pnpm

Okay, but let's talk about what happens when you actually press go on that mobile prompt.

Usually, setup scripts like PNPM install or cargo build take two or three minutes.

On older iOS versions, the second you put your phone back in your pocket, iOS background execution would suspend the app, kill the WebSocket connection, and your setup task would fail.

Right, but on iOS 26, they are leveraging live activities and a persistent background daemon.

We're talking about how Cursor and OpenAI have broken up.

Also, PNPM 12 has been released and it's been rewritten in Rust.

There's also a cool web GPU library for agents.

All of this and more today on Syntax Weekly.

How are you doing, TJ? I'm doing good.

Let's get right into it.

So our first story today is the PNPM 12 release.

And so this is a rewrite of PNPM in Rust, and it's stable.

part and it doesn't protect the release of packages containing malware or other scripts that's an entirely separate problem that still exists

i'd have to say okay two is fine but anybody that's worked in distributed systems know that two means split brain we need three to get to quorum but who knows that's what i'm not a javascript person pnpm was supposed to help with some of this stuff right wasn't that supposed to be magic

PNPM is a package manager, just approaches things in a different way, but it still uses the NPM registry.

So NPM is a CLI, it's a package manager, it's the default in the JavaScript community.

And for the CLI, like NPM install package X, you can do that with PNPM.

But PMPM still reads from the MPM registry and still have the same problem.

And the only alternatives, there's another package registry by the team at Deno called JSR.

But also, there's a certain amount of underinvestment that has happened in the NPM ecosystem in general in terms of guardrails and security and defaults in the client and stuff like that.

One of the reasons that PNPM is popular is PNPM has changed the defaults of how NPM works to be a little bit more secure.

And As somebody who has an opinion about that, I feel like the time has come to change some of the defaults in the default NPM client to make things a little bit harder.

That feels like a genuine thing that comes up all the time, though.

Yeah.

And you also need to install the PNPM package manager.

You are essentially establishing a sovereign development environment on your laptop.

It isn't a simple, consumer-friendly, one-click install process right now.

It caught my attention the first time because I saw online that actually is the fastest growing repo now.

It surpassed open call and basically it's the harness that is built from for deep seek right and there are two well maybe let me see if i there's a video here i haven't seen this video actually myself yet but i'll just play while you're going basically it's like it has a ui so it's like you run it locally so it's kind of like you run it like PNPM or something like that.

So you run it on your local host.

And then basically there are different modes, right? So you kind of have a ChatGPT-like interface.

Fifty-nine.

The real fix for React Native plus pnpm: hoist everything.

Learn why React Native projects break under pnpm's default linking and why switching to node linker equals hoisted is the simplest, most reliable fix in monorepos.

Sixty.

How I'm engineering a versioned database storage engine for byte-addressable NVM.