pnpm

Skill

Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store.

Files18
  • @skills/pnpm/GENERATION.md
  • @skills/pnpm/SKILL.md
  • @skills/pnpm/references/best-practices-ci.md
  • @skills/pnpm/references/best-practices-migration.md
  • @skills/pnpm/references/best-practices-performance.md
  • @skills/pnpm/references/core-cli.md
  • @skills/pnpm/references/core-config.md
  • @skills/pnpm/references/core-store.md
  • @skills/pnpm/references/core-workspaces.md
  • @skills/pnpm/references/features-aliases.md
  • @skills/pnpm/references/features-catalogs.md
  • @skills/pnpm/references/features-config-dependencies.md
  • @skills/pnpm/references/features-global-virtual-store.md
  • @skills/pnpm/references/features-hooks.md
  • @skills/pnpm/references/features-overrides.md
  • @skills/pnpm/references/features-patches.md
  • @skills/pnpm/references/features-peer-deps.md
  • @skills/pnpm/references/features-supply-chain-security.md
pnpm is a fast, disk space efficient package manager. It uses a content-addressable store to deduplicate packages across all projects on a machine, and enforces strict dependency resolution by default, preventing phantom dependencies.
Configuration model (important): pnpm settings now live in pnpm-workspace.yaml (and the global config.yaml) using camelCase keys. .npmrc is used only for authentication/registry credentials, and the pnpm field of package.json is no longer read. When working in a pnpm project, check pnpm-workspace.yaml for settings/workspace structure and .npmrc only for auth. Always use --frozen-lockfile (or pnpm ci) in CI.
The skill is based on pnpm 10.x, generated at 2026-06-22. It also covers v11 behavior changes (config split, isolated global packages, allowBuilds, pmOnFail, global virtual store) where current docs describe them.

Core

TopicDescriptionReference
CLI Commandsinstall/add/remove/update, run, dlx/pnx, workspace, runtime, publishing (version, view, sbom, stage)core-cli [blocked]
Configurationpnpm-workspace.yaml settings (camelCase), global config.yaml, packageConfigs, .npmrc authcore-config [blocked]
WorkspacesMonorepo support: filtering, workspace protocol, shared lockfile, packageConfigscore-workspaces [blocked]
StoreContent-addressable store, virtual store, node linker modes, frozen/read-only storecore-store [blocked]

Features

TopicDescriptionReference
CatalogsCentralized dependency versions; catalogMode, catalog: in overridesfeatures-catalogs [blocked]
OverridesForce versions (incl. transitive & peer deps); packageExtensionsfeatures-overrides [blocked]
PatchesModify third-party packages; patchedDependencies in pnpm-workspace.yamlfeatures-patches [blocked]
AliasesInstall under custom names (npm:) and registry aliases (namedRegistries)features-aliases [blocked]
Hooks.pnpmfile.mjs hooks (readPackage, updateConfig, beforePacking), finders, resolvers/fetchersfeatures-hooks [blocked]
Peer DependenciesAuto-install, strict mode, rules, dedupePeers, peers checkfeatures-peer-deps [blocked]
Config DependenciesShare hooks/settings/catalogs/patches across repos via configDependenciesfeatures-config-dependencies [blocked]
Global Virtual StoreShared node_modules, git-worktree multi-agent setups, isolated global packagesfeatures-global-virtual-store [blocked]
Supply-Chain SecurityBuild approval (allowBuilds), minimumReleaseAge, trustPolicy, lockfile integrityfeatures-supply-chain-security [blocked]

Best Practices

TopicDescriptionReference
CI/CD SetupGitHub Actions, GitLab, Docker, pnpm ci, store caching, frozen lockfilesbest-practices-ci [blocked]
Migrationnpm/Yarn → pnpm, phantom deps, and pnpm v10 → v11 config migrationbest-practices-migration [blocked]
PerformanceInstall optimizations, allowBuilds, global virtual store, workspace parallelizationbest-practices-performance [blocked]
pnpm — Kortix Marketplace | Kortix