm run svelte-lint-format-check -w @rainlanguage/webapp
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID || 'test' }}
 
-      - run: nix develop -c npm run test
-        working-directory: packages/webapp
+      - run: nix develop -c npm run test -w @rainlanguage/webapp
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID || 'test' }}
+
+      # check for npm package blacklists pkgs across all packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/webapp
diff --git a/.github/workflows/vercel-preview-pr-target.yaml b/.github/workflows/vercel-preview-pr-target.yaml
index 516d02b163..d20029b68f 100644
--- a/.github/workflows/vercel-preview-pr-target.yaml
+++ b/.github/workflows/vercel-preview-pr-target.yaml
@@ -59,6 +59,17 @@ jobs:
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: test
 
+      # check for npm package blacklists pkgs across all packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
       - name: Install Vercel CLI (local, pinned)
         shell: bash --noprofile --norc -euo pipefail {0}
         run: |
diff --git a/.github/workflows/vercel-preview.yaml b/.github/workflows/vercel-preview.yaml
index 53e930d35f..e7a460ac51 100644
--- a/.github/workflows/vercel-preview.yaml
+++ b/.github/workflows/vercel-preview.yaml
@@ -63,6 +63,17 @@ jobs:
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID }}
 
+      # check for npm package blacklists pkgs across all packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
       - name: Install Vercel CLI (local, pinned)
         shell: bash --noprofile --norc -euo pipefail {0}
         run: |
diff --git a/.github/workflows/vercel-prod.yaml b/.github/workflows/vercel-prod.yaml
index 4333976bb0..4de7683f74 100644
--- a/.github/workflows/vercel-prod.yaml
+++ b/.github/workflows/vercel-prod.yaml
@@ -46,6 +46,17 @@ jobs:
         env:
           PUBLIC_WALLETCONNECT_PROJECT_ID: ${{ secrets.WALLETCONNECT_PROJECT_ID }}
 
+      # check for npm package blacklists pkgs across all packages
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/orderbook
+
+      - uses: rainlanguage/github-chore/.github/actions/npm-blacklist@main
+        with:
+          working-directory: packages/ui-components
+
       - name: Install Vercel CLI
         run: npm install --global vercel@canary
       - name: Pull Vercel Environment Information
diff --git a/flake.lock b/flake.lock
index 79a9f932cd..588c043098 100644
--- a/flake.lock
+++ b/flake.lock
@@ -367,11 +367,11 @@
         "solc": "solc_2"
       },
       "locked": {
-        "lastModified": 1749284231,
-        "narHash": "sha256-2pxLmguxgvcIaoCrxrrJaod+Sen/HjULnibdjogNp14=",
+        "lastModified": 1757439424,
+        "narHash": "sha256-slPazOVyDSOaG7uL/E4Er2gbS5Zx7037oYHrSE2GuO4=",
         "owner": "rainlanguage",
         "repo": "rainix",
-        "rev": "f3ef7c9b21db154d6e57858aa2f59ce40e6677bb",
+        "rev": "7f734b1da77771b5d6ee5449f43c2a1a43705149",
         "type": "github"
       },
       "original": {