pnpm

Malicious tool definition detected

Tool: references/ci.md Description: # CI/CD & Migration ## GitHub Actions ### Basic Setup ```yaml name: CI on: [push, pull_request] jobs: build: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: pnpm/action-setup@v4 with: version: 9 - uses: actions/setup-node@v4 with: node-version: 20 cache: 'pnpm' - run: pnpm install --frozen-lockfile - run: pnpm test - run: pnpm build ``` ### With Store Caching ```yaml - uses: pnpm/action-setup@v4 with: version: 9 - name: Get pnpm store directo

Malicious tool definition detected

Tool: SKILL.md Description: --- name: pnpm description: Use when managing Node.js dependencies with pnpm - provides workspace setup, catalogs, CLI commands, overrides, and CI configuration license: MIT --- # pnpm Content-addressable store, strict deps, workspace protocol, catalogs.

Malicious tool definition detected

Tool: references/cli.md Description: # CLI Commands ## Installation ```bash pnpm install # Install all deps pnpm i # Alias pnpm install --frozen-lockfile # CI mode - fail if lockfile outdated pnpm install --prefer-offline # Use cache when available pnpm install --offline # Use store only (no network) pnpm install --prod # Production only pnpm install --no-optional # Skip optional deps pnpm install --ignore-scripts # Skip lifecycle sc

Malicious tool definition detected

Tool: references/features.md Description: # Features ## Overrides Force specific versions of dependencies: ```yaml # pnpm-workspace.yaml (recommended) overrides: lodash: ^4.17.21 'foo@^1.0.0': ^1.2.3 # Specific parent version 'express>cookie': ^0.6.0 # Nested dep 'underscore': 'npm:lodash@^4' # Replace package 'unwanted-pkg': '-' # Remove entirely ``` Or in package.json: ```json { "pnpm": { "overrides": { "lodash": "^4.17.21" } } } ``` ## Patches Modify third-party

Malicious tool definition detected

public-hoist-pattern[]=*eslint* shamefully-hoist=false # Store store-dir=~/.pnpm-store virtual-store-dir=node_modules/.pnpm # Lockfile lockfile=true prefer-frozen-lockfile=true # Performance side-effects-cache=true # Registry registry=https://registry.npmjs.org/ @myorg:registry=https://npm.myorg.com/ # Workspace link-workspace-packages=true prefer-workspace-packages=true shared-workspace-lockfile=true save-workspace-protocol=rolling inject-workspace-packages=false # Hard-link instead of symlink