pnpm Cheat Sheet

Install all dependencies declared in package.json, updating the lockfile as needed.

--frozen-lockfile (CI default in this repo); --prod; --offline; --ignore-scripts; --shamefully-hoist; --strict-peer-dependencies=false; --prefer-offline

Add a runtime dependency and write to package.json.

-D / --save-dev; -E / --save-exact; -O / --save-optional; -P / --save-prod; -g global; --workspace-root add at workspace root

Install a global tool (e.g. TypeScript, ESLint, tsx) onto the path.

-g; --global-prefix; --reporter append|ndjson

Remove a dependency from the project and the lockfile.

-D from devDependencies; -g from globals; --filter pkg remove from one workspace only

Update dependencies within the semver range; -L / --latest upgrades to the newest version.

-L / --latest; -i / --interactive; --workspace-root; --filter

Show outdated packages alongside current / wanted / latest versions.

--long; --recursive / -r; --filter

List installed packages and a tree of what depends on them.

--depth 0 only direct; --prod / --dev; -r recursive; --json | jq

Run the npm-style security advisory check against the lockfile.

--prod only production; --json

Prune the lockfile/dependency tree by hoisting to a single version where possible.

--check; --strict-peer-dependencies=false

Rebuild native dependencies (post-build / after Node version bump).

--reporter; --recursive; --filter

Approve build scripts for native packages (e.g. esbuild, sharp, @swc/core).

interactive prompts; can also be set via package.json#pnpm.onlyBuiltDependencies

Import an existing package-lock.json / yarn.lock into a pnpm-lock.yaml.

import; n/a other params

Run a script defined in package.json#scripts.

-r / --recursive run in every package; --filter / -F target one; --parallel; --no-color

Fetch a package from the registry and run its binary without permanently installing.

dlx pkg args; --package extra pkg; --silent

Run a command in the project's context (PATH includes .node_modules/.bin).

exec ...; --filter target workspace; --recursive; --parallel

Scaffold a new project from a create-* style package.

create [name] [args]; -y / --yes

Recursive — run a pnpm action across every package in the workspace.

-r run build; --parallel; --topology sort; --order

Target one package by name, directory, glob or ./relative-path.

--filter pkg | --filter ./packages/foo | --filter {pkg} strict name only; -F alias

Add a hoisted dev dependency that's shared across the workspace.

-w / --workspace-root; -D to devDeps

Print the location of pnpm's content-addressable store (deduped across projects).

store path; --virtual-store-dir DIR

Remove unreferenced packages from the store (reduces disk usage).

store prune; --force skip prompt

List or delete entries in pnpm's metadata cache.

cache list; cache delete <pkg>@<ver>; --registry

Read or write to the user's/global/store/project pnpm config.

config get key; config set key val; --location project|user|global

List all effective config keys, or delete one.

config list --location project; config delete key

Explain why a package is in node_modules — show the chain of dependants.

--prod; --dev; -r; --filter

Symlink a local package into the current project, or install a global package locally.

link (uses ./); link --global <pkg>; --dir

Publish the current package to the configured registry.

--dry-run; --tag alpha|beta|next; --access public|restricted; --otp N; --filter

Create a tarball of the package without publishing (for upload elsewhere).

--pack-gzip-level 0..9; --pack-destination DIR

Inspect the dependency tree across all workspaces at once.

Run a script in just one workspace — perfect for fine-grained CI.

--filter with dependencies/dependents; --parallel

Repo helpers from this site — sync tool translations into the Nuxt app, then build tool bundles.