Skip to content
SPECIFICTION
Get listed

snpm

snpm.io

WindowsmacOSLinux
Visit snpm.io
Spec score 7.2 #16 of 19 in JavaScript Package Managers

What it is

snpm is a free, open-source package manager for Node.js projects and JavaScript workspaces. It runs on Linux, macOS, and Windows, with native binaries for x64 and arm64. Its CLI provides npm-style install, add, run, exec, and dlx commands, plus auditing, dependency inspection, license listing, patching, packing, publishing, and store maintenance. Workspaces can be filtered by name, glob, path, dependency walk, or Git reference. snpm imports pnpm, Bun, Yarn, or npm lockfiles when snpm-lock.yaml is missing, then uses its own lockfile as the source of truth. Packages are downloaded once into a shared store and linked through a node_modules/.snpm virtual store. Lifecycle scripts are blocked unless allowed, package age can be restricted, and tarball authentication is registry-scoped. Publishing includes workspace fan-out, tags, OTP, and dry-run modes. An included Node manager handles version installation and discovery. The npm install script requires Node.js 18 or newer.

Spec sheet

Product
snpm is a Rust-native package manager for JavaScript and Node.js projects.Read 2 Oct 2026 · snpm.io
Security
Dependency install scripts are blocked unless allow-listed, and tarball authentication is scoped to the announcing registry.Read 2 Oct 2026 · snpm.io
License
The site states that snpm is open source and licensed under MIT or Apache-2.0.Read 2 Oct 2026 · snpm.io
Architecture
Pre-built native binaries support macOS, Linux and Windows on x64 and arm64.Read 1 Oct 2026 · snpm.io
Audit
The audit command can find vulnerable dependencies, attempt fixes and emit SARIF output.Read 1 Oct 2026 · snpm.io
CLI features
The CLI includes audit with SARIF output, dependency inspection, license listing, patching, packing, publishing, and store maintenance commands.Read 2 Oct 2026 · snpm.io
Compatibility status
The project says exact pnpm behavior across every CLI edge case and compatibility with unusual package layouts are still evolving.Read 2 Oct 2026 · github.com
Install methods
The documentation describes installation from npm, GitHub Release binaries, or source.Read 2 Oct 2026 · snpm.io
Install performance
The site reports a 14.3-second cold-cache install and a 1.2-second warm-cache install in its React app benchmark, tested on a MacBook Pro M1 with Node 20.x.Read 2 Oct 2026 · snpm.io
Installation requirement
The npm install script requires Node.js 18 or newer.Read 1 Oct 2026 · snpm.io
Lockfiles
It reads pnpm, Bun, Yarn, and npm lockfiles on the first install, then uses snpm-lock.yaml as its source of truth.Read 2 Oct 2026 · snpm.io
Node manager
snpm includes a Node version manager with install, use, .node-version, .nvmrc and engines.node discovery.Read 1 Oct 2026 · snpm.io
Node version management
snpm includes an nvm-style Node version manager.Read 2 Oct 2026 · snpm.io
Package age control
The SNPM_MIN_PACKAGE_AGE_DAYS setting can be used to avoid newly published packages.Read 2 Oct 2026 · snpm.io
Package store
Packages are downloaded once into a shared store and linked into projects through a node_modules/.snpm virtual store.Read 1 Oct 2026 · snpm.io
Performance claim
The homepage reports a 1.2-second warm-cache install and says snpm is 50% faster than pnpm in its benchmark.Read 1 Oct 2026 · snpm.io
Protocols
Supported protocols include npm, jsr, file:, git:, workspace: and catalog:.Read 1 Oct 2026 · snpm.io
Publishing
snpm supports pack and publish workflows with workspace fan-out, distribution tags, OTP and dry-run modes.Read 1 Oct 2026 · snpm.io
Security defaults
Dependency lifecycle scripts are blocked unless explicitly allowed, minimum package age can exclude recent publishes, and tarball authentication is scoped to the announcing registry.Read 1 Oct 2026 · snpm.io
Source availability
The project is open source and links to its GitHub repository from the documentation and homepage.Read 1 Oct 2026 · snpm.io
Supported platforms
The npm installer supports macOS, Linux, and Windows on x64 and arm64; Node.js 18 or later is required for its install script.Read 2 Oct 2026 · snpm.io
Workflow
It provides npm-style commands including install, add, run, exec and dlx.Read 1 Oct 2026 · snpm.io
Workspaces
It discovers workspaces from snpm-workspace.yaml, pnpm-workspace.yaml, or package.json workspaces and supports filters.Read 2 Oct 2026 · snpm.io

Strong points and limits

Strong points

  • Open source under MIT or Apache-2.0
  • Supports Linux, macOS, and Windows
  • Workspace filters include glob and Git references
  • Lifecycle scripts blocked by default
  • Includes auditing with SARIF output

Limits

  • Node.js 18 or newer required for npm installer
  • Exact pnpm edge-case compatibility is still evolving
  • Unusual package layouts may not be compatible

Who it suits

It suits Node.js and JavaScript workspace developers who want an open-source manager with workspace, lockfile, publishing, security, and Node version tools. It is also relevant to teams needing Linux, macOS, or Windows support.

Verdict

snpm combines package management, workspace handling, publishing, auditing, and Node version management in one free tool. Its evolving pnpm compatibility and installation requirement are important considerations.

Where Specifiction places it

Alternatives to snpmAll alternatives →