pnpm
@pnpmjs
Fast, disk space efficient package manager 快速且節省磁碟空間的套件管理程式 Sponsor us: on GitHub: http://github.com/sponsors/pnpm on OpenCollective: https://opencollective.com/pnpm
Vous pourriez aimer
The Seattle Times is piloting pnpm’s client-side defenses—blocked lifecycle scripts, release cooldowns, and trust policy—to stop worms like Shai-Hulud 2.0 before they land. Read their story: pnpm.io/blog/2025/12/0…
The incidents keep happening. This remains a good idea for pnpm v11 x.com/pnpmjs/status/…
Yet another reminder to use @pnpmjs's minimum dependency age‼️ pnpm.io/settings#minim…
🔥 New npm attack DETECTED! A campaign dubbed “Sha1-Hulud: The Second Coming” has compromised hundreds of packages and over 25,000 GitHub repos. The code runs during install, steals cloud logins, and if that fails, it deletes the user’s home folder. Read more ↓…
Maintaining a CLI app? You can now target only the latest Node.js version — pnpm will install it automatically as a dependency for your app. x.com/pnpmjs/status/…
We have discovered that chokidar has switched off provenance a year ago and now it fails with the trustPolicy setting set to no-downgrade. We'll need to think about a way to deal with these cases. x.com/pnpmjs/status/…
💖 This Sep & Oct, we have forwarded our Open Collective fund to support @chris_zyyv @webfansplz @bluwyoo @KazariEX_0929 @vida_0905 e18e.dev esm.sh @pnpmjs @iconify_design Join us to show appreciation for our deps and help them be sustainable!…
esm.sh
ESM>CDN
A fast, smart & global CDN for modern(es2015+) web development.
pnpm 10.20 is out. Published via a trusted github action using OIDC.
Surprisingly, none of the package managers are published using OIDC publishing today. Even npm CLI. I did configure OIDC publishing for @pnpmjs, so it will be "trusted" in the next version
I remember using CKEditor at JustAnswer and being really excited when they were considering pnpm years ago. They decided not to switch back then — feels good to win them over at last. x.com/reinmarpl/stat…
It's impressive to see how quickly @pnpmjs added support for "minimal dependency age" (github.com/pnpm/pnpm/issu…) after the recent supply chain attacks on npm 😍 By a total coincidence, just a month ago, we finished a migration to pnpm. We definitely don’t look back 🚀 And today,…
United States Tendances
- 1. #Survivor49 1,973 posts
- 2. #AEWDynamite 7,644 posts
- 3. Venezuela 874K posts
- 4. Dan Bongino 51.3K posts
- 5. Kevin Warren 1,747 posts
- 6. Northwest Indiana 1,475 posts
- 7. Gary Bears N/A
- 8. Indiana Bears 2,576 posts
- 9. Arlington Heights 1,071 posts
- 10. The Elite 39.5K posts
- 11. NW Indiana N/A
- 12. Kristina 2,390 posts
- 13. Creighton 1,547 posts
- 14. #AEWHolidayBash N/A
- 15. Jack Smith 128K posts
- 16. Coinbase 47.6K posts
- 17. Roddy 2,400 posts
- 18. #OhMyGog N/A
- 19. Old Dominion 1,788 posts
- 20. Sophi N/A
Vous pourriez aimer
Something went wrong.
Something went wrong.