Transition from npm to pnpm

Author: jdalton

.env.local

@@ -1 +1 @@
-NODE_COMPILE_CACHE="$(pwd)/.cache"
+NODE_COMPILE_CACHE="./.cache"

.env.test

@@ -1,2 +1,2 @@
-NODE_COMPILE_CACHE="$(pwd)/.cache"
+NODE_COMPILE_CACHE="./.cache"
 VITEST=1

.github/actions/setup/action.yml

@@ -0,0 +1,26 @@
+name: 'Setup'
+description: 'Setup Node.js and pnpm with caching'
+
+inputs:
+  node-version:
+    description: 'Node.js version'
+    required: false
+    default: '22'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Setup pnpm
+      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+      with:
+        version: '^10.16.0'
+
+    - name: Setup Node.js with pnpm cache
+      uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: 'pnpm'
+
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install

.github/workflows/lint.yml

@@ -0,0 +1,31 @@
+name: Linting
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  linting:
+    name: 'Linting'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-sdk-js/.github/actions/setup@e8ae193eb686db288e09cbacce75a828681ccae9
+        with:
+          node-version: '22'
+
+      - name: Run linting
+        run: pnpm run check-ci

.github/workflows/provenance.yml

@@ -11,7 +11,6 @@ on:
         options:
           - '0'
           - '1'
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -22,15 +21,18 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+        with:
+          version: 10
+          run_install: false
       - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
-          cache: npm
+          cache: pnpm
           scope: '@socketregistry'
-      - run: npm install -g npm@latest
-      - run: npm ci
-      - run: npm publish --provenance --access public
+      - run: pnpm install
+      - run: pnpm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          SOCKET_CLI_DEBUG: ${{ inputs.debug }}
+          SOCKET_CLI_DEBUG: ${{ inputs.debug }}

.github/workflows/test.yml

@@ -20,10 +20,17 @@ concurrency:
 
 jobs:
   test:
-    name: 'Tests'
-    uses: SocketDev/workflows/.github/workflows/reusable-base.yml@master
-    with:
-      no-lockfile: true
-      npm-test-script: 'test-ci'
-      node-versions: '18,20,22,24'
-      os: 'ubuntu-latest,windows-latest'
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    strategy:
+      matrix:
+        node-version: [20, 22, 24]
+        os: [ubuntu-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-sdk-js/.github/actions/setup@e8ae193eb686db288e09cbacce75a828681ccae9
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Run tests
+        run: pnpm run test-ci

.github/workflows/types.yml

@@ -15,8 +15,12 @@ permissions:
 
 jobs:
   type-check:
-    uses: SocketDev/workflows/.github/workflows/type-check.yml@master
-    with:
-      no-lockfile: true
-      ts-versions: '5.9'
-      ts-libs: 'esnext'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: SocketDev/socket-sdk-js/.github/actions/setup@e8ae193eb686db288e09cbacce75a828681ccae9
+        with:
+          node-version: '22'
+
+      - name: Run type check
+        run: pnpm run check:tsc

.gitignore

@@ -1,13 +1,13 @@
 .DS_Store
 ._.DS_Store
 Thumbs.db
-/.cache
 /.env
 /.nvm
 /.type-coverage
 /.vscode
 /coverage
 /npm-debug.log
+**/.cache
 **/dist
 **/node_modules
 /*.tsbuildinfo

.pnpmrc

@@ -0,0 +1,14 @@
+# Delayed dependency updates - wait 7 days (10080 minutes) before allowing new packages.
+minimumReleaseAge=10080
+
+# Auto-install peers.
+auto-install-peers=true
+
+# Strict peer dependencies.
+strict-peer-dependencies=false
+
+# Use node-linker to ensure better compatibility.
+node-linker=hoisted
+
+# Save exact versions (like npm --save-exact).
+save-exact=true

README.md

@@ -11,7 +11,7 @@ SDK for the Socket API client, generated by `api`.
 ## Usage
 
 ```bash
-npm install @socketsecurity/sdk
+pnpm add @socketsecurity/sdk
 ```
 
 ### ESM / TypeScript