Skip to main content

Install dependencies

Kiln resolves the npm and JSR protocols and supports workspaces. It reads an existing npm, yarn or pnpm lockfile, so a tree you already have keeps its versions.

The lockfile

The lockfile pins every tarball by hash. Two machines get the same tree, to the byte. The cache is content-addressed and verified on read. For CI and release pipelines, run:
--frozen refuses to guess. If anything in the tree would change, the command fails.

Speed and memory

Scenario times from the reference bench: Peak memory during install is 9 MB. npm peaks at 698 MB and pnpm at 1.4 GB while doing the same work.
Reproduce the numbers above with kiln bench install.