# Install pnpm with Homebrew

Fast, disk space efficient package manager. Version 11.18.0 via Homebrew; verified 2026-07-29.

## Install

```sh
sudo av install brew:pnpm
```

## Agent safety answer

pnpm manages JavaScript dependencies and package publishing with access to project scripts.

- **Credential access:** Reads npmrc tokens, environment variables, and package lifecycle script inputs.
- **Remote mutation:** Can install dependency trees and run scripts that call external services.
- **Publish/artifact risk:** Can publish npm packages and produce release bundles.
- **Recommended control:** Gate publish, lifecycle scripts, and credentialed registry operations.
- **Agent-use guidance:** Allow lockfile and test commands after scan; require approval for publish and install-script execution.

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install pnpm
```

  Evidence: provider-native install command

## Package facts

- **Package key:** brew:pnpm
- **Package manager:** Homebrew
- **Version:** 11.18.0
- **Source summary:** Fast, disk space efficient package manager
- **Homepage:** <https://pnpm.io/>
- **Last updated:** 2026-07-29T17:10:32Z
- **Generated:** 2026-08-03T00:40:33+00:00

## Executables

- pn (alias)
- pnpm (alias)
- pnpx (alias)
- pnx (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 11.18.0

## Security Notes

infrastructure mutation or orchestration signal.

- **Geiger risk:** orange / medium
- infrastructure mutation or orchestration signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.npmrc
- Windows: %UserProfile%\.npmrc

## Credential files

- Unix: ~/.npmrc
- Windows: %UserProfile%\.npmrc

## Combined YAML source

View the package source record on GitHub. [combined/pnpm.yml](https://github.com/automic-vault/db/blob/main/combined/pnpm.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- curated configuration and credential file locations
- pkgdb category and tag curation
- curated agent safety answer