现代包管理工具指南

# 查看版本
npm --version

# 初始化项目
npm init
npm init -y  # 使用默认配置

# 安装依赖
npm install package-name
npm install package-name@version
npm install package-name --save-dev

# 全局安装
npm install -g package-name

# 卸载依赖
npm uninstall package-name
npm uninstall -g package-name

# 查看配置
npm config list
npm config get registry

# 设置配置
npm config set registry https://registry.npmmirror.com
npm config set save-exact true

# 清除缓存
npm cache clean --force

# 查看已安装包
npm list
npm list -g --depth=0

{
  "name": "my-project",
  "version": "1.0.0",
  "description": "项目描述",
  "main": "index.js",
  "scripts": {
    "start": "node index.js",
    "dev": "nodemon index.js",
    "build": "webpack --mode production",
    "test": "jest"
  },
  "dependencies": {
    "express": "^4.18.0",
    "lodash": "~4.17.21"
  },
  "devDependencies": {
    "nodemon": "^2.0.20",
    "jest": "^29.0.0"
  },
  "engines": {
    "node": ">=14.0.0",
    "npm": ">=6.0.0"
  }
}

# 安装 Yarn
npm install -g yarn

# 查看版本
yarn --version

# 初始化项目
yarn init
yarn init -y

# 安装依赖
yarn add package-name
yarn add package-name@version
yarn add package-name --dev

# 全局安装
yarn global add package-name

# 卸载依赖
yarn remove package-name
yarn global remove package-name

# 安装所有依赖
yarn install
yarn  # 简写

# 升级依赖
yarn upgrade
yarn upgrade package-name

# 查看依赖信息
yarn list
yarn info package-name

# 清除缓存
yarn cache clean

# 检查依赖
yarn check
yarn audit

# yarn.lock 示例
package-name@^1.0.0:
  version "1.2.3"
  resolved "https://registry.yarnpkg.com/package-name/-/package-name-1.2.3.tgz#abc123"
  integrity sha512-...
  dependencies:
    dependency-name "^2.0.0"

# 安装 pnpm
npm install -g pnpm

# 查看版本
pnpm --version

# 初始化项目
pnpm init

# 安装依赖
pnpm add package-name
pnpm add package-name@version
pnpm add package-name -D

# 全局安装
pnpm add -g package-name

# 卸载依赖
pnpm remove package-name
pnpm remove -g package-name

node_modules/
├── .pnpm/
│   ├── package-a@1.0.0/
│   └── package-b@2.0.0/
├── package-a -> .pnpm/package-a@1.0.0/node_modules/package-a
└── package-b -> .pnpm/package-b@2.0.0/node_modules/package-b

# 安装所有依赖
pnpm install
pnpm i

# 更新依赖
pnpm update
pnpm up package-name

# 查看依赖
pnpm list
pnpm ls

# 清理
pnpm prune
pnpm store prune

# pnpm-workspace.yaml
packages:
  - 'packages/*'
  - 'apps/*'
  - '!**/test/**'

# 工作区命令
pnpm -r install  # 递归安装
pnpm -r build    # 递归构建
pnpm --filter package-name build  # 过滤构建

{
  "dependencies": {
    "exact-version": "1.2.3",      // 精确版本
    "patch-updates": "~1.2.3",     // 允许补丁更新
    "minor-updates": "^1.2.3",     // 允许次版本更新
    "latest": "*"                   // 最新版本（不推荐）
  }
}

# 安全审计
npm audit
yarn audit
pnpm audit

# 修复安全问题
npm audit fix
yarn audit fix

# 检查过期包
npm outdated
yarn outdated
pnpm outdated

# 使用国内镜像
npm config set registry https://registry.npmmirror.com
yarn config set registry https://registry.npmmirror.com
pnpm config set registry https://registry.npmmirror.com

# 启用缓存
npm config set cache ~/.npm-cache
yarn config set cache-folder ~/.yarn-cache

# 并行安装
npm install --prefer-offline
yarn install --offline
pnpm install --offline

# 清除 node_modules 和锁文件
rm -rf node_modules package-lock.json
npm install

# 或者
rm -rf node_modules yarn.lock
yarn install

# 修改 npm 全局目录
mkdir ~/.npm-global
npm config set prefix '~/.npm-global'
export PATH=~/.npm-global/bin:$PATH

# 设置代理
npm config set proxy http://proxy.company.com:8080
npm config set https-proxy http://proxy.company.com:8080

# 取消代理
npm config delete proxy
npm config delete https-proxy

# 详细日志
npm install --verbose
yarn install --verbose
pnpm install --reporter=append-only

# 检查配置
npm config list -l
yarn config list
pnpm config list