Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

snpm

Free#5 of 19 in JavaScript Package Managers

snpm: A security-focused, open-source package manager for Node.js projects and CI workflows. Ranked #5 of 19 in JavaScript Package Managers by our editors (8.4/10); pricing: Open source; best for security-focused package management and CI.

8.4/10Editor score
snpm8.4 Visit snpm

At a glance

  • Editor score
    8.4 / 10
  • Pricing
    Open source
  • Best for
    Security-focused package management and CI
  • Paid from
    Free
  • Workspace support
    Yes
  • Facts checked
    20 Sep 2026
snpm screenshot
  • Where it wins

    • Deterministic installs with snpm-lock.yaml and frozen-lockfile support
    • Auditing supports table, JSON, and SARIF output
    • Workspaces, shared caching, offline execution, and package publishing
  • Where it doesn't

    • Uses a snpm-specific lockfile for deterministic installs
    • Its feature set may exceed the needs of single-package projects
    • No paid tiers are part of its open-source pricing model

Our verdict on snpm

snpm is an open-source, Rust-native package manager for Node.js projects and JavaScript workspaces. It is aimed at individual developers and teams managing multi-package repositories, with npm-style commands for installing and updating dependencies. The package runs locally on Windows, macOS, and Linux, and covers both day-to-day dependency work and repository-level workflows.

For teams focused on repeatable CI installs, snpm provides deterministic dependency resolution through snpm-lock.yaml and frozen-lockfile support. Its workspace tooling includes discovery, recursive commands, filters, catalogs, and overrides. A shared package store can use hardlink, symlink, or copy link backends, while offline and prefer-offline execution can draw packages from the cache. These capabilities give multi-package repositories several ways to control dependency access and local storage.

Security-related workflows are another clear focus. Dependency auditing produces table, JSON, or SARIF output, and persistent dependency patching can address package changes within the project workflow. snpm also includes package publishing with registry authentication, tags, OTP, and dry-run support, plus local package linking, global installation, and built-in Node.js version management. Choose snpm when workspace management, reproducible installs, cached or offline execution, and auditing belong in the same tool. A simpler package manager may be a better fit for projects that only need basic dependency installation and updates.

Your product? Our editors can test snpm in depth and publish a review, labelled as paid · from $149/mo →

snpm pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on snpm.io

snpm fact sheet

Free planNot verified
Paid fromFree
Workspace supportYes
Lockfile supportYes
Peer dependency handlingYes
Package publishingYes
Offline package cacheYes
Global installationYes
DeploymentDesktop
PlatformsWindows, macOS, Linux
SupportDocs
Built forSolo, Small business, Mid-market (editorial estimate)
PricingOpen source
Websitesnpm.io
Facts checked20 Sep 2026

Alternatives to snpm

See all snpm alternatives →

snpm vs the competition

Compare snpm with any tool side by side →

Used snpm? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used snpm for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — snpm 8.4/10

snpm is listed in our JavaScript Package Managers directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/snpm/"><img src="https://www.itechguides.com/best/badge/snpm.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update