@pnpm/lockfile.fs 1.0.5

Read/write pnpm-lock.yaml files

@pnpm/lockfile.fs@1.0.5 was published on 2024-10-28. Its manifest declares 19 runtime dependencies and 1 peer requirement. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=18.12.

All @pnpm/lockfile.fs versions · Permanent reference to 1.0.5 · Latest release

Package specifications

Version	1.0.5
License declaration	MIT
Published	2024-10-28T02:48:13.522Z
Node.js requirement	>=18.12
Type declarations	Bundled declarations
Runtime dependency count	19
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	75.54 KiB
Published file count	42
Package type	Not declared
ES module entry	Not declared
Default entry	lib/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	81
Repository stars	36888
Repository forks	1957

Install @pnpm/lockfile.fs 1.0.5

npm install @pnpm/lockfile.fs@1.0.5
pnpm add @pnpm/lockfile.fs@1.0.5
yarn add @pnpm/lockfile.fs@1.0.5

Runtime dependencies

Peer requirements

@pnpm/logger ^5.1.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@pnpm/constants@9.0.0 — direct
@pnpm/dependency-path@5.1.7 — direct
@pnpm/error@6.0.2 — direct
@pnpm/git-resolver@9.0.8 — direct
@pnpm/git-utils@2.0.0 — direct
@pnpm/lockfile.merger@1.0.3 — direct
@pnpm/lockfile.types@1.0.3 — direct
@pnpm/lockfile.utils@1.0.4 — direct
@pnpm/ramda@0.28.1 — direct
@pnpm/types@12.2.0 — direct
@pnpm/util.lex-comparator@3.0.0 — direct
@zkochan/js-yaml@0.0.7 — direct
@zkochan/rimraf@3.0.2 — direct
comver-to-semver@1.0.0 — direct
normalize-path@3.0.0 — direct
semver@7.8.5 — direct
sort-keys@4.2.0 — direct
strip-bom@4.0.0 — direct
write-file-atomic@5.0.1 — direct
@pnpm/crypto.base32-hash@3.0.1 — indirect
@pnpm/fetch@8.0.7 — indirect
@pnpm/hosted-git-info@1.0.0 — indirect
@pnpm/resolver-base@13.0.4 — indirect
graceful-git@4.0.0 — indirect
safe-execa@0.1.2 — indirect
@pnpm/patching.types@1.0.0 — indirect
@pnpm/pick-fetcher@3.0.0 — indirect
get-npm-tarball-url@2.1.0 — indirect
argparse@2.0.1 — indirect
is-plain-obj@2.1.0 — indirect
imurmurhash@0.1.4 — indirect
signal-exit@4.1.0 — indirect
@pnpm/crypto.polyfill@1.0.0 — indirect
rfc4648@1.5.4 — indirect
@pnpm/core-loggers@10.0.7 — indirect
@pnpm/fetching-types@6.0.0 — indirect
@pnpm/network.agent@2.0.3 — indirect
@pnpm/node-fetch@1.0.0 — indirect
@zkochan/retry@0.2.0 — indirect
lru-cache@6.0.0 — indirect
retry@0.13.1 — indirect
safe-execa@0.1.4 — indirect
@zkochan/which@2.0.3 — indirect
execa@5.1.1 — indirect
path-name@1.0.0 — indirect
@pnpm/network.config@2.1.0 — indirect
@pnpm/network.proxy-agent@2.0.3 — indirect
agentkeepalive@4.6.0 — indirect
lru-cache@7.18.3 — indirect
data-uri-to-buffer@3.0.1 — indirect
fetch-blob@2.1.2 — indirect
yallist@4.0.0 — indirect
execa@5.1.1 — indirect
isexe@2.0.0 — indirect
cross-spawn@7.0.6 — indirect
get-stream@6.0.1 — indirect
human-signals@2.1.0 — indirect
is-stream@2.0.1 — indirect
merge-stream@2.0.0 — indirect
npm-run-path@4.0.1 — indirect
onetime@5.1.2 — indirect
signal-exit@3.0.7 — indirect
strip-final-newline@2.0.0 — indirect
@pnpm/config.nerf-dart@1.0.1 — indirect
@pnpm/error@1000.1.0 — indirect
http-proxy-agent@7.0.2 — indirect
https-proxy-agent@7.0.6 — indirect
socks-proxy-agent@8.0.5 — indirect
humanize-ms@1.2.1 — indirect
path-key@3.1.1 — indirect
shebang-command@2.0.0 — indirect
which@2.0.2 — indirect
mimic-fn@2.1.0 — indirect
@pnpm/constants@1001.3.1 — indirect
agent-base@7.1.4 — indirect
debug@4.4.3 — indirect
socks@2.8.10 — indirect
ms@2.1.3 — indirect
shebang-regex@3.0.0 — indirect
ip-address@10.7.5 — indirect
smart-buffer@4.2.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	9/10 — Found 27/30 approved changesets -- score normalized to 9
Maintained	10/10 — 30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	10/10 — security policy file detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
License	10/10 — license file detected
Binary-Artifacts	10/10 — no binaries found in the repo
Branch-Protection	5/10 — branch protection is not maximal on development and all release branches
Pinned-Dependencies	9/10 — dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	0/10 — Project has not signed or included provenance with any releases.
Packaging	10/10 — packaging workflow detected
Fuzzing	0/10 — project is not fuzzed
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/%40pnpm%2Flockfile.fs/1.0.5 — retrieved 2026-10-29T17:00:42.631Z
https://api.deps.dev/v3/projects/github.com%2Fpnpm%2Fpnpm — retrieved 2026-10-29T12:01:18.702Z
https://api.deps.dev/v3/systems/npm/packages/%40pnpm%2Flockfile.fs/versions/1.0.5 — retrieved 2026-10-29T17:00:43.207Z
https://api.deps.dev/v3/systems/npm/packages/%40pnpm%2Flockfile.fs/versions/1.0.5:dependencies — retrieved 2026-10-29T17:00:43.242Z