pnpm 11 deep dive with lead maintainer Zoltan Kochan

pnpm lead maintainer Zoltan Kochan joins PodRocket to unpack pnpm 11's biggest shifts: a new minimum release age default that blocks npm registry packages under 24 hours old, a cleaner allow builds config replacing scattered post-install script settings, and the experimental global virtual store that slashes install times with Git worktrees. Zoltan also shares why a Rust rewrite of pnpm's engine is now underway, and how AI-assisted development made it possible far sooner than expected.

Links

Website: https://www.kochan.io/
Github: https://github.com/zkochan
LinkedIn: https://www.linkedin.com/in/zkochan
X: https://x.com/zoltankochan
Mastodon: https://fosstodon.org/@zkochan
Bluesky: https://bsky.app/profile/kochan.io

Resources

pnpm release blog post: https://pnpm.io/blog/releases/11.0

We want to hear from you!

How did you find us? Did you see us on Twitter? In a newsletter? Or maybe we were recommended by a friend?

Fill out our listener survey! https://t.co/oKVAEXipxu

Let us know by sending an email to our producer, Elizabeth, at [email protected], or tweet at us at PodRocketPod.

Check out our newsletter! https://blog.logrocket.com/the-replay-newsletter/

Follow us. Get free stickers.

Follow us on Apple Podcasts, fill out this form, and we’ll send you free PodRocket stickers!

What does LogRocket do?

LogRocket provides AI-first session replay and analytics that surfaces the UX and technical issues impacting user experiences. Start understanding where your users are struggling by trying it for free at LogRocket.com. Try LogRocket for free today.

Chapters

00:00 Introduction
01:00 The 24-Hour Minimum Release Age Default
03:30 Community Pushback and the Polling Shift
05:00 Trusted Policy and OIDC Provenance Checking
07:00 Performance Trade-offs of Full Metadata Fetching
08:00 The New Allow Builds Configuration
10:30 Global Installs and the Virtual Store Explained
13:00 Which Packages Break with the New Layout
14:30 Global Virtual Store for Local Dev and Worktrees
16:30 TypeScript Go and the Golden Age of Development
17:30 AI Agents Influencing pnpm's Design Decisions
19:00 The Rust Rewrite — and Why Now
20:00 Dropping Node 18 and the Standalone Executable
22:00 Installing Node.js via pnpm and the New GitHub Action
24:00 Moving Config from npmrc to pnpm-workspace.yaml
26:00 Upgrade Smoothness and Common Migration Pain Points
28:30 pnpm v12 Roadmap — Frozen Installs in Rust
31:00 Contributing to pnpm and the Open Source PR Tsunami
33:00 Wrap-up