Fast, disk space efficient package manager

Is there an existing issue for this? I have searched the existing issues Feature description PNPM vesrion 11 is in release candidate stage, and I would like to use it in my project. However, I see ...

Added in: v11.13.0

pnpr is a pnpm-compatible npm registry server, written in Rust. It speaks the

pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.

Specifics of npm's package.json handling

Migration guide: Migrating from v10 to v11 Highlights Major Node.js 22+ required — support for Node 18, 19, 20, and 21 is dropped, pnpm itself is now pure ESM, and the standalone exe requires glibc...

Added in: v11.0.0

When multiple AI agents need to work on the same monorepo simultaneously, they each need an isolated working copy with fully functional nodemodules. Git worktrees combined with pnpm's global virtual s...

How CKEditor migrated a multi-repository setup from Yarn Classic to pnpm - adding lockfiles for stable LTS builds, faster CI installs, and reliable linking.

2025 has been a transformative year for pnpm. While our primary focus was redefining the security model of package management, we also delivered significant improvements in performance and developer e...

We got lucky with Shai-Hulud 2.0.

Traditional package management systems for JavaScript have faced several inefficiencies related to dependency storage, resolution, and project performance. pnpm is a fast, disk-efficient package manag...

Sometimes npm packages are compromised and published with malware. Luckily, there are companies like [Socket], [Snyk], and [Aikido] that detect these compromised packages early. The npm registry usually removes the affected versions within hours. However, there is always a window of time between when the malware is published and when it is detected, during which you could be exposed. Fortunately, there are some things you can do with pnpm to minimize the risks.

pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.

Hello everyone! In May and June 2025, we raised the fund of $1,970.34, thanks to our awesome sponsors!...

pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.

Minor Changes Experimental. Added support for global virtual stores. When enabled, node_modules contains only symlinks to a central virtual store, rather to node_modules/.pnpm. By default, this c...