nodejs/corepack
Corepack
Corepack is a Node.js package manager orchestrator and deterministic tool installer. It manages and enforces specific versions of package managers to ensure consistent environments across different machines, developers, and continuous integration systems.
The project uses executable wrapper shims to intercept commands, allowing it to automatically download and run the correct tool version based on project configuration. It provides an offline binary provisioner that prepares package manager binaries into tarball archives for deployment in air-gapped environments.
The system handles semantic version resolution and integrity-verified binary fetching to ensure secure installations. It includes capabilities for version pinning, automatic tool enforcement, binary cache management, and registry configuration.
Features
- Command Interception Shims - Uses thin wrapper shims to intercept package manager commands and route them to the correct binary version.
- Package Manager Orchestrators - Acts as an orchestrator that manages and enforces specific versions of package managers like npm, yarn, and pnpm.
- Package Manager Shim Generators - Generates the executable wrapper scripts that intercept commands to ensure the correct tool version is executed.
- Verifiable Source Fetching - Validates the integrity of downloaded tool archives using cryptographic hashes before installation.
- Toolchain Versioning - Automatically switches between different package manager versions based on the active project's configuration.
- Tool Installation - Guarantees reproducible environments by installing specific binary versions and verifying them with security hashes.
- Version Pinning Systems - Enforces specific package manager versions through directory-scoped configuration files to ensure environment consistency.
- Version Pinning Tools - Locks tools to specific versions and security hashes in configuration files to ensure deterministic installations.
- Versioned Package Managers - Ensures all developers and CI systems use the exact same version of a package manager across a project.
- Package Manager Provisioners - Provides automatic installation and management of package manager binaries, removing the need for manual npm installation.
- Version Requirement Validators - Validates that the currently active tool version matches the requirements defined in the project configuration.
- Automatic Tool Provisioners - Automatically downloads and enforces the required tool version based on the project configuration during command execution.
- Binary Cache Managers - Includes a system to manage the local storage of downloaded binaries to accelerate tool retrieval.
- Offline Provisioners - Provides a mechanism for downloading package manager binaries into tarball archives for deployment in air-gapped environments.
- Semantic Versioning Systems - Uses semantic versioning logic to resolve and map compatible tool releases from registry data.
- Offline Deployment Tools - Bundles tool binaries into archives for deployment in air-gapped or restricted network environments.
- Tool Version Discovery - Discovers and sorts available tool versions from remote manifests using semantic versioning logic.
- Dependency Version Updates - Provides a utility to retrieve the latest compatible tool release and update the project's pinned version.
- Content-Addressable Caches - Implements a local storage system that deduplicates tool binaries using content hashes to optimize downloads.
