Credential access
Reads npmrc tokens, environment variables, and package lifecycle script inputs.
brew / rank 128
Install pnpm with Homebrew
Fast, disk space efficient package manager. Version 11.18.0 via Homebrew; verified 2026-07-29.
agent safety
Agent safety answer
pnpm manages JavaScript dependencies and package publishing with access to project scripts.
Remote mutation
Can install dependency trees and run scripts that call external services.
Publish/artifact risk
Can publish npm packages and produce release bundles.
Recommended control
Gate publish, lifecycle scripts, and credentialed registry operations.
Agent-use guidance
Allow lockfile and test commands after scan; require approval for publish and install-script execution.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install pnpmprovider-native install command
overview
Package summary
Fast, disk space efficient package manager
Project links
Commands and aliases
- pn
- pnpm
- pnpx
- pnx
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:package manager
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.npmrc- Windows
%UserProfile%\.npmrc
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.npmrc- Windows
%UserProfile%\.npmrc
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
pn | executable | indexed executable | Discovered from the local executable index. |
pnpm | executable | indexed executable | Discovered from the local executable index. |
pnpx | executable | indexed executable | Discovered from the local executable index. |
pnx | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version11.18.0
manager updated2026-07-29
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:pnpm |
|---|---|
| Version | 11.18.0 |
| Package manager | Homebrew |
| Homepage | https://pnpm.io/ |
| Last updated | 2026-07-29T17:10:32Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated agent safety answer
- curated configuration and credential file locations
- pkgdb category and tag curation