corepack
berry
| corepack | berry | |
|---|---|---|
| 5 | 203 | |
| 2,622 | 7,481 | |
| 2.6% | 0.8% | |
| 8.7 | 9.0 | |
| 9 days ago | 4 days ago | |
| TypeScript | TypeScript | |
| MIT License | BSD 2-clause "Simplified" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
corepack
-
Yarn 4.0
I'd love to use Bun for my projects, but it's not integrated into Corepack yet (and therefore you cannot pin the bun version w/ checksum in package.json)
https://github.com/nodejs/corepack/issues/295
- corepack global package?
-
Every NPM package potentially compromised
Recently Node 16 LTS cycle started. One month and a few days before the carry-over, a super controversial package titled `coredeps` [0] was officially declared a core module and has been bundled with all official distributions since.
The NodeJS team refuses to discuss NPM because it's a separate 3rd party. And yet.... this NodeJS Core module comes pre-installed as a global NPM package.
We're just getting started.
This module installs or even reinstalls any supported package manager when you execute a script with a name that would match any that they'd recognise. Opt-in for only a short period, and intending to expand beyond package manager installations.
Amidst all that's been going on, NPM (Nonstop Published Moments) is working on a feature that silently hijacks user commands and installs foreign software. The code found in those compromised packages operated in a similar manner and was labeled a critical severity vulnerability.
The following might actually make you cry.
Of these third party remote distributions it's downloading, the number of checksum, keys, or even build configurations that are being verified is 0.
The game that Microsoft is playing with their recent acquisitions here is quite clear, but there's too much collateral damage.
[0] https://github.com/nodejs/corepack#readme
-
Corepack: the Node.js' manager of package managers
The new Node.js LTS v16 will be released at the end of October (without a fancy name assigned yet), it'll have Corepack preinstalled in the default configuration since v16.9.0. 👌
-
Yarn 3.0 🚀🤖 Performances, ESBuild, Better Patches, ...
Corepack integration
berry
-
Client-Side Search for Static Sites with Strapi, Next.js, Fusejs & Cloudflare
Yarn(v4.2.2)
-
Step-by-Step Tutorial on Building an AI text Humanizer with AI/ML API and Integration with Clerk Auth and Deploying to Vercel
npm or yarn or yarn
-
Wow, pnpm, You’re Really Fast
If you’re a Node.js developer, then you’re familiar with npm and Yarn. You might even have a strong opinion about using one over the other. For years, developers have been struggling with the bloat — in disk storage and build time — when working with Node.js package managers, especially npm.
- Revisando Node JS
-
Dockerizing a Next.js Application using a Standalone Build
In my case, I like to use pnpm to reduce the disk size of the node_modules folder. Therefore, the example of the Next.js Docker image uses this package manager, but you can make slight adjustments to use npm or yarn if you prefer.
-
Modern Web Development with Turborepo, Next.js, TailwindCSS, NestJS, and More…
Yarn
-
React with Vite On Steroids
Yarn (or npm or pnpm)
-
How to Install Radix UI: A Step-by-Step Guide
A package manager like npm or yarn
- Un tour sur les gestionnaires de paquets node: npm, yarn ou pnpm ?
What are some alternatives?
nvm - Node Version Manager - POSIX-compliant bash script to manage multiple active node.js versions
yarn - The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
npm
pnpm - Fast, disk space efficient package manager
asdf - Extendable version manager with support for Ruby, Node.js, Elixir, Erlang & more
docker-node - Official Docker Image for Node.js :whale: :turtle: :rocket:
vscode-deploy-reloaded - Recoded version of Visual Studio Code extension 'vs-deploy', which provides commands to deploy files to one or more destinations.
nx - Smart Monorepos · Fast CI
ultra-runner - 🏃⛰ Ultra fast monorepo script runner and build tool
snarkdown - :smirk_cat: A snarky 1kb Markdown parser written in JavaScript
node - Node.js JavaScript runtime ✨🐢🚀✨
lerna - Lerna is a fast, modern build system for managing and publishing multiple JavaScript/TypeScript packages from the same repository.