SkillsAdd

antfu/skills

pnpm

Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store.

All-time #956 Trending #2015 Hot #4761 First seen Jan 28, 2026
8-week activity · all time api

Installation

$ npx skills add antfu/skills --skill pnpm
View on skills.sh ↗ GitHub repository ↗

Summary

  • Fast, disk-efficient Node.js package manager with strict dependency resolution and monorepo support.
  • Enforces strict dependency resolution by default, preventing phantom dependencies; uses content-addressable storage to deduplicate packages across projects Supports monorepo workspaces with filtering, shared lockfiles, and workspace protocol; configuration via pnpm-workspace.yaml Includes advanced dependency management: catalogs for centralized version control, overrides to force specific versions, and patches to modify third-party packages Provides peer dependency auto-install, custom resolution hooks via .pnpmfile.cjs , and package aliases using the npm: protocol Use --frozen-lockfile in CI environments; check pnpm-workspace.yaml and .npmrc files to understand project configuration

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

pnpm Similar name
onmax/nuxt-skills

Use when managing Node.js dependencies with pnpm - install packages, configure monorepo workspa…

1.8K installs
pnpm Similar name
mindrally/skills

Best practices for pnpm package manager, workspace management, and monorepo configuration

674 installs

Security audits

Partner security reviews for this skill.

agent-trust-hub SAFE

Analyzed Feb 17, 2026

The pnpm skill is a documentation-based resource authored by a trusted developer. It provides comprehensive guidance on using the pnpm package manager, focusing on core commands, workspace configuration, and best practices. The skill contains no executable code and strictly follows security recommendations for dependency management.

snyk MEDIUM

Analyzed Feb 17, 2026

[MEDIUM] W011: Third-party content exposure detected (indirect prompt injection risk).

socket Score 0.9000 · 0 alerts

Analyzed Mar 18, 2026

  • license 1
  • maintenance 1
  • quality 0.9
  • supply chain 1
  • vulnerability 1

0 alerts

Also in this package

Other skills from antfu/skills · top by installs.

npx skills add antfu/skills
vitest 35.1K vite 34.9K vue 33.3K vue-best-practices 22.9K nuxt 22.4K vueuse-functions 21.1K web-design-guidelines 18.9K vue-router-best-practices 18.4K pinia 18K vue-testing-best-practices 16.8K

Browse all from antfu/skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 5.9K
License LICENSE.md
Default branch main
Open issues 9
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Version2026.6.22
More metadata
author
Anthony Fu
version
2026.6.22
source
Generated from https://github.com/pnpm/pnpm, scripts located at https://github.com/antfu/skills

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 4,082 B
  • docs SUMMARY.md 266 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 20,410 installs

SKILL.md

pnpm is a fast, disk space efficient package manager. It uses a content-addressable store to deduplicate packages across all projects on a machine, and enforces strict dependency resolution by default, preventing phantom dependencies.

Configuration model (important): pnpm settings now live in pnpm-workspace.yaml (and the global config.yaml) using camelCase keys. .npmrc is used only for authentication/registry credentials, and the pnpm field of package.json is no longer read. When working in a pnpm project, check pnpm-workspace.yaml for settings/workspace structure and .npmrc only for auth. Always use --frozen-lockfile (or pnpm ci) in CI.

The skill is based on pnpm 10.x, generated at 2026-06-22. It also covers v11 behavior changes (config split, isolated global packages, allowBuilds, pmOnFail, global virtual store) where current docs describe them.

Core

Topic Description Reference
CLI Commands install/add/remove/update, run, dlx/pnx, workspace, runtime, publishing (version, view, sbom, stage) [core-cli](references/core-cli.md)
Configuration pnpm-workspace.yaml settings (camelCase), global config.yaml, packageConfigs, .npmrc auth [core-config](references/core-config.md)
Workspaces Monorepo support: filtering, workspace protocol, shared lockfile, packageConfigs [core-workspaces](references/core-workspaces.md)
Store Content-addressable store, virtual store, node linker modes, frozen/read-only store [core-store](references/core-store.md)

Features

Topic Description Reference
Catalogs Centralized dependency versions; catalogMode, catalog: in overrides [features-catalogs](references/features-catalogs.md)
Overrides Force versions (incl. transitive & peer deps); packageExtensions [features-overrides](references/features-overrides.md)
Patches Modify third-party packages; patchedDependencies in pnpm-workspace.yaml [features-patches](references/features-patches.md)
Aliases Install under custom names (npm:) and registry aliases (namedRegistries) [features-aliases](references/features-aliases.md)
Hooks .pnpmfile.mjs hooks (readPackage, updateConfig, beforePacking), finders, resolvers/fetchers [features-hooks](references/features-hooks.md)
Peer Dependencies Auto-install, strict mode, rules, dedupePeers, peers check [features-peer-deps](references/features-peer-deps.md)
Config Dependencies Share hooks/settings/catalogs/patches across repos via configDependencies [features-config-dependencies](references/features-config-dependencies.md)
Global Virtual Store Shared node_modules, git-worktree multi-agent setups, isolated global packages [features-global-virtual-store](references/features-global-virtual-store.md)
Supply-Chain Security Build approval (allowBuilds), minimumReleaseAge, trustPolicy, lockfile integrity [features-supply-chain-security](references/features-supply-chain-security.md)

Best Practices

Topic Description Reference
CI/CD Setup GitHub Actions, GitLab, Docker, pnpm ci, store caching, frozen lockfiles [best-practices-ci](references/best-practices-ci.md)
Migration npm/Yarn → pnpm, phantom deps, and pnpm v10 → v11 config migration [best-practices-migration](references/best-practices-migration.md)
Performance Install optimizations, allowBuilds, global virtual store, workspace parallelization [best-practices-performance](references/best-practices-performance.md)