Credential access
Reads npm tokens, registry config, environment variables, and lifecycle script context.
npm / rank 24
Fast, disk space efficient package manager. Version 11.7.0 via npm; verified 2026-06-18.
agent safety
pnpm from npm manages package installs and scripts with registry authority.
Reads npm tokens, registry config, environment variables, and lifecycle script context.
Can run scripts and registry operations that affect remote state.
Can publish npm packages and build distributable bundles.
Gate publish, install scripts, and credentialed registry use.
Allow lockfile/test work after scan; require approval for publish and lifecycle execution.
install
npm install -g pnpmlocal npm package metadata
overview
Fast, disk space efficient package manager
security posture
No matching local secret-handling manifest was found for pnpm. Nucleus package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
pn | cli | global executable | |
pnpm | cli | global executable | |
pnpx | cli | global executable | |
pnx | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | npm:pnpm |
|---|---|
| Version | 11.7.0 |
| Package manager | npm |
| Package manager page | https://www.npmjs.com/package/pnpm |
| Homepage | https://pnpm.io |
| Repository | https://github.com/pnpm/pnpm |
| Upstream docs | https://pnpm.io |
| License | MIT |
| Source archive | https://registry.npmjs.org/pnpm/-/pnpm-11.7.0.tgz |
| Issue tracker | https://github.com/pnpm/pnpm/issues |
| Last updated | 2026-06-18T10:30:09.204Z |
| Published | 2026-06-15T06:54:02.299Z |
| Pulse | updated |
| Bottle | not recorded |
| npm postinstall | not defined |
| Service | none declared |
| Keywords | pnpm, pnpm11, dependencies, dependency manager, efficient, fast, hardlinks, install, installer, link, lockfile, modules, monorepo, multi-package, npm, package manager |
registry facts
| Source Database | npm registry |
|---|---|
| Dist Tags | |
| Version Count | 1,247 |
| Maintainers |
|
| Publisher | GitHub Actions |
| Engines | |
| Funding | https://opencollective.com/pnpm |
| Integrity | sha512-GcyFLBIMcSV2DyRD7mvgyltA+fUFmN4aCaHxd1A+AQ5Xwjx3ZG4B52HeWb+HT7IqM5jDOrlpH8E+uUa28PTWIA== |
| Shasum | bea54364524dadf0a42dae28dbfeeab25ff177e5 |
| Unpacked Size | 18,644,360 |
| File Count | 0 |
| Created At | 2013-03-08T23:25:56.611Z |
| Latest Published At | 2026-06-15T06:54:02.299Z |
| Modified At | 2026-06-15T09:59:39.674Z |
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
pnpm
nix profile install nixpkgs#pnpmpnpm 11.5.2-r0
Fast, disk space efficient package manager
sudo apk add pnpmpnpm-bash-completion 11.5.2-r0
Bash completions for pnpm
sudo apk add pnpm-bash-completionpnpm-doc 11.5.2-r0
Fast, disk space efficient package manager (documentation)
sudo apk add pnpm-docpnpm-fish-completion 11.5.2-r0
Fish completions for pnpm
sudo apk add pnpm-fish-completionpnpm-zsh-completion 11.5.2-r0
Zsh completions for pnpm
sudo apk add pnpm-zsh-completionpnpm 10.33.0-1.fc45
Fast, disk space efficient package manager
sudo dnf install pnpmpnpm 11.3.0-1
Fast, disk space efficient package manager
sudo pacman -S pnpmpnpm 11.5.2-1.1
Package manager for node.js
sudo zypper install pnpmpnpm-bash-completion 11.5.2-1.1
Bash completion for pnpm
sudo zypper install pnpm-bash-completionpnpm-fish-completion 11.5.2-1.1
Fish completion for pnpm
sudo zypper install pnpm-fish-completionpnpm-zsh-completion 11.5.2-1.1
Zsh completion for pnpm
sudo zypper install pnpm-zsh-completionpnpm
sudo port install pnpmpnpm
choco install pnpmmain/pnpm
scoop install main/pnpmpnpm.pnpm
winget install --id pnpm.pnpm -esource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.