# pnpm

**Canonical:** https://apis.io/providers/pnpm/  
**Website:** https://pnpm.io  
**APIs profiled:** 5

pnpm is a fast, disk space efficient package manager for JavaScript and Node.js projects. It uses a content-addressable store and a strict, symlinked node_modules layout so every version of every package is stored exactly once on disk and projects can only access dependencies they explicitly declare. pnpm provides first-class monorepo support via pnpm-workspace.yaml, the workspace protocol, Catalogs, package filtering, and a shared lockfile, and ships supply-chain safety features such as minimumReleaseAge, opt-in lifecycle scripts, dependency overrides, and a built-in patch workflow. Developed in the open under the MIT license on GitHub with an Open Collective sponsorship model, pnpm is used by major JavaScript projects including Next.js, Vue, Vite, Nuxt, Material UI, Prisma, Astro, and SvelteKit.

## Kin Score — 20.4 / 100 (emerging)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 20.4).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 45.2 |
| Commercial Clarity | 10.5 |
| Access Clarity | 10.5 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (5)

- **pnpm CLI** — The pnpm command-line interface for managing JavaScript/Node.js packages. Provides commands for installing, updating, and removing dependencies; running package scripts; executi...
- **pnpm Workspaces** — Native monorepo support driven by a `pnpm-workspace.yaml` file at the repository root. Supports the `workspace:` protocol for explicit local package references, a shared workspa...
- **pnpm Content-Addressable Store** — A content-addressable store that holds every version of every package exactly once on disk and hard-links (or reflinks) files into project `node_modules`. This produces a strict...
- **pnpm Hooks** — Programmatic extension points for customizing dependency resolution and installation behavior. `.pnpmfile.cjs` exposes lifecycle hooks (`readPackage`, `afterAllResolved`) that l...
- **pnpm Configuration** — Configuration surface for pnpm spanning `.npmrc`, environment variables, and `pnpm`-prefixed fields in `package.json`. Controls registry selection, authentication tokens, store ...

## Security (1)

- **Pnpm Domain Security** — TLSv1.3 · HSTS · DMARC

## Use cases (7)

- **Large JavaScript monorepos** — Manage hundreds of interdependent packages with a single shared lockfile, the workspace protocol, Catalogs, and recursive commands.
- **CI/CD pipeline acceleration** — Cut install time substantially in CI by leveraging the content-addressable store and the official pnpm/action-setup GitHub Action.
- **Disk-constrained developer machines** — Share a single copy of each package version across every project on a machine, dramatically reducing disk usage compared to npm or Yarn.
- **Supply-chain hardening** — Use minimumReleaseAge, ignoredBuiltDependencies, and strict lifecycle script policy to reduce exposure to malicious or compromised npm packages.
- **Phantom dependency detection** — The strict non-flat node_modules layout surfaces undeclared dependencies during local development rather than in production.
- **Reproducible builds** — pnpm-lock.yaml plus pnpm.overrides and pnpm.patchedDependencies make installations byte-reproducible across machines.
- **Multi-runtime JavaScript projects** — Use the pnpm/setup action and pnpm env to standardize Node.js, Bun, or Deno versions across teams.

## Tags

Node.js, Package Manager, Monorepo, JavaScript, Open-Source, Developer Tools, Dependency Management, CLI

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/pnpm/). Scores are computed from the provider's own public artifacts under a published rubric.