Bun slander, Jim Croce's GitHub, and sending my agents to work in a trap house.

Bytes by ui.dev

pnpm 11 is a major release that removes its dependency on the npm CLI by implementing native publish, login, and dist-tag commands. Key changes include a SQLite-based store index replacing millions of small JSON files for faster installs, supply-chain protection enabled by default (1-day minimum release age), isolated global installs per package, and a unified allowBuilds configuration. The release also ships as pure ESM. The newsletter also briefly covers Node.js 26 with Temporal API, a Vitest framework-agnostic proposal, and various other web dev links.

pnpm 11 cuts the npm umbilical cord

Big upgrade for pnpm. Dropping the npm CLI dependency + moving the store index to SQLite should make installs feel a lot cleaner and faster on large projects. The default supply-chain protection is probably the most important change here though.

Seems like it is time to switch to pnpm.

The SQLite store seems like a big step forward over the more primitive JSON files. Interesting!