Automic VaultAutomic Vault

brew

Install pnpm with Homebrew, apk, chocolatey, dnf, MacPorts, Nix, pacman, scoop, winget, zypper

Fast, disk space efficient package manager. Version 11.10.0 via Homebrew; verified 2026-07-04.

Install commandSecurity notes

agent safety

Agent safety answer

pnpm manages JavaScript dependencies and package publishing with access to project scripts.

Credential access

Reads npmrc tokens, environment variables, and package lifecycle script inputs.

Remote mutation

Can install dependency trees and run scripts that call external services.

Publish/artifact risk

Can publish npm packages and produce release bundles.

Recommended control

Gate publish, lifecycle scripts, and credentialed registry operations.

Agent-use guidance

Allow lockfile and test commands after scan; require approval for publish and install-script execution.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install pnpm

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install pnpm

MacPorts ports tree · devel/pnpm/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add pnpm

Alpine Linux edge package indexes · pnpm · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install pnpm

Fedora Rawhide package metadata · pnpm · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#pnpm

nixpkgs package indexes · pnpm · source: raw.githubusercontent.com

Arch Linux pacmanverified · 92%
sudo pacman -S pnpm

Arch Linux sync databases · pnpm · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install pnpm

openSUSE Tumbleweed package metadata · pnpm · source: download.opensuse.org

overview

Package summary

Fast, disk space efficient package manager

Commands and aliases

  • pn
  • pnpm
  • pnpx
  • pnx

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:package manager

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.npmrc
Windows
%UserProfile%\.npmrc

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.npmrc
Windows
%UserProfile%\.npmrc

executables

Installed executables

CommandKindExposureNote
pncliglobal executable
pnpmcliglobal executable
pnpxcliglobal executable
pnxcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version11.10.0
manager updated2026-07-04
local dataok
upstreamnot checked
latest detectednot detected

https://pnpm.io/

  • infoRelease/tag comparison is only available for GitHub repositories.https://pnpm.io/none confidence

install metadata

Package metadata

Package keybrew:pnpm
Version11.10.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/pnpm
Homepagehttps://pnpm.io/
Repositoryhttps://github.com/pnpm/pnpm
Upstream docshttps://pnpm.io/
LicenseMIT
Source archivehttps://registry.npmjs.org/pnpm/-/pnpm-11.10.0.tgz
Last updated2026-07-04T23:21:47Z
Pulseupdated
Build dependenciesnode
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared
Caveatspnpm requires a Node installation to function. You can install one with: brew install node

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namepnpm
Aliases
  • pnpm@11
Version Scheme0
Revision0
Conflicts With
  • corepack
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

pnpm

nix profile install nixpkgs#pnpm
  • normalized package name match
  • Matched by: Pnpm
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: pnpm from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
apk95%

pnpm 11.5.2-r0

Fast, disk space efficient package manager

https://pnpm.io

sudo apk add pnpm
  • License: MIT
  • Architecture: x86_64
  • Source Package: pnpm
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pnpm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pnpm from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

pnpm-bash-completion 11.5.2-r0

Bash completions for pnpm

https://pnpm.io

sudo apk add pnpm-bash-completion
  • License: MIT
  • Architecture: x86_64
  • Source Package: pnpm
  • normalized package name match
  • Matched by: Pnpm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pnpm-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

pnpm-doc 11.5.2-r0

Fast, disk space efficient package manager (documentation)

https://pnpm.io

sudo apk add pnpm-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: pnpm
  • normalized package name match
  • Matched by: Pnpm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pnpm-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

pnpm-fish-completion 11.5.2-r0

Fish completions for pnpm

https://pnpm.io

sudo apk add pnpm-fish-completion
  • License: MIT
  • Architecture: x86_64
  • Source Package: pnpm
  • normalized package name match
  • Matched by: Pnpm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pnpm-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

pnpm-zsh-completion 11.5.2-r0

Zsh completions for pnpm

https://pnpm.io

sudo apk add pnpm-zsh-completion
  • License: MIT
  • Architecture: x86_64
  • Source Package: pnpm
  • normalized package name match
  • Matched by: Pnpm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pnpm-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

pnpm 10.33.0-1.fc45

Fast, disk space efficient package manager

https://pnpm.io

sudo dnf install pnpm
  • License: MIT AND Apache-2.0 AND BSD-2-Clause AND ISC
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: nodejs-pnpm
  • 3 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Pnpm
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: pnpm from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

pnpm 11.3.0-1

Fast, disk space efficient package manager

https://pnpm.io

sudo pacman -S pnpm
  • License: MIT
  • Architecture: any
  • 1 dependencies
  • normalized package name match
  • Matched by: Pnpm
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: pnpm from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

pnpm 11.5.2-1.1

Package manager for node.js

https://pnpm.io/

sudo zypper install pnpm
  • License: MIT
  • Category: Development/Languages/Other
  • Architecture: noarch
  • Source Package: pnpm
  • 4 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Pnpm
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: pnpm from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

pnpm-bash-completion 11.5.2-1.1

Bash completion for pnpm

https://pnpm.io/

sudo zypper install pnpm-bash-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: pnpm
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pnpm
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: pnpm-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

pnpm-fish-completion 11.5.2-1.1

Fish completion for pnpm

https://pnpm.io/

sudo zypper install pnpm-fish-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: pnpm
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pnpm
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: pnpm-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

pnpm-zsh-completion 11.5.2-1.1

Zsh completion for pnpm

https://pnpm.io/

sudo zypper install pnpm-zsh-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: pnpm
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Pnpm
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: pnpm-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

pnpm

sudo port install pnpm
  • normalized package name match
  • Matched by: Pnpm
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/pnpm/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

pnpm

choco install pnpm
  • normalized package name match
  • Matched by: Pnpm
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: pnpm from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','pingplotter'
Scoop95%

main/pnpm

scoop install main/pnpm
  • normalized package name match
  • Matched by: Pnpm
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/pnpm.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

pnpm.pnpm

winget install --id pnpm.pnpm -e
  • normalized package name match
  • Matched by: Pnpm
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: pnpm.pnpm from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • nodeBuild dependency declared by Homebrew.
  • pakePopular package that depends on this formula.
  • pnpm@10Package name indicates the same formula family.
  • pnpm@9Package name indicates the same formula family.
  • pnpmSame normalized package name appears in another local ecosystem. Shared terms: dependencies, disk, efficient, fast, manager.

Same workflow

  • corepackShares av.db curated category or tags: cli, developer-tools, javascript, nodejs, package-management.
  • nrmShares av.db curated category or tags: cli, developer-tools, javascript, nodejs, package-management.
  • bowerShares av.db curated category or tags: cli, developer-tools, javascript, package-management, package-manager.
  • grunt-cliShares av.db curated category or tags: cli, developer-tools, javascript, nodejs.
  • lernaShares av.db curated category or tags: cli, developer-tools, javascript, monorepo.
  • nccShares av.db curated category or tags: cli, developer-tools, javascript, nodejs.
  • pnpmSame normalized package name in another local ecosystem.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment