pnpm

Fast, disk space efficient package manager

Sponsor us:
GH: don't endorse any memecoins!

[pnpm @pnpmjs]

The pnpm repository has 37K stars!

[Zoltan Kochan @zkochan]

I used to have a rule to merge at least 1 pr to @pnpmjs a day.

[pnpm @pnpmjs]

The pnpm repository has 37K stars!

[pnpm @pnpmjs]

Hurrah! The pnpm repo has 3K stars on GitHub🎉

[pnpm @pnpmjs]

The pnpm repository has 36K stars!

[pnpm @pnpmjs]

A full month has passed since we committed to the zero open issues policy in the pnpm repository. The number of new issues filed per week keeps going down.

[pnpm @pnpmjs]

Lets try https://t.co/oKS6DW41gd

[CodeRabbit @coderabbitai]

New in CodeRabbit Secure:

Deep Scan now follows a vulnerability across your linked repos, then replays the exploit in a throwaway sandbox to prove it's real before it flags anything.

Hendrik walks through this and everything else in the new update:

[pnpm @pnpmjs]

@tomus_sherman Yes. 12.15.0 picked up rustls-webpki 0.103.16 and webpki-root-certs 1.0.10, which distrust the eMudhra intermediates and remove the emSign ECC G3 root. It came in as part of a dependency refresh, so it didn't make the notes.

[pnpm @pnpmjs]

Thanks to @Cloudflare and @vite_js for sponsoring pnpm!

[pnpm @pnpmjs]

Blacksmith is sponsoring CI for pnpm. Congrats!

https://t.co/ktKN04cq1k

[Aditya Jayaprakash @adijayaprakash]

@sequoia is leading our Series C at a $1B valuation.

We started Blacksmith in 2024 to make CI faster and less painful. In January we ran 5 million CI jobs a week. Today it's over 90 million and growing, and we’re still early.

[pnpm @pnpmjs]

Update pnpm to v12.15.0 if you want to be able to split settings across files. For instance, you can move security policies to a protected file.

https://t.co/qzFBxe8qJW

[pnpm @pnpmjs]

We have some open issues up for grabs: https://t.co/JJtkF7XNw0

PRs submitted by agents are welcomed.

[pnpm @pnpmjs]

New pnpm RFC for anyone interested: the possibility to load settings from multiple config files. This would allow to control who can change specific settings via git policies and similar toolings

https://t.co/x5y1J8iEzU

[pnpm @pnpmjs]

pnpm can now work with no node_modules, leveraging the esm loaders of node.js. Doesn't work with typescript and other toolings that inspect node_modules but works with bare Node.js. Related docs: https://t.co/ZynabKws7v

[Yaman Ahlawat @YamanAhlawat]

some love for @pnpmjs

[pnpm @pnpmjs]

@hexablob you can approve an exact version like:

```
permissions:
[email protected]:
skills: true
```

[pnpm @pnpmjs]

pnpm v12.11 can install skills.

related docs: https://t.co/dxS6UCc7tB

[pnpm @pnpmjs]

@Anoesj sure, they are just regular dependencies.

[pnpm @pnpmjs]

@me_jd_solanki PRs are open for contribution. Usage of agents is allowed and welcomed.

[pnpm @pnpmjs]

What skills or packages with skills should we feature in examples?

https://t.co/YEHHN1j4h1

[pnpm @pnpmjs]

pnpm v12.11 can install skills.

related docs: https://t.co/dxS6UCc7tB

[CodeRabbit @coderabbitai]

1,049,817 open-source code reviews in September, a new monthly record!

That's 2.49x April's volume and up 14.4% from August.

"Not using it today would be like racing Formula One without a seatbelt or helmet." – @tannerlinsley, creator of TanStack

[pnpm @pnpmjs]

@balazsorban44 pn is shorter to type

[pnpm @pnpmjs]

also for global virtual store https://t.co/E5YOy4KdQW

[pnpm @pnpmjs]

Adding animated illustrations to the website. These are also done via @bitdotcloud

https://t.co/COpdSGpdqs