pnpm
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation in
references/core-installation.mdincludes instructions to download the official pnpm installer fromhttps://get.pnpm.io/install.shandhttps://get.pnpm.io/install.ps1. These are the standard, official endpoints for the pnpm project.\n- [REMOTE_CODE_EXECUTION]: The installation guide provides commands that pipe the downloaded installer script directly into a shell interpreter (e.g.,| shor| Invoke-Expression). This is the standard installation pattern for pnpm and is documented here for the agent's context when setting up environments.\n- [DYNAMIC_EXECUTION]: The skill describes the use of.pnpmfile.cjsinreferences/features-hooks.md, which is a built-in pnpm feature that allows users to write JavaScript logic to programmatically modify the dependency tree during resolution. This is a powerful, standard developer feature for fixing broken packages or enforcing version constraints.
Audit Metadata