Developer, maker of @pnpm.io Works on dependency management at bit.devhttps://bsky.app/profile/kochan.iohttps://bsky.app/profile/kochan.io/post/3lyujm4ai6s2pWow, Hollywood is so creative15 Sep 2025 09:47 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lyujm4ai6s2phttps://bsky.app/profile/kochan.io/post/3lvbew42xkc2gI feel like pnpm will eventually grow from being a "npm alternative" to being a "nix alternative" but "pnix" doesn't sound appropriate 😂31 Jul 2025 14:47 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lvbew42xkc2ghttps://bsky.app/profile/kochan.io/post/3lvbe2nueds2gWith the changes to the lockfile format and the new types of fetchers that were added to pnpm, now it is really easy to make pnpm an installer for anything https://bsky.app/profile/pnpm.io/post/3lvbdyh23tk2g [contains quote post or other embedded content]31 Jul 2025 14:32 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lvbe2nueds2ghttps://bsky.app/profile/kochan.io/post/3lsmfsmvf7s2lI am thinking about a better name for the pnpm "virtual store". Which is where the dependency is written with its unique dependency graph. I couldn't find any prior art to this. Maybe "Package Context" could work. Or "fully resolved package store" but that's long.27 Jun 2025 19:47 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lsmfsmvf7s2lhttps://bsky.app/profile/kochan.io/post/3lshuyf3xo224Many packages request funding by printing message with postinstall scripts. What if instead of requesting funding we would promote sponsors? After all, we want companies to sponsor open source projects as they are the ones that make profit from it.26 Jun 2025 00:35 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lshuyf3xo224https://bsky.app/profile/kochan.io/post/3lshlsyd3bc27A lot of packages use postinstall scripts for printing out messages about funding. Could there be a better way to do this? pnpm doesn't even print the outputs from these scripts.25 Jun 2025 21:51 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lshlsyd3bc27https://bsky.app/profile/kochan.io/post/3lsgew37qwk2f🚀 Check out what we’ve been building at Bit: Hope AI: Architect agent that builds professional software https://www.producthunt.com/products/hope-ai-by-bit-cloud25 Jun 2025 10:15 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lsgew37qwk2fhttps://bsky.app/profile/kochan.io/post/3lqpqxnhkik27So... I was working on making @pnpm.io a tad faster 😜 https://youtu.be/pNDFfJvaubY?si=brGLRwaBQlkj8AnY03 Jun 2025 16:54 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lqpqxnhkik27https://bsky.app/profile/kochan.io/post/3lpbzq5i7qc2xI have copied over the list of trusted dependencies maintained by bun. So, you can use it with @pnpm.io if you want: https://github.com/pnpm/trusted-deps16 May 2025 12:28 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lpbzq5i7qc2xhttps://bsky.app/profile/kochan.io/post/3loik2hol5s2uI have searched Github for usages of "config dependencies". Found a single project for now: https://github.com/PSDTools/psdtools.github.io/blob/dd17f4f04d05b7560a8745557d9e99673d5369ad/pnpm-workspace.yaml#L167 This is a hook that removes polyfills from dependencies if they are not needed.06 May 2025 09:11 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3loik2hol5s2uhttps://bsky.app/profile/kochan.io/post/3lo3vppfvu22qI am wondering if we should always use some custom protocols like "kahuna:" when the registry is not the public npm registry. So package.json would get something like this:01 May 2025 08:35 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lo3vppfvu22qhttps://bsky.app/profile/kochan.io/post/3lnyi4n4q3c26I have improved the @pnpm.io "features comparison" page: https://pnpm.io/feature-comparison29 Apr 2025 23:54 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lnyi4n4q3c26https://bsky.app/profile/kochan.io/post/3lnxewbmaj226Now that we have a way to preload settings for @pnpm.io, maybe we could create standard config dependencies for specific stacks. Like "@pnpm/angular-defaults"29 Apr 2025 13:24 +0000at://did:plc:iwasfvmits3rjmcbcrok4ox4/app.bsky.feed.post/3lnxewbmaj226