pnpm 11 Beta 0, by @pnpm@fosstodon.org:
github.com/pnpm/pnpm/releases/tag/v...
#releasenotes #pnpm
Masz kilka projektów JS? Z npm każdy ma własną kopię Reacta i reszty 😬
pnpm to naprawia – jeden globalny store, same linki w node_modules. Szybciej, mniej miejsca, zero phantom dependencies. ✨
programistka.com/pnpm-czyli-dlaczego-warto-przestac-marnowac-miejsce-na-dysku/
#javascript #pnpm #webdev
Install pnpm on Ubuntu with the official script or Corepack, then use workspace filters, updates, troubleshooting, and clean removal without guessing.
linuxcapable.com/how-to-insta...
#Linux #Ubuntu #pnpm #NodeJS #JavaScript #CommandLine #DevTools #OpenSource
Hey, just posted a new piece about migrating from Yarn to pnpm on a Monorepo - Take my word, don't leave it to your Agent ;)
"Migrating a monorepo from Yarn to PNPM" by Matti Bar-Zeev dev.to/mbarzeev/mig...
#javascript #monorepo #pnpm #yarn
Today I learned that there's magic `pre<*>` and `post<*>` hooks inside `npm` (and everything npm-compatible): -> https://docs.npmjs.com/cli/v8/using-npm/scripts I think I would've preferred less magic-side-effect-ness, but fair, I guess. So, to run something post `install` ```json { "scripts": { // ..., "postinstall": "echo 'hello postinstall'", } } ``` Caveat: For `npm`, this only works when literally running `npm install` (or `npm i`), but now when running `npm i <some-package>`. Well, that's what you get, I guess? I'm even less convinced by its usefulness now. For `bun` at least, both seem to work :)
Learned something about package.json postinstall scripts :)
#npm #JavaScript #TypeScript #bun #pnpm #TIL
🚀 Deploy OpenStatus on Debian VPS (5 Minute Quick-Start Guide)
#bun #certbot #corepack #debian #letsencrypt #monitoring #nginx #nodejs #openstatus #pnpm #selfhosted #selfhosting #statuspage #turso #vps #Cloud #Guides #VPS
📝 New blog post
"pnpm + Next.js Standalone + Docker: 5 Failures Before Success [Part 9]"
ko-chan.github.io/saru-blog/posts-en/saru-...
#pnpm #Nextjs #Docker #monorepo #troubleshooting
📝 ブログ記事を投稿しました
"pnpm + Next.js standalone + Docker で5回ハマった話 [第9回]"
zenn.dev/ko_chan/articles/saru-pn...
#pnpm #Nextjs #Docker #monorepo #トラブルシューティング
Looking at the #LastWeekInAppSec, we see two widely-used application components with #DoS, and a nasty little path traversal in a package manager.
Details, mitigations, context for making risk-based decisions all on our blog: buff.ly/xL4NKOg
#React #NodeJS #Java #pnpm #npm #CVE #Vulnerability
This #LastWeekInAppSec is a great reminder that automation and dev tooling is part of an organizations attack surface. #Sigstore, #pnpm, and #n8n all have vulns to pay attention to, but (mostly) not panic over.
👉 should you worry? read: buff.ly/ATRNVz3
#AppSec #ProductSecurity #DevSecOps #DevOps
📝 New blog post
"Next.js + Go Monorepo: Managing 4 Portals × 4 APIs as a Solo Developer [Part 3]"
ko-chan.github.io/saru-blog/posts-en/saru-...
#Nextjs #Go #monorepo #pnpm #Turborepo
📝 ブログ記事を投稿しました
"Next.js × Go モノレポ構成:4ポータル × 4APIを1人で保守する設計【第3回】"
zenn.dev/ko_chan/articles/saru-ne...
#Nextjs #Go #monorepo #pnpm #Turborepo
pnpm in 2025, by @kochan.io (@pnpm@fosstodon.org):
https://pnpm.io/blog/2025/12/29/pnpm-in-2025
#pnpm #retrospectives
`pnpm` is lockfile compatible!? I can just type this in every project instead of remembering #npm #yarn #pnpm #bun #etc!?
⚙️ Node Modules Inspector — A tool that runs #pnpm inside your browser, “installs” a package, then analyzes its dependencies || #JavaScript #WebPerf #WebDev go.pediadigital.com/fzagmv
pnpm v10.27.0リリース。
`tructPolcy: no-downgrade`の厳格性を緩和するために、公開から一定時間経ったものは対象外にする`trustPolicyIgnoreAfter`オプションの追加など "Release pnpm 10.27 · pnpm/pnpm" https://github.com/pnpm/pnpm/releases/tag/v10.27.0 #pnpm #ReleaseNote
📦 Stop wasting time on installs!
npm – Reliable but slow
pnpm – Fast & saves space
Yarn – Great for teams
Bun – Super fast
💡 Quick Picks:
• Small project → npm
• Big monorepo → pnpm
• Team project → Yarn
• Need speed → Bun
⏱️ Choose wisely, save time & space!
#DevTools #WebDev #npm #pnpm #Yarn
pnpmのERR_PNPM_TRUST_DOWNGRADEが、一部のパッケージのメンテナンスアップデートが手動で行われていることで発生している "undici-types@6 published without provenance · Issue #4666 · nodejs/undici" https://github.com/nodejs/undici/issues/4666 #pnpm #issue
pnpm 10.26 is here!
This release focuses heavily on locking down supply chain security and giving you granular control over build scripts.
From stricter git defaults to the new allowBuilds config, here’s a breakdown of the changes. 🧵👇
#pnpm #javascript
pnpmのサプライチェーンセキュリティ対策の機能についての紹介。
ライフサイクルスクリプトの管理、minimumReleaseAge、trustPolicyについて "How We're Protecting Our Newsroom from npm Supply Chain Attacks | pnpm" pnpm.io/blog/2025/12/05/newsroom... #pnpm #security #article
The Seattle Times' long-term strategy for securing Frontend workflows against Supply Chain Attacks (like Shai-Hulud) and critical npm vulnerabilities is a must-read. They use @pnpm.io to block lifecycle scripts, a critical defense measure. Highly recommend pnpm.io/blog/2025/12...
#Frontend #pnpm
パッチを当てられるの便利
pnpm.io/ja/cli/patch
#pnpm
🔒 Quick tip for #pnpm users:
Use `minimumReleaseAge` for stability, but need an emergency security update?
`minimumReleaseAgeExclude` lets you bypass the wait for specific packages without disabling your safety net.
Real-world example from our React CVE response 👇
codenote.net/en/posts/pnp...
pnpm v10.24.0リリース。
network-concurrencyをCPUのコア数の3倍に設定することで、ネットワークの並列性を改善するなど "Release pnpm 10.24 · pnpm/pnpm" https://github.com/pnpm/pnpm/releases/tag/v10.24.0 #pnpm #ReleaseNote
pnpm v11.0.0-alpha.0リリース。
Pure ESMに変更、設定の読み取りの変更、Node.js 18のサポート終了、キャッシュをv8.serializeしたバイナリファイルを使うように変更 "Release pnpm 11 Alpha 0 · pnpm/pnpm" github.com/pnpm/pnpm/releases/tag/v... #pnpm #ReleaseNote
Blogged: Aspire with Python, React, Rust and Node apps
What's involved with integrating apps written with Python, Rust, Node and React/Vite with Aspire? Not that much as it turns out!
david.gardiner.net.au/2025/11/aspi...
#dotnet #aspire #rust #nodejs #pnpm #react #vite
syncpack 14.0.0-alpha.27 adds support for @pnpm.io "catalog:" specifiers and can read catalogs from pnpm and bun, more to follow in future versions github.com/JamieMason/s... #pnpm #monorepo #monorepos