pnpm
pnpm is a package manager that stores packet files in a single center using a content-based file system and saves disk space. Files in module directories are connected from a single repository by hard-link or reflink methods so that additional disk space is not consumed. It also offers a solid structure, allowing packages to access dependencies specified only in the package.json file.
pnpm
100pnpm · Build Systems & Monorepos
- Using a single content-based storage space, you save gigabytes of space on disk.
- You can manage monorepo structures and make deterministic dependency installations with pnpm-lock.yaml.
- You can only apply a strict dependency insulation that has access to defined dependencies within package.json.
- ↑ PositiveHacker News
Pnpm has a new setting to stave off supply chain attacks
“Pnpm 10.x also has a feature to disallow post-install scripts by default. When using Pnpm you have to specifically enable a dependency to let it run its post-install scripts. It's a great feature that should be the standard. Yes if someone compromises a package then they can…”
- • NeutralHacker News
Pnpm has a new setting to stave off supply chain attacks
“> This latest incident was detected by an individual researcher So that still seems fine? Presumably researchers are focusing on latest releases, and so their work would not be impacted by other people using this new pnpm option.”
Verified against README · Oct 26, 2026 · source