Frontend DogmaAdd JSR Packages With pnpm and Yarn, by @lcasdev (@deno_land):
zust@parksb
안녕하세요 오픈 소스에 관심있는 개발자입니다!
자정되면서 맞지 않는 부분은 어떤게 있을까요? 🤔
yarn-plugin-catalogs가 pnpm catalog 기능을 yarn에도 확장 시킨것 같은데 이런 부분에서 안맞는게 있는걸까요?
#Yarn #pnpm #javascript
안녕하세요 오픈 소스에 관심있는 개발자입니다!
자정되면서 맞지 않는 부분은 어떤게 있을까요? 🤔
yarn-plugin-catalogs가 pnpm catalog 기능을 yarn에도 확장 시킨것 같은데 이런 부분에서 안맞는게 있는걸까요?
#Yarn #pnpm #javascript
Michael Gale
brulks
Emelia 👸🏻Anyone know how to fix ERR_PNPM_RECURSIVE_RUN_FIRST_FAIL errors?
I have a build script that ends up outputting a build/package.json which is a copy of the parent directories package.json — pnpm seems to want to execute that too.
My pnpm-workspaces.yaml file…
OH!!
OH FUCKING WAIT!!
it's pnpm-workspace.yaml not pnpm-workspaces.yaml 🤦♀️
Andreu Casablanca 🐀wait... wait! are you telling me that #pnpm supports `package.json5` instead of `package.json`??? and I learn about it years later?
I've been praying for something like this for ages... and it turns out that we already had it.
Michal Bryxí 🌱How I Manage Node & Package Manager Versions in 2025:
https://dev.to/michalbryxi/how-i-manage-node-package-manager-versions-in-2025-97d
#NodeJS #PNPM #BlogPost #IT #Tech #WebDev #Proto #VersionManager
Tane Piper ⁂Finally! #pnpm has disabled `postinstall` scripts by default in npm module - something I reported 8 years ago as a major security risk and provided a POC of it. Now let's see if #npm does the same... #nodejs #cyberSecurity
SocketBig changes in @pnpm 10.0.0: Lifecycle scripts are now blocked by default to combat supply chain attacks. This change is widely supported but comes with some friction.
https://socket.dev/blog/pnpm-10-0-0-blocks-lifecycle-scripts-by-default #NodeJS #pnpm #JavaScript
Axel Rauschmayer@pnpm 10 is out: https://github.com/pnpm/pnpm/releases/tag/v10.0.0
Interesting change: “Lifecycle scripts of dependencies are not executed during installation by default! This is a breaking change aimed at increasing security. In order to allow lifecycle scripts of specific dependencies, they should be listed in the pnpm.onlyBuiltDependencies field of package.json.”