Automate pnpm setup, .npmrc configuration, and CI/CD integration.
npx skills add https://github.com/bryanvillamilpragma/power-Pragma --skill pnpm-setup
Please help me install this Agent Skill. Skill: pnpm-setup Source: https://github.com/bryanvillamilpragma/power-Pragma/tree/main/skills-registry/pnpm-setup Command: npx skills add https://github.com/bryanvillamilpragma/power-Pragma --skill pnpm-setup
The pnpm-setup skill addresses the complexity and security concerns associated with initializing and configuring pnpm in a project.
.npmrc, lockfile discipline, and audit workflows.Initialize pnpm in your project with corepack enable && pnpm install.
High-intent search queries and answers about installing and using this skill.
To set up pnpm using corepack, run `corepack enable` to activate the package manager, then execute `pnpm install` to install dependencies. This setup automates version pinning and prepares your project environment.
Harden pnpm supply chain security by configuring `.npmrc` rules, enforcing strict lockfile discipline, and integrating audit workflows. This configuration prevents unauthorized package modifications and ensures dependency integrity.
Configure pnpm workspaces by defining workspace packages in your project configuration to ensure a shared lockfile and consistent environment. This setup centralizes dependency resolution across all workspace directories.
Integrate pnpm into GitHub Actions CI/CD by applying a template that ensures consistent installation and auditing practices. This integration standardizes your pipeline and automates dependency security checks.
Yes, corepack is required to use this pnpm setup. Corepack manages and pins the pnpm version, ensuring consistent package manager execution across different environments.
Lockfile discipline in pnpm ensures dependencies remain locked to specific versions across installations. In CI/CD, this prevents unexpected updates or supply chain attacks by maintaining a strict, audited dependency tree.
ray-manalotoPin Node package managers with corepack and mise for consistent tooling.
balsm-healthDetect supply chain attack vectors in GitHub Actions CI/CD workflows.
Doyajin174Run NPM audits, apply fixes, generate SBOMs, and enforce lockfile hygiene.
vinhgiangLinks workspace packages in monorepos across npm, yarn, pnpm, and bun.