Summary & Key Takeaways ​

• New opt-in proof-of-concept allows reusing dependency build outputs across different machines.
• This is achieved by publishing and restoring signed, organization-scoped artifacts through pnpr.
• Configuration for remoteSideEffectsCache is introduced, with signing details from global config.
• Hosted pnpr registries now serve new artifacts from registry-scoped SHA-512 digest URLs.
• pnpm update --patches can now refresh registry revisions via a configured pnpr server.
• Explicit registry revision selection with <version>+rN and pnpm update --patches is supported.

Our Commentary ​

This pnpr alpha is genuinely exciting. Reusing build outputs across machines could be a massive performance win for large monorepos and CI pipelines. The idea of signed, organization-scoped artifacts feels like a robust approach to security and provenance. I'm curious to see how this evolves and if it becomes a standard practice in the ecosystem.