pnpm
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides documentation and examples for executing project scripts and binaries through
pnpm runandpnpm exec. - [REMOTE_CODE_EXECUTION]: Describes the
pnpm dlxcommand, which is a standard feature for downloading and running packages from remote registries without permanent installation. - [EXTERNAL_DOWNLOADS]: Includes CI/CD configuration examples that download pnpm and its dependencies from official and well-known sources like GitHub and the npm registry.
- [COMMAND_EXECUTION]: Explains how to use
.pnpmfile.cjshooks, which allows for custom JavaScript logic to be executed during the dependency resolution phase. - [COMMAND_EXECUTION]: Documents the
pnpm patchfeature, which facilitates direct modification of third-party dependency source code.
Audit Metadata