pnpm
pnpm is a fast, disk space efficient package manager for JavaScript and Node.js projects. It uses a content-addressable store and a strict, symlinked node_modules layout so every version of every package is stored exactly once on disk and projects can only access dependencies they explicitly declare. pnpm provides first-class monorepo support via pnpm-workspace.yaml, the workspace protocol, Catalogs, package filtering, and a shared lockfile, and ships supply-chain safety features such as minimumReleaseAge, opt-in lifecycle scripts, dependency overrides, and a built-in patch workflow. Developed in the open under the MIT license on GitHub with an Open Collective sponsorship model, pnpm is used by major JavaScript projects including Next.js, Vue, Vite, Nuxt, Material UI, Prisma, Astro, and SvelteKit.
More than an index entry, but the surface is still mostly links rather than artifacts — the cohort most likely to move a full band from modest, well-targeted work.
API Evangelist profiles pnpm the way a machine reads it — 38 machine-readable artifacts across 5 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — pnpm scores 21.9/100 (emerging), with a separate agent-readiness read of 0/100 (human only). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile pnpm
Each block below is one kind of artifact we hold for pnpm. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 5
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
pnpm CLI
The pnpm command-line interface for managing JavaScript/Node.js packages. Provides commands for installing, updating, and removing dependencies; running package scripts; executi...
pnpm Workspaces
Native monorepo support driven by a `pnpm-workspace.yaml` file at the repository root. Supports the `workspace:` protocol for explicit local package references, a shared workspa...
pnpm Content-Addressable Store
A content-addressable store that holds every version of every package exactly once on disk and hard-links (or reflinks) files into project `node_modules`. This produces a strict...
pnpm Hooks
Programmatic extension points for customizing dependency resolution and installation behavior. `.pnpmfile.cjs` exposes lifecycle hooks (`readPackage`, `afterAllResolved`) that l...
pnpm Configuration
Configuration surface for pnpm spanning `.npmrc`, environment variables, and `pnpm`-prefixed fields in `package.json`. Controls registry selection, authentication tokens, store ...
Features 15
The notable capabilities this provider advertises, captured as structured features so they can be searched and compared instead of read one landing page at a time.
Notable capabilities this provider offers.
Content-addressable store
Each package version is stored once on disk and hard-linked into projects, saving substantial disk space across all projects on the machine.
Strict, non-flat node_modules
A symlinked node_modules layout means packages can only access dependencies they explicitly declare, catching phantom-dependency bugs at install time.
Up to 2x faster installs
Optimized installation pipeline that is consistently faster than npm and Yarn on cold and warm installs, especially for large monorepos.
Native workspace and monorepo support
First-class workspaces driven by pnpm-workspace.yaml with the workspace protocol, recursive commands, package filtering, and Catalogs for shared version pinning.
Catalogs
Centralized dependency-version management across a monorepo so every package shares a single pinned version of common dependencies.
Deterministic lockfile
pnpm-lock.yaml captures the exact resolved dependency graph, peer relationships, and patches for reproducible installs.
Supply-chain safety controls
minimumReleaseAge to delay adoption of brand-new package versions, ignoredBuiltDependencies and onlyBuiltDependencies to opt into lifecycle scripts, and removal of postinstall s...
pnpm patch
Built-in workflow to patch installed dependencies and persist the patch in pnpm.patchedDependencies without forking the package.
pnpm overrides and packageExtensions
Repository-level dependency rewriting and peer-dependency repair without forking upstream packages.
.pnpmfile.cjs hooks
readPackage and afterAllResolved hooks let you programmatically rewrite manifests during resolution and installation.
pnx (dlx) and pnpm exec
Run packages without installing them globally, with caching in the store.
Built-in runtime management
pnpm env install lets you manage Node.js (and other JavaScript runtime) versions directly through pnpm.
Cross-platform standalone binary
Distributed as @pnpm/exe, a single self-contained executable that does not require an existing Node.js installation.
Corepack-compatible
First-class support for Node.js Corepack so projects can pin a specific pnpm version via packageManager in package.json.
MIT-licensed open source
Permissively licensed and developed in the open on GitHub with an Open Collective sponsorship model.
Scroll within the panel for all 15 ·
Security Posture 1
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Use Cases 7
What developers actually build with this provider — captured so the catalogue answers 'what is this for', not just 'what does this expose'.
What developers build with this provider.
Large JavaScript monorepos
Manage hundreds of interdependent packages with a single shared lockfile, the workspace protocol, Catalogs, and recursive commands.
CI/CD pipeline acceleration
Cut install time substantially in CI by leveraging the content-addressable store and the official pnpm/action-setup GitHub Action.
Disk-constrained developer machines
Share a single copy of each package version across every project on a machine, dramatically reducing disk usage compared to npm or Yarn.
Supply-chain hardening
Use minimumReleaseAge, ignoredBuiltDependencies, and strict lifecycle script policy to reduce exposure to malicious or compromised npm packages.
Phantom dependency detection
The strict non-flat node_modules layout surfaces undeclared dependencies during local development rather than in production.
Reproducible builds
pnpm-lock.yaml plus pnpm.overrides and pnpm.patchedDependencies make installations byte-reproducible across machines.
Multi-runtime JavaScript projects
Use the pnpm/setup action and pnpm env to standardize Node.js, Bun, or Deno versions across teams.
Scroll within the panel for all 7 ·
Integrations 10
Pre-built integrations with other platforms tell you where this provider already fits in a stack.
Pre-built integrations with other platforms and tools.
Node.js Corepack
pnpm is one of the package managers managed by Corepack, enabling version pinning via packageManager in package.json.
GitHub Actions
Official pnpm/action-setup and pnpm/setup actions for installing pnpm and a JavaScript runtime in a single step.
Changesets
Recommended workflow tool for versioning and publishing packages in pnpm monorepos.
Microsoft Rush
Rush uses pnpm under the hood for large monorepos at Microsoft and elsewhere.
Nx
Nx integrates with pnpm workspaces for monorepo task orchestration and caching.
Turbo (Turborepo)
First-class pnpm workspace support for incremental builds and remote caching.
Docker
Official guidance for using pnpm in Docker images, including the standalone binary and lockfile-aware multi-stage builds.
Verdaccio and private registries
Works with any npm-compatible registry including Verdaccio, JFrog Artifactory, GitHub Packages, and AWS CodeArtifact.
Bit
Bit Cloud (a Platinum sponsor) uses pnpm as a foundation for component-based development.
Vercel, Netlify, Cloudflare Pages
First-class support for pnpm in major JavaScript deployment platforms with workspace-aware installs.
Scroll within the panel for all 10 ·
Resources
Every other property we hold for pnpm — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 2
Portal, sign-up, and the first successful call
Documentation 5
Reference material describing how the API behaves
Build 4
SDKs, sample code, and the tooling you integrate with
Access & Security 1
Authentication, authorization, and security posture
Learn 1
Tutorials, courses, talks, and written guidance
Operate 8
Status, limits, changes, and where to get help
Scroll within the panel for all 8 ·
Commercial 3
Pricing, plans, and the legal terms of use
Company 1
The organization behind the API
Other 2
Properties that don't map to a standard resource type
← All providers · Data indexed from github.com/api-evangelist/pnpm · machine-readable index on apis.io