new package manager (pnpm)

[RobAndrewHurst]

pnpm

There is a new package manager around that a lot of developers are talking about and that's pnpm.

It would be great to make this a standard in our own codebase.

It boasts a ton of great features to help reduce the bloated javascript development experience.

• Fast

  • pnpm is up to 2x faster than npm

• Efficient

  • Files inside node_modules are cloned or hard linked from a single content-addressable storage

• Supports monorepos

  • pnpm has built-in support for multiple packages in a repository

• Strict

  • pnpm creates a non-flat node_modules by default, so code has no access to arbitrary packages

Some notable companies using pnpm

• Vercel
• Vite
• Discord

[dbauszus-glx]

Does pnpm support commandline config of optional packages? Ie --saml to install an optional saml dependency?

[dbauszus-glx]

I also would love a more efficient way of finding dependency vulnerabilities. Trawling the package.lock is awful with npm.