小幅更改​

🌐 Minor Changes

延迟依赖更新的新设置​

🌐 New setting for delayed dependency updates

最近发生了几起流行软件包被成功攻击的事件。为了降低安装受损版本的风险，我们正在引入一个新设置，该设置会延迟安装新发布的依赖。在大多数情况下，这类攻击会被迅速发现，恶意版本会在一个小时内从注册表中移除。

🌐 There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.

小幅更改​

🌐 Minor Changes

目录的新设置​

🌐 New setting for catalogs

添加了 cleanupUnusedCatalogs 配置。当设置为 true 时，pnpm 会在安装过程中移除未使用的目录条目 #9793。

🌐 Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.

添加了对 JavaScript 运行时安装的支持​

🌐 Added support for JavaScript runtime installation

在 devEngines.runtime（位于 package.json 内）中声明 Node.js、Deno 或 Bun，并让 pnpm 自动下载和固定它。

🌐 Declare Node.js, Deno, or Bun in devEngines.runtime (inside package.json) and let pnpm download and pin it automatically.

这一年即将结束。真是艰难的一年。正如你可能知道的，我住在乌克兰，所以由于俄罗斯对我们的战争，今年比往年更难推动这个项目。尽管如此，这对 pnpm 来说是很好的一年。我们获得了许多新用户和贡献者，并且实现了许多很棒的功能。

🌐 It is the end of the year. A really hard year. As you may know, I live in Ukraine, so due to Russia's war against us, it was harder to lead this project than in previous years. Nevertheless, it was a good year for pnpm. We've got a lot of new users, contributors, and we have implemented many great features.

（上述插图由 Midjourney 生成。老虎象征虎年）

又到了一年年末，这一年对 pnpm 来说是美好的一年，让我们来看看它的进展如何。

🌐 It is the end of the year and it was a good year for pnpm, so let's see how it went.

有很多方法可以创建一个 node_modules 目录。你的目标必须是创建最严格的那个，但如果那不可能，也有方法可以创建一个宽松的 node_modules。

🌐 There are many ways to create a node_modules directory. Your goal must be to create the most strict one but if that is not possible, there are options to make a loose node_modules as well.

pnpm 的新用户经常问我关于 pnpm 创建的 node_modules 奇怪结构的问题。为什么它不是平铺的？所有的子依赖都在哪里？

🌐 New users of pnpm frequently ask me about the weird structure of node_modules that pnpm creates. Why is it not flat? Where are all the sub-dependencies?