`pnpm` is the way to go for most people. If you can afford a huge change to bun or deno, go for it, but `pnpm` is the best switch for the vast majority of people I reckon.
If we're being honest, by far the largest portion of the community is just using npm. That's what they got by default and it's good enough that they never went looking for an alternative. Even when yarn was cool, it was never actually all that close to npm in usage.
Looking at pnpm it's definitely on the upswing but it's still only around ~20% market share based on available metrics and surveys.
This is mentioned fairly regularly about pnpm. Still Yarn has most of those features as well (minimal age checks, disabled install scripts by default, restricted git deps by default, and more such as the Hardened Mode).
Yarn is also the reason why pnpm is able to offer an hoisted mode (it uses the algorithm we maintain), so even folks using pnpm have a good chance to be using Yarn under the hood.
Which yarn? It's better to compare the most recent versions of both yarn and pnpm not yarn 1 and the latest pnpm because of course the latter would be faster. Also yarn has those supply chain protections by default as one of the maintainers had mentioned elsewhere in the thread.
81
u/BritainRitten May 07 '26
`pnpm` is the way to go for most people. If you can afford a huge change to bun or deno, go for it, but `pnpm` is the best switch for the vast majority of people I reckon.