# Feature catalog — pnpm/pnpm

> Canonical page: https://codevetter.com/unpack/pnpm/feature-catalog

# Feature catalog — pnpm/pnpm

Scanned commit b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385 (2026-10-02). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

The inspected Rust command table covers dependency management, workspace execution, package inspection, publishing, configuration, runtime management, and release intents. Installation exposes dependency-group and linker choices, with optional Cargo and Python participation. pnpr combines compatible registry APIs with resolution, artifact, compiler-cache, and pipeline-record surfaces. This catalog groups the inspected public surfaces; command registration alone does not establish complete implementation or successful operation.
- Dependency commands include add, install, install-test, update, remove, link/unlink, import, dedupe, prune, fetch, deploy, and patch/patch-commit/patch-remove; install accepts production, development, and optional dependency selection plus isolated, hoisted, or PnP linkers. — [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L26-36](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L26-L36) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L113-125](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L113-L125) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L221-236](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L221-L236) [pnpm/crates/cli/src/cli_args/install.rs#L65-99](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/install.rs#L65-L99)
- Execution surfaces include recursive, run, exec, dlx, create, test/start/stop/restart shortcuts, tasks, and pipeline. Pipeline's declared contract includes frozen installation, affected-project selection, dependency ordering, and cached task restoration. — [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L23-25](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L23-L25) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L132-164](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L132-L164)
- Inspection and security commands include list/ll, why, outdated, audit, peers, licenses, sbom, doctor, ignored-builds, approve-builds, cat-file, cat-index, and find-hash. — [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L37-68](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L37-L68) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L84-90](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L84-L90) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L126-128](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L126-L128) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L213-220](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L213-L220)
- Publishing and account commands include pack, publish, stage, access, deprecate/undeprecate, unpublish, dist-tag, login/logout, owner, team, whoami, and star/unstar/stars; change, version, and lane manage release intents and lanes. — [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L19-20](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L19-L20) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L41-83](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L41-L83) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L103-112](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L103-L112) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L246-255](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L246-L255)
- Configuration and environment surfaces include config/get/set, pkg, set-script, runtime, deprecated env, shim, with, setup, self-update, completion, clean/purge, ci, store, and cache. edit/profile/token/xmas are explicitly registered as unimplemented commands directing users to npm. — [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L129-131](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L129-L131) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L153-212](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L153-L212) [pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L242-269](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/cli_args/cli_command/commands.rs#L242-L269)
- When cargo.enabled or python.enabled is set, ecosystem_install::plan adds Cargo or Python tasks to an InstallPlan; Python selection follows workspace scope and production/development dependency groups. — [pnpm/crates/cli/src/ecosystem_install.rs#L20-23](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/ecosystem_install.rs#L20-L23) [pnpm/crates/cli/src/ecosystem_install.rs#L49-85](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/cli/src/ecosystem_install.rs#L49-L85)
- pnpr mounts npm metadata, version, tarball, search, dist-tag, publish, unpublish, and staged-publish routes, including named registry prefixes; configured Cargo and PyPI ecosystems add their own route sets. — [pnpr/crates/pnpr/src/server/routing.rs#L221-241](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpr/crates/pnpr/src/server/routing.rs#L221-L241) [pnpr/crates/pnpr/src/server/routing.rs#L291-335](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpr/crates/pnpr/src/server/routing.rs#L291-L335) [pnpr/crates/pnpr/src/server/routing.rs#L437-441](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpr/crates/pnpr/src/server/routing.rs#L437-L441)
- Optional pnpr surfaces provide resolve/verify-lockfile, artifact publication/resolution/blob retrieval, compiler-cache reads and writes, and pipeline-run storage plus a viewer. NAPI separately exposes install, rebuild, pack, dependency resolution, peer checks, configuration, and lockfile APIs to Node hosts. — [pnpr/crates/pnpr/src/server/routing.rs#L339-430](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpr/crates/pnpr/src/server/routing.rs#L339-L430) [pnpm/crates/napi/src/lib.rs#L26-41](https://github.com/pnpm/pnpm/blob/b2ef6cb63b8b7cb93d6b57f0d2efedf25d7c1385/pnpm/crates/napi/src/lib.rs#L26-L41)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)