npmn

npmn is an open-source package manager for Node.js that serves as an alternative to npm and pnpm. It manages dependencies for JavaScript projects, prioritizing speed, deterministic installs, and efficient disk usage through a content-addressable store. Packages are resolved and installed according to a lockfile that records exact versions to ensure reproducible builds across environments.

Key features include a lockfile mechanism, a content-addressable store to minimize duplication, and support for workspaces to manage monorepos. The CLI offers commands similar to npm, such as npmn install, npmn add, npmn remove, and npmn run, and it aims to be compatible with npm registry metadata and tarballs. npmn also emphasizes parallel fetching and an optimized dependency graph to improve install performance.

Offline capabilities are a notable aspect: once a package is cached, npmn can install dependencies without network access. Security considerations include integrity checks via package checksums and audited provenance of packages. The design favors reproducible builds and predictable dependency resolution, helping to reduce "works on my machine" issues across development, CI, and production environments.

Limitations and status: as an alternative tool, npmn may require adjustments to existing workflow configurations and lockfile maintenance. Adoption levels can vary by ecosystem, and users should consult project documentation and migration guides when moving from npm or pnpm. The project is maintained by an open-source community with ongoing development, modules, and integrations.

See also: npm, pnpm, Yarn.