pnpm 11 deep dive with lead maintainer Zoltan Kochan

pnpm lead maintainer Zoltan Kochan joins PodRocket to unpack pnpm 11's biggest shifts: a new minimum release age default that blocks npm registry packages under 24 hours old, a cleaner allow builds config replacing scattered post-install script settings, and the experimental global virtual store that slashes install times with Git worktrees. Zoltan also shares why a Rust rewrite of pnpm's engine is now underway, and how AI-assisted development made it possible far sooner than expected. Links Website: https://www.kochan.io/ Github: https://github.com/zkochan LinkedIn: https://www.linkedin.com/in/zkochan X: https://x.com/zoltankochan Mastodon: https://fosstodon.org/@zkochan Bluesky: https://bsky.app/profile/kochan.io Resources pnpm release blog post: https://pnpm.io/blog/releases/11.0 We want to hear from you! How did you find us? Did you see us on Twitter? In a newsletter? Or maybe we were recommended by a friend? Fill out our listener survey! https://t.co/oKVAEXipxu Let us know by sending an email to our producer, Elizabeth, at elizabeth.becz@logrocket.com, or tweet at us at PodRocketPod. Check out our newsletter! https://blog.logrocket.com/the-replay-newsletter/ Follow us. Get free stickers. Follow us on Apple Podcasts, fill out this form, and we’ll send you free PodRocket stickers! What does LogRocket do? LogRocket provides AI-first session replay and analytics that surfaces the UX and technical issues impacting user experiences. Start understanding where your users are struggling by trying it for free at LogRocket.com. Try LogRocket for free today. Chapters 00:00 Introduction 01:00 The 24-Hour Minimum Release Age Default 03:30 Community Pushback and the Polling Shift 05:00 Trusted Policy and OIDC Provenance Checking 07:00 Performance Trade-offs of Full Metadata Fetching 08:00 The New Allow Builds Configuration 10:30 Global Installs and the Virtual Store Explained 13:00 Which Packages Break with the New Layout 14:30 Global Virtual Store for Local Dev and Worktrees 16:30 TypeScript Go and the Golden Age of Development 17:30 AI Agents Influencing pnpm's Design Decisions 19:00 The Rust Rewrite — and Why Now 20:00 Dropping Node 18 and the Standalone Executable 22:00 Installing Node.js via pnpm and the New GitHub Action 24:00 Moving Config from npmrc to pnpm-workspace.yaml 26:00 Upgrade Smoothness and Common Migration Pain Points 28:30 pnpm v12 Roadmap — Frozen Installs in Rust 31:00 Contributing to pnpm and the Open Source PR Tsunami 33:00 Wrap-up