snpm
snpm: A security-focused, open-source package manager for Node.js projects and CI workflows. Ranked #5 of 19 in JavaScript Package Managers by our editors (8.4/10); pricing: Open source; best for security-focused package management and CI.
At a glance
- Editor score8.4 / 10
- PricingOpen source
- Best forSecurity-focused package management and CI
- Paid fromFree
- Workspace supportYes
- Facts checked20 Sep 2026

Where it wins
- Deterministic installs with snpm-lock.yaml and frozen-lockfile support
- Auditing supports table, JSON, and SARIF output
- Workspaces, shared caching, offline execution, and package publishing
Where it doesn't
- Uses a snpm-specific lockfile for deterministic installs
- Its feature set may exceed the needs of single-package projects
- No paid tiers are part of its open-source pricing model
Our verdict on snpm
snpm is an open-source, Rust-native package manager for Node.js projects and JavaScript workspaces. It is aimed at individual developers and teams managing multi-package repositories, with npm-style commands for installing and updating dependencies. The package runs locally on Windows, macOS, and Linux, and covers both day-to-day dependency work and repository-level workflows.
For teams focused on repeatable CI installs, snpm provides deterministic dependency resolution through snpm-lock.yaml and frozen-lockfile support. Its workspace tooling includes discovery, recursive commands, filters, catalogs, and overrides. A shared package store can use hardlink, symlink, or copy link backends, while offline and prefer-offline execution can draw packages from the cache. These capabilities give multi-package repositories several ways to control dependency access and local storage.
Security-related workflows are another clear focus. Dependency auditing produces table, JSON, or SARIF output, and persistent dependency patching can address package changes within the project workflow. snpm also includes package publishing with registry authentication, tags, OTP, and dry-run support, plus local package linking, global installation, and built-in Node.js version management. Choose snpm when workspace management, reproducible installs, cached or offline execution, and auditing belong in the same tool. A simpler package manager may be a better fit for projects that only need basic dependency installation and updates.
Your product? Our editors can test snpm in depth and publish a review, labelled as paid · from $149/mo →
snpm pricing
snpm fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Workspace support | Yes |
| Lockfile support | Yes |
| Peer dependency handling | Yes |
| Package publishing | Yes |
| Offline package cache | Yes |
| Global installation | Yes |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Support | Docs |
| Built for | Solo, Small business, Mid-market (editorial estimate) |
| Pricing | Open source |
| Website | snpm.io |
| Facts checked | 20 Sep 2026 |
Alternatives to snpm
- npmA broad JavaScript package workflow with public access free and private packages paid.9.4
- pnpmA free, open-source choice for monorepos, reproducible installs, and efficient storage.9.2
- YarnA flexible, free package manager for projects from single apps to monorepos.9.0
snpm vs the competition
Compare snpm with any tool side by side →
Used snpm? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used snpm for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
snpm is listed in our JavaScript Package Managers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/snpm/"><img src="https://www.itechguides.com/best/badge/snpm.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update




