# pnpm 11.17.0

Fast, disk space efficient package manager

Snapshot of gominimal/pkgs commit `31367925954a34e1fb7b318e9be1e449f6669aec` (pushed 2026-07-27T16:00:19.000Z).

## Install

```sh
min add pnpm
```

## Direct advisories

None at this commit.

## Transitive advisories

9 advisories inherited through runtime dependencies:

- CVE-2026-58055 (MEDIUM) via node-lts → nghttp2
- CVE-2013-4412 (HIGH) via node-lts → glibc
- CVE-2026-4046 (HIGH) via node-lts → glibc
- CVE-2026-4437 (HIGH) via node-lts → glibc
- CVE-2026-4438 (MEDIUM) via node-lts → glibc
- CVE-2026-5435 (HIGH) via node-lts → glibc
- CVE-2026-5450 (CRITICAL) via node-lts → glibc
- CVE-2026-5928 (HIGH) via node-lts → glibc
- CVE-2026-6238 (MEDIUM) via node-lts → glibc

## Dependencies

- Build (2): base, tar
- Runtime (2): node-lts, coreutils

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 60 | mid |
| advisories | 10 | low |
| quality | 45 | low |
| maintenance | 100 | perfect |
| licence | 100 | perfect |

## Links

- Homepage: https://pnpm.io
- Package page (HTML): https://minimal.dev/pkgs/pnpm
- JSON API (floats latest): https://minimal.dev/api/pkgs/pnpm.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/pnpm/sbom.json