pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
Blog post from Socket
pnpm 12 is a stable Rust-based rewrite of the JavaScript package manager that aims to preserve pnpm 11’s commands, configuration, lockfile format, and workflows while substantially improving installation performance. Released on August 26 and currently available through the next-12 tag, it moved filesystem-heavy dependency operations from Node.js and TypeScript into a native binary, with Vercel tests on a large monorepo reporting median install-time reductions of 64.4% to 90.5% versus pnpm 10.28, alongside lower disk usage but a larger uncached Corepack artifact. The release reflects a broader shift toward Rust in JavaScript tooling, though maintainers acknowledge tradeoffs between native performance and the accessibility and shared ecosystem benefits of JavaScript implementations. pnpm also withdrew broad public comparisons against Bun and Yarn after discovering benchmark flaws involving cache conditions and package-count parsing, limiting its claims to demonstrated improvements over previous pnpm versions and npm. Beyond speed, pnpm 12 introduces security and reproducibility features including signature verification for selected runtime binaries, package-manager provisioning, registry artifact revisions recorded by digest, signed remote build-cache support, and deterministic lockfiles for cyclic dependencies. Users upgrading should review compatibility changes such as the removal of install --resolution-only, altered Git dependency URL handling, warnings for unknown workspace settings, and restrictions on using sudo for global pnpm modifications.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.