Back to skills
SKILL.md
Pnpm
ASecuritypnpm — fast, disk-efficient package manager with workspace monorepo and content-addressable store.
- 47 stars
- 0 votes
- 0 copies
- 5 views
- Added September 12, 2026
Security analysis
92/100- Installs packages at runtime which could introduce malicious dependencies
npx -y skills add skeletorflet/opencode-supreme-setup --skill pnpm --agent claude-codeAre you the author of Pnpm?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/skeletorflet-pnpm)---
name: pnpm
description: pnpm — fast, disk-efficient package manager with workspace monorepo and content-addressable store.
---
## pnpm
### Workspace Monorepo
- `pnpm-workspace.yaml`: `packages: - 'apps/*' - 'packages/*'` — define workspace members.
- Local dependencies: `"@repo/ui": "workspace:*"` — resolved from workspace.
- `pnpm add` respects workspace protocol; `pnpm publish` rewrites `workspace:` semver.
### Content-Addressable Store
- Single global store (`~/.pnpm-store`) — deduplicated by content hash.
- Hard links inside `node_modules` — saves disk space across projects.
- `pnpm store prune` — remove unreferenced packages; `pnpm store status` — check integrity.
### Dependency Resolution
- Strict hoisting: only direct deps in `node_modules/.pnpm` — prevents phantom dependencies.
- `pnpm.overrides` in `package.json` — force version resolution.
- `pnpm.peerDependencyRules.allowedVersions` — allow specific peer ranges.
- `.npmrc` — `shamefully-hoist=true` for legacy compat.
### Filter & Recursive
- `pnpm --filter <name> add dep` — scoped to workspace member.
- `pnpm -r build` — run across all packages; `pnpm -r --parallel` — concurrent.
- `pnpm --filter "{packages/*}..."` — glob filters with dependents graph.
### Publishing
- `pnpm publish --recursive` — publish changed packages.
- `pnpm pack` — create tarball; `pnpm publish --dry-run` — preview.
- Package patching: `pnpm patch <pkg>` / `pnpm patch-commit <dir>`.
Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.