pnpm
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts from the official pnpm domain (
get.pnpm.io). - [REMOTE_CODE_EXECUTION]: Documents the official installation method for the tool which involves executing remote scripts directly via the shell (
curl ... | shandiwr ... | iex). - [COMMAND_EXECUTION]: Provides instructions for running various shell commands via the
pnpmCLI, including package installation, script execution, and running remote binaries viapnpm dlx. - [DATA_EXFILTRATION]: Includes documentation for the
pnpm publishcommand used to upload packages to external registries such as npmjs.org or GitHub Packages.
Audit Metadata