name: corepack
binary: corepack
aliases: []
category: javascript-package-manager
summary: Node.js package manager shim for pnpm and Yarn.
homepage: https://github.com/nodejs/corepack
docs: https://nodejs.org/api/corepack.html
detect:
version_args: ["--version"]
local:
files: ["package.json"]
dirs: []
package_json:
package_manager_prefixes: []
use_when:
- Activate the package manager declared by package.json
avoid_when:
- The project does not declare packageManager
risk:
level: medium
effects:
- install_packages
- network_access
- write_files
requires_auth: false
destructive: false
confirmation_required_for:
- changing package manager versions
guardrails:
- Use the package manager declared by package.json when present.