Summary
pnpm 12.3 adds trust-policy flags to pnpm remove and pnpm update, verifying the lockfile against active policies. It also makes context-aware global commands such as node, deno, bun and pnpm-added shims native executables on every platform and improves local and tarball installs.
Why it matters
Explicit policy verification gives teams a stronger dependency-supply-chain control during routine package operations. Native cross-platform shims should also make managed developer environments more predictable.
Related coverage
- NVIDIA agrees to acquire Hugging Face for $12.93 billion
- Meta releases Muse Spark 1.3 for coding and agentic workflows
- GitHub details cost reductions in AI coding without reported quality loss