pnpm
This Claude Code plugin enforces a secure package-management baseline for Node.js projects using pnpm 12, requiring code review for dependency build scripts (allowBuilds), enforcing a strict 3-day minimum release age for dependencies, rejecting exotic transitive sources, and pinning both the package manager and Node 26 versions with a frozen lockfile in CI environments. The plugin provides automation to validate these policies without requiring external services or API keys.
Install
Source: https://github.com/JorgeCostaMacia/skills/tree/HEAD/plugins/pnpm
What it's made of
no extra components
- Commands
- 0
- Agents
- 0
- Skills
- 0
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (JorgeCostaMacia).