pnpm
@pnpmjs
Fast, disk space efficient package manager 快速且節省磁碟空間的套件管理程式 Sponsor us: on GitHub: http://github.com/sponsors/pnpm on OpenCollective: https://opencollective.com/pnpm
Może Ci się spodobać
The Seattle Times is piloting pnpm’s client-side defenses—blocked lifecycle scripts, release cooldowns, and trust policy—to stop worms like Shai-Hulud 2.0 before they land. Read their story: pnpm.io/blog/2025/12/0…
The incidents keep happening. This remains a good idea for pnpm v11 x.com/pnpmjs/status/…
Yet another reminder to use @pnpmjs's minimum dependency age‼️ pnpm.io/settings#minim…
🔥 New npm attack DETECTED! A campaign dubbed “Sha1-Hulud: The Second Coming” has compromised hundreds of packages and over 25,000 GitHub repos. The code runs during install, steals cloud logins, and if that fails, it deletes the user’s home folder. Read more ↓…
Maintaining a CLI app? You can now target only the latest Node.js version — pnpm will install it automatically as a dependency for your app. x.com/pnpmjs/status/…
We have discovered that chokidar has switched off provenance a year ago and now it fails with the trustPolicy setting set to no-downgrade. We'll need to think about a way to deal with these cases. x.com/pnpmjs/status/…
💖 This Sep & Oct, we have forwarded our Open Collective fund to support @chris_zyyv @webfansplz @bluwyoo @KazariEX_0929 @vida_0905 e18e.dev esm.sh @pnpmjs @iconify_design Join us to show appreciation for our deps and help them be sustainable!…
esm.sh
ESM>CDN
A fast, smart & global CDN for modern(es2015+) web development.
pnpm 10.20 is out. Published via a trusted github action using OIDC.
Surprisingly, none of the package managers are published using OIDC publishing today. Even npm CLI. I did configure OIDC publishing for @pnpmjs, so it will be "trusted" in the next version
I remember using CKEditor at JustAnswer and being really excited when they were considering pnpm years ago. They decided not to switch back then — feels good to win them over at last. x.com/reinmarpl/stat…
It's impressive to see how quickly @pnpmjs added support for "minimal dependency age" (github.com/pnpm/pnpm/issu…) after the recent supply chain attacks on npm 😍 By a total coincidence, just a month ago, we finished a migration to pnpm. We definitely don’t look back 🚀 And today,…
United States Trendy
- 1. #SantaChat 1,559 posts
- 2. FINALLY DID IT 599K posts
- 3. The JUP 154K posts
- 4. Quinn Ewers 5,946 posts
- 5. Judon 1,053 posts
- 6. Mariah 48.9K posts
- 7. Jack Smith 22.6K posts
- 8. Fani Willis 4,365 posts
- 9. Algorhythm Holdings N/A
- 10. Gemini 3 Flash 6,895 posts
- 11. Robert E Lee 17.8K posts
- 12. Zach Wilson 1,182 posts
- 13. #jonita 16.5K posts
- 14. #wednesdaymotivation 2,884 posts
- 15. Jimmy Stewart 1,604 posts
- 16. #SomosBolivarianos 2,852 posts
- 17. QB Tua Tagovailoa 4,241 posts
- 18. Good Wednesday 39.3K posts
- 19. Brad Keller N/A
- 20. #NoWarYesPeace 4,031 posts
Może Ci się spodobać
Something went wrong.
Something went wrong.