Skip to main content

Learn how to Mitigate supply chain attacks with pnpm

pnpmClient (pnpm)Registry (pnpr)Blog FAQ Benchmarks

Blog
FAQ
Benchmarks

Next
11.x
10.x

English
Italiano (61%)
简体中文 (99%)
日本語 (86%)
한국어 (52%)
Português Brasileiro (61%)
正體中文 (43%)
Русский (38%)
Українська (80%)
Français (50%)
Türkçe (28%)
Español (67%)
Bahasa Indonesia (32%)
Help Us Translate

🧡 Sponsor Us

Open Collective
GitHub Sponsors
Crypto Donations

All posts

2026

pnpm 11.7
Why pnpm no longer expands environment variables in a repository's .npmrc
pnpm 11.6
pnpm 11.5
pnpm 11.4
pnpm 11.3
pnpm 11.2
pnpm 11.1
pnpm 11.0
pnpm 10.32
pnpm 10.31
pnpm 10.30
pnpm 10.29
pnpm 10.28

2025

pnpm 10.27
🚀 pnpm in 2025
pnpm 10.26
pnpm 10.25
How We're Protecting Our Newsroom from npm Supply Chain Attacks
pnpm 10.24
pnpm 10.23
pnpm 10.22
pnpm 10.21
pnpm 10.20
pnpm 10.19
pnpm 10.18
pnpm 10.17
pnpm 10.16
pnpm 10.15
pnpm 10.14

2022

The year 2022 for pnpm

2021

The year 2021 for pnpm

2020

Node-Modules configuration options with pnpm
Flat node_modules is not the only way

Authors

Zoltan Kochan
33
Lead maintainer of pnpm
Ryan Sobol
1
Principal Software Engineer at the Seattle Times

Docs

Getting Started
pnpm CLI
Workspace
Settings (pnpm-workspace.yaml)
pnpr (registry server)

Community

X (Twitter)
YouTube
Reddit
Bluesky
Discord

Contributing

GitHub
Help Us Translate

Copyright © 2015-2026 contributors of pnpm