pnpm
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation, configuration examples, and best practices for the pnpm package manager. All commands and configuration settings (e.g., pnpm-workspace.yaml, .npmrc) are consistent with official documentation and industry standards for JavaScript/TypeScript development.
- [SAFE]: The skill encourages security-positive behaviors, such as using
pnpm auditto check for vulnerabilities, leveraging pnpm's strict dependency isolation to prevent phantom dependencies, and pinning transitive dependencies via overrides to fix known security issues. - [SAFE]: Examples involving external packages (lodash, typescript) and internal workspace protocols are illustrative and do not involve downloading or executing code from untrusted or unknown sources.
Audit Metadata