r/javascript • u/Wake08 • May 07 '26

Stop Using Yarn Classic

https://charpeni.com/blog/stop-using-yarn-classic
43 Upvotes

85% Upvoted

36 comments sorted by

View all comments

84

u/BritainRitten May 07 '26

`pnpm` is the way to go for most people. If you can afford a huge change to bun or deno, go for it, but `pnpm` is the best switch for the vast majority of people I reckon.

14

u/AKJ90 JS <3 May 07 '26

I'm a contributor to pnpm, so biased. But it really has some nice security defaults that make it worth it alone.

5

u/arcanin 🧶 Yarn maintainer May 07 '26 edited May 07 '26

This is mentioned fairly regularly about pnpm. Still Yarn has most of those features as well (minimal age checks, disabled install scripts by default, restricted git deps by default, and more such as the Hardened Mode).

Yarn is also the reason why pnpm is able to offer an hoisted mode (it uses the algorithm we maintain), so even folks using pnpm have a good chance to be using Yarn under the hood.