Yarn
No written verdict yet. Here is what commenters said.
Why people recommend it
“yarn still has a feature that I frequently miss: the project-local cache”
“Our company uses yarn 4 which has an option to prevent you from installing an npm package”
Show 3 more
“it made for very concise way to represent the logic”
“There are alternative package managers like Yarn that use zip files as a way to store each Node package.”
“it's best to use 'npm ci' or 'yarn install --immutable'”
Caveats and dissent
“It was a giant mistake to keep 'classic' (umnaintained, unpatched) yarn around.”
“Deterministic to a fault unless you mix Windows and Linux.”
Show 2 more
“futzing around with with NPM/Yarn”
“Strong recommendation to use PNPM instead of yarn or npm.”
Often compared with
Who recommends it in their own words
Threads where it came up
- Upcoming breaking changes for NPM v12 5 mentions
- NPM packages from RedHat have been compromised 3 mentions
- Why Node.js needs a virtual file system 3 mentions
- Show HN: Safe-NPM – only install packages that are +90 days old 2 mentions
- Build Adafruit projects right from Firefox 1 mention
- Prolog Coding Horror 1 mention
Also written as yarn. Data: yarn.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 21
“yarn still has a feature that I frequently miss: the project-local cache”
“It was a giant mistake to keep 'classic' (umnaintained, unpatched) yarn around.”
“Deterministic to a fault unless you mix Windows and Linux.”
I don't doubt that 3.x probably has worst perfs (it's almost two years old now), but just to clarify we closely track performances and Yarn and pnpm and pretty much on similar level: https://p.datadoghq.eu/sb/d2wdprp9uki7gfks-c562c42f4dfd0ade4885690fa719c818
“One distinguishing feature is their optional install strategy”
In case others are unaware, you just have to set https://yarnpkg.com/configuration/yarnrc#npmMinimalAgeGate to the value you want. It defaults to 1 day.
“on by default in yarn 4 too now”
“Our company uses yarn 4 which has an option to prevent you from installing an npm package”
“futzing around with with NPM/Yarn”
“it made for very concise way to represent the logic”
“I ditched npm for yarn years ago”
“I use yarn or pnpm for monorepos.”
“Strong recommendation to use PNPM instead of yarn or npm.”
“yarn pnp is currently broken on Node v25.7+”
“There are alternative package managers like Yarn that use zip files as a way to store each Node package.”
“yarn install # build it or”
“- yarn”
“enableScripts: false in .yarnrc.yml”
“Yarn has a configurable npmMinimalAgeGate setting as well since version 4.10”
“it's best to use 'npm ci' or 'yarn install --immutable'”
“Run npm and yarn inside docker”