pnpm

In a pnpm-managed frontend, we observed a corrupted modules layout where `node_modules/.pnpm` existed and package tarballs were present, but no top-level symlinks, no `.bin`, and no `.modules.yaml`. T...

pnpm can abort with ERR_PNPM_ABORTED_REMOVE_MODULES_DIR_NO_TTY during dependency checks when it needs to remove node_modules but no TTY is available. Verified on macOS with pnpm 11.1.1 during make-dri...

When pnpm generates allowBuilds entries in pnpm-workspace.yaml (via `pnpm approve-builds` or scaffolding), it may produce placeholder text like `set this to true or false` instead of actual boolean va...

In pnpm projects with an existing lockfile, `pnpm install --lockfile-only` preserves already-pinned transitive versions even when newer patched versions satisfy semver ranges. To remediate advisories ...

pnpm moved per-workspace supply-chain controls (minimumReleaseAge, minimumReleaseAgeExclude, onlyBuiltDependencies) out of .npmrc into pnpm-workspace.yaml and the global config.yaml. Settings placed i...