Pnpm — Agent Skill by Anthony Fu

From the author

Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store.

— the description by Anthony Fu

From the skill’s files

Taken from the skill’s own files (its description, section headings and stated usage). Not an AutoGineer summary, and not written by the author as one.

Node.js package manager with strict dependency resolution. Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store. pnpm is a fast, disk space efficient package manager. It uses a content-addressable store to deduplicate packages across all projects on a machine, and enforces strict dependency resolution by default, preventing phantom dependencies.

What it does

Core
Features
Best Practices

When to use it

Use when running pnpm specific commands, configuring workspaces via pnpm-workspace.yaml, or managing dependencies with catalogs, patches, overrides, config dependencies, or the global virtual store.

Advantages

The skill’s files do not state this.

Usage examples

The skill’s files do not state this.

Install

Download the skill as a ZIP:
https://autogineer.com/agent-skills/antfu/pnpm/download
Unzip it into the cross-client skills folder of your project:
```
mkdir -p .agents/skills && unzip pnpm.zip -d .agents/skills
```

Documentation by Anthony Fu

pnpm is a fast, disk space efficient package manager. It uses a content-addressable store to deduplicate packages across all projects on a machine, and enforces strict dependency resolution by default, preventing phantom dependencies.

pnpm v12 is a Rust rewrite of v11: stable, and keeps v11's commands, flags, settings, and lockfile format — so most guidance here applies to both. A handful of v12 behaviors differ (git deps resolve via HTTPS, project-aware global bins, other package managers, packageImportMethod: auto hardlinks first on Linux) — see best-practices-migration.

Configuration model (important): pnpm settings live in pnpm-workspace.yaml (and the global config.yaml) using camelCase keys. .npmrc is used only for authentication/registry credentials, and the pnpm field of package.json is no longer read. When working in a pnpm project, check pnpm-workspace.yaml for settings/workspace structure and .npmrc only for auth. Always use --frozen-lockfile (or pnpm ci) in CI.

The skill is based on pnpm 12.18, generated at 2026-11-05. It covers v11+v12 behavior (config split, config includes, isolated global packages, allowBuilds, pmOnFail, global virtual store, native release management, workspace task orchestration, and experimental Python/Cargo support) where current docs describe them.

Core

Topic	Description	Reference
CLI Commands	install/add/remove/update, run, dlx/pnx, workspace, runtime, publishing (version, view, sbom, stage)	core-cli
Configuration	pnpm-workspace.yaml settings (camelCase), global config.yaml, config includes, packageConfigs, auth (.npmrc, auth.ini)	core-config
Workspaces	Monorepo support: filtering, workspace protocol, shared lockfile, packageConfigs	core-workspaces
Store	Content-addressable store, virtual store, node linker modes (incl. loaded/store loader), frozen/read-only store	core-store

Features

Topic	Description	Reference
Catalogs	Centralized dependency versions; catalogMode, catalog: in overrides	features-catalogs
Overrides	Force versions (incl. transitive & peer deps); packageExtensions	features-overrides
Patches	Modify third-party packages; patchedDependencies in pnpm-workspace.yaml	features-patches
Aliases	Install under custom names (npm:) and registry aliases (namedRegistries)	features-aliases
Hooks	.pnpmfile.mjs hooks (readPackage, updateConfig, beforePacking), finders, resolvers/fetchers	features-hooks
Peer Dependencies	Auto-install, strict mode, rules, dedupePeers, peers check	features-peer-deps
Config Dependencies	Share hooks/settings/catalogs/patches across repos via configDependencies	features-config-dependencies
Global Virtual Store & Shims	Shared node_modules, git-worktree multi-agent setups, isolated global packages, project-aware bins, other package managers	features-global-virtual-store
Supply-Chain Security	Build approval (allowBuilds), permissions and agent skills, minimumReleaseAge, trustPolicy, lockfile integrity	features-supply-chain-security
Task Orchestration	Cross-project task graphs (tasks/dependsOn), concurrency groups, priority, pnpm pipeline	features-task-orchestration
Release Management	Native versioning: pnpm change/version -r/lane, lanes, epics, fixed groups	features-versioning
Multi-Ecosystem	Python (pypi:) and Cargo (crate:) dependencies alongside npm (experimental)	features-multi-ecosystem

Best Practices

Topic	Description	Reference
CI/CD Setup	GitHub Actions, GitLab, Docker, pnpm ci, store caching, frozen lockfiles	best-practices-ci
Migration	npm/Yarn → pnpm, phantom deps, and pnpm v10 → v11 → v12 upgrade notes	best-practices-migration
Performance	Install optimizations, allowBuilds, global virtual store, workspace parallelization	best-practices-performance

Files

ATTRIBUTION.mdAdded by AutoGineer889 B
GENERATION.md134 B
LICENSELicence file added by AutoGineer1.1 KiB
SKILL.md5.1 KiB
references/best-practices-ci.md9.7 KiB
references/best-practices-migration.md9.9 KiB
references/best-practices-performance.md6.0 KiB
references/core-cli.md11.3 KiB
references/core-config.md12.8 KiB
references/core-store.md10.7 KiB
references/core-workspaces.md6.6 KiB
references/features-aliases.md4.4 KiB
references/features-catalogs.md5.0 KiB
references/features-config-dependencies.md4.2 KiB
references/features-global-virtual-store.md10.0 KiB
references/features-hooks.md8.9 KiB
references/features-multi-ecosystem.md6.2 KiB
references/features-overrides.md5.5 KiB
references/features-patches.md5.0 KiB
references/features-peer-deps.md5.9 KiB
references/features-supply-chain-security.md7.7 KiB
references/features-task-orchestration.md6.8 KiB
references/features-versioning.md5.5 KiB

LICENSE

MIT License

Copyright (c) 2025-PRESENT Anthony Fu <https://github.com/antfu>

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Node.js

Security

What our scanner noticed· Low risk

Instructions that use the network

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Implement
Matt Pocock· Community
A structured workflow for implementing software tasks from specifications or tickets.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository317.5k
Source Driven Development
Addy Osmani· Community
A rigorous process for grounding code implementation in official, version-specific documentation to ensure accuracy and avoid outdated patterns.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository113.9k
Write Swift
Emil Kowalski· Community
A comprehensive guide to writing modern, safe, and performant Swift code following the language's latest idioms and concurrency models.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository54.3k
Cardputer Buddy
AnthropicOfficial
Iterate on the Cardputer-Adv MicroPython app bundle (Claude Buddy, Snake, Hello) after the device is already provisioned via m5-onboard. Use when the user wants to add a new app, push a single changed .py without re-flashing, watch device serial logs, or run a one-shot REPL command. Trigger on "add an app", "push to the cardputer", "tail the device", "run on the device", or follow-up work after /maker-setup.
Software developmentClaude CodeClaude appsOpenAI Codex+14 more
Apache-2.0GitHub stars of the source repository46.3k
Typescript Pro
Seth Hobson· Community
An expert TypeScript persona focused on advanced typing, enterprise architecture, and strict type safety.
Software developmentClaude Code
MITGitHub stars of the source repository42.3k
Scala Pro
Seth Hobson· Community
An expert Scala engineer persona specializing in functional programming, distributed systems, and enterprise-grade architecture.
Software developmentClaude Code
MITGitHub stars of the source repository42.3k