pnpm
@pnpmjs
Fast, disk space efficient package manager 快速且節省磁碟空間的套件管理程式 Sponsor us: on GitHub: http://github.com/sponsors/pnpm on OpenCollective: https://opencollective.com/pnpm
Potrebbero piacerti
The Seattle Times is piloting pnpm’s client-side defenses—blocked lifecycle scripts, release cooldowns, and trust policy—to stop worms like Shai-Hulud 2.0 before they land. Read their story: pnpm.io/blog/2025/12/0…
The incidents keep happening. This remains a good idea for pnpm v11 x.com/pnpmjs/status/…
Yet another reminder to use @pnpmjs's minimum dependency age‼️ pnpm.io/settings#minim…
🔥 New npm attack DETECTED! A campaign dubbed “Sha1-Hulud: The Second Coming” has compromised hundreds of packages and over 25,000 GitHub repos. The code runs during install, steals cloud logins, and if that fails, it deletes the user’s home folder. Read more ↓…
Maintaining a CLI app? You can now target only the latest Node.js version — pnpm will install it automatically as a dependency for your app. x.com/pnpmjs/status/…
We have discovered that chokidar has switched off provenance a year ago and now it fails with the trustPolicy setting set to no-downgrade. We'll need to think about a way to deal with these cases. x.com/pnpmjs/status/…
💖 This Sep & Oct, we have forwarded our Open Collective fund to support @chris_zyyv @webfansplz @bluwyoo @KazariEX_0929 @vida_0905 e18e.dev esm.sh @pnpmjs @iconify_design Join us to show appreciation for our deps and help them be sustainable!…
esm.sh
ESM>CDN
A fast, smart & global CDN for modern(es2015+) web development.
pnpm 10.20 is out. Published via a trusted github action using OIDC.
Surprisingly, none of the package managers are published using OIDC publishing today. Even npm CLI. I did configure OIDC publishing for @pnpmjs, so it will be "trusted" in the next version
I remember using CKEditor at JustAnswer and being really excited when they were considering pnpm years ago. They decided not to switch back then — feels good to win them over at last. x.com/reinmarpl/stat…
It's impressive to see how quickly @pnpmjs added support for "minimal dependency age" (github.com/pnpm/pnpm/issu…) after the recent supply chain attacks on npm 😍 By a total coincidence, just a month ago, we finished a migration to pnpm. We definitely don’t look back 🚀 And today,…
United States Tendenze
- 1. #SantaChat 3,737 posts
- 2. Jack Smith 44.4K posts
- 3. Luke Weaver 2,004 posts
- 4. Quinn Ewers 7,888 posts
- 5. FINALLY DID IT 599K posts
- 6. The JUP 154K posts
- 7. Gemini 3 Flash 8,884 posts
- 8. Brad Keller 1,341 posts
- 9. Mariah 53.3K posts
- 10. Judon 1,511 posts
- 11. #ScalingNow_NXXT N/A
- 12. NextNRG Inc 1,160 posts
- 13. Fani Willis 10.2K posts
- 14. Algorhythm Holdings N/A
- 15. Jimmy Stewart 1,974 posts
- 16. The Oscars 26.8K posts
- 17. #jonita 16.6K posts
- 18. Clay Holmes N/A
- 19. Robert E Lee 19.5K posts
- 20. #wednesdaymotivation 3,319 posts
Potrebbero piacerti
Something went wrong.
Something went wrong.