# pnpm

pnpm is a fast, disk space-efficient package manager for Node.js projects, with dependency management and monorepo support.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Docusaurus 3.10

DevFeed: [Docusaurus 3.10](<https://devfeed.tech/articles/docusaurus-3-10-40942.md>)

Original publisher: [Read original article](<https://docusaurus.io/blog/releases/3.10>)

Author: Sébastien Lorber

Published: 2026-04-07T00:00:00Z

Content type: release

Language: en

Sources: [Docusaurus Blog](<https://devfeed.tech/sources/docusaurus-blog.md>)

Topics: [releases](<https://devfeed.tech/topics/releases.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [Security](<https://devfeed.tech/topics/security.md>), [supply chain attacks](<https://devfeed.tech/topics/supply-chain-attacks.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [MDX](<https://devfeed.tech/topics/mdx.md>), [npm](<https://devfeed.tech/topics/npm.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [monorepo](<https://devfeed.tech/topics/monorepo.md>), [pnpm](<https://devfeed.tech/topics/pnpm.md>)

Tags: [github-actions](<https://devfeed.tech/tags/github-actions.md>), [mdx](<https://devfeed.tech/tags/mdx.md>), [monorepo](<https://devfeed.tech/tags/monorepo.md>), [npm](<https://devfeed.tech/tags/npm.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [pnpm](<https://devfeed.tech/tags/pnpm.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>)

### AI overview

Docusaurus 3.10 is the final release in the v3.x line and prepares sites for Docusaurus v4. It introduces future flags for upcoming breaking changes, makes Docusaurus Faster stable, and adds supply-chain security measures including npm Trusted Publishing, OIDC-based GitHub Actions releases, provenance records, and dependency checks.

### Source excerpt

We are happy to announce Docusaurus 3.10.

## Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI

DevFeed: [Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI](<https://devfeed.tech/articles/impact-of-sha1-hulud-the-second-coming-on-the-mintlify-cli-31088.md>)

Original publisher: [Read original article](<https://www.mintlify.com/blog/sha1-hulud-the-second-coming>)

Author: Han Wang

Published: 2025-11-25T00:00:00Z

Content type: news

Language: en

Sources: [Mintlify Blog](<https://devfeed.tech/sources/mintlify-blog.md>)

Topics: [Command-line interface](<https://devfeed.tech/topics/cli.md>), [npm](<https://devfeed.tech/topics/npm.md>), [malicious packages](<https://devfeed.tech/topics/malicious-packages.md>), [Security](<https://devfeed.tech/topics/security.md>), [pnpm](<https://devfeed.tech/topics/pnpm.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [announcements](<https://devfeed.tech/tags/announcements.md>), [deprecated](<https://devfeed.tech/tags/deprecated.md>), [malicious-packages](<https://devfeed.tech/tags/malicious-packages.md>), [npm](<https://devfeed.tech/tags/npm.md>), [pnpm](<https://devfeed.tech/tags/pnpm.md>), [resolved](<https://devfeed.tech/tags/resolved.md>), [security](<https://devfeed.tech/tags/security.md>), [sha1-hulud](<https://devfeed.tech/tags/sha1-hulud.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>)

### AI overview

Mintlify reports that its CLI was briefly exposed to the SHA1-Hulud supply chain attack through compromised npm dependencies on November 24, 2025. The company says it resolved the issue within six hours, released CLI version 4.2.210, deprecated potentially affected versions, and provided remediation steps for users who installed or updated during the vulnerable window.

### Source excerpt

The Mintlify CLI was briefly exposed to a supply chain attack. Learn what happened, who was affected, and what actions to take. Resolved in 6 hours.

## How to Use pnpm on Heroku

DevFeed: [How to Use pnpm on Heroku](<https://devfeed.tech/articles/how-to-use-pnpm-on-heroku-26507.md>)

Original publisher: [Read original article](<https://www.heroku.com/blog/using-pnpm-on-heroku/>)

Author: Colin Casey

Published: 2024-07-19T02:12:00Z

Content type: tutorial

Language: en

Sources: [Heroku](<https://devfeed.tech/sources/heroku.md>)

Topics: [pnpm](<https://devfeed.tech/topics/pnpm.md>), [Heroku](<https://devfeed.tech/topics/heroku.md>), [Package manager](<https://devfeed.tech/topics/package-manager.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [npm](<https://devfeed.tech/topics/npm.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Express](<https://devfeed.tech/topics/express.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [buildpacks](<https://devfeed.tech/tags/buildpacks.md>), [cli](<https://devfeed.tech/tags/cli.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [developer-tools](<https://devfeed.tech/tags/developer-tools.md>), [development](<https://devfeed.tech/tags/development.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [express](<https://devfeed.tech/tags/express.md>), [git](<https://devfeed.tech/tags/git.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [install](<https://devfeed.tech/tags/install.md>), [integrity](<https://devfeed.tech/tags/integrity.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [npm](<https://devfeed.tech/tags/npm.md>), [packages](<https://devfeed.tech/tags/packages.md>), [pnpm](<https://devfeed.tech/tags/pnpm.md>)

### AI overview

This tutorial explains how to use pnpm as an alternative to npm for Node.js applications deployed on Heroku. It covers pnpm's content-addressable store, dependency installation workflow, Corepack-based installation, version pinning, and creating a sample Express application.

### Source excerpt

What is pnpm? Pnpm is a fast, disk-efficient Node package manager used as an alternative to npm. The Heroku Node.js buildpack now supports pnpm. Early Node.js application owners who've taken advantage of pnpm support have seen 10-40% faster install times compared to NPM on Heroku deployments. It's an excellent choice for managing packages in the [...] The post How to Use pnpm on Heroku appeared first on Heroku.