https://getcomposer.org/doc/06-config.md#allow-plugins
Defaults to {} which does not allow any plugins to be loaded.

As of Composer 2.2.0, the allow-plugins option adds a layer of security allowing you to restrict which Composer plugins are able to execute code during a Composer run.

When a new plugin is first activated, which is not yet listed in the config option, Composer will print a warning. If you run Composer interactively it will prompt you to decide if you want to execute the plugin or not.

Use this setting to allow only packages you trust to execute code. Set it to an object with package name patterns as keys. The values are true to allow and false to disallow while suppressing further warnings and prompts.

❯ nix build .#phpdocumentor -L --rebuild
phpdocumentor> Running phase: unpackPhase
phpdocumentor> unpacking source archive /nix/store/30ryfv45bmdj5nc3xbqfdrgb41wgdvr7-source
phpdocumentor> source root is source
phpdocumentor> Running phase: patchPhase
phpdocumentor> Running phase: updateAutotoolsGnuConfigScriptsPhase
phpdocumentor> Running phase: configurePhase
phpdocumentor> Executing composerInstallConfigureHook
phpdocumentor> Setting COMPOSER_ROOT_VERSION to 3.6.0
phpdocumentor> Finished composerInstallConfigureHook
phpdocumentor> Running phase: buildPhase
phpdocumentor> Executing composerInstallBuildHook
phpdocumentor> Finished composerInstallBuildHook
phpdocumentor> Running phase: checkPhase
phpdocumentor> Executing composerInstallCheckHook
phpdocumentor> Finished composerInstallCheckHook
phpdocumentor> Running phase: installPhase
phpdocumentor> Executing composerInstallInstallHook
phpdocumentor> Creating symlink bin/phpdoc...
phpdocumentor> Creating symlink bin/phpdoc.php...
phpdocumentor> Finished composerInstallInstallHook
phpdocumentor> Running phase: fixupPhase
phpdocumentor> shrinking RPATHs of ELF executables and libraries in /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0
phpdocumentor> shrinking /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/bin/phpdoc
phpdocumentor> checking for references to /build/ in /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0...
phpdocumentor> patching script interpreter paths in /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/bin/phpdoc: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/bin/yaml-lint: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/bin/githubaction: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/bin/phpdoc.php: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/tools/box: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/vendor/symfony/yaml/Resources/bin/yaml-lint: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/share/php/phpdocumentor/vendor/nikic/php-parser/bin/php-parse: interpreter directive changed from "#!/usr/bin/env php" to "/nix/store/r2xq8q0ngikflpnjpbai4pycqkdycikl-php-with-extensions-8.3.15/bin/php"
phpdocumentor> rewriting symlink /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/bin/phpdoc.php to be relative to /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0
phpdocumentor> rewriting symlink /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0/bin/.phpdoc-wrapped to be relative to /nix/store/ls48ivg6jn95fm7f8ip6207i0ldj90x6-phpdocumentor-3.6.0
~/C/N/nixpkgs > (~push-nvstlwpxlprr (no description set) xlmlx 7b6bce) ❯ 

    specified: sha256-PVaa0o8daoqXs8l3bF/Fsmtx3bdpO2uXTnR4tx8cUC4=
        got:    sha256-LESUhPjpj1KkFkB+JEOCGU9c6LuDQJB5Dtc/q5Bt3Og=