Skip to documentation

package

@stackline/yarn 1.0.4 โ€” installation and API

๐Ÿ“ฆ๐Ÿˆ Fast, reliable, and secure dependency management.

Install @stackline/yarn

npm install @stackline/[email protected]

Package version: 1.0.4. Metadata verified: 2026-11-12. This is separate from the framework version and demonstration runtime.

Node.js requirement
{"node": ">=20.19.0"}
Accepted peer dependencies (declared ranges)
{}

Tested environments are described in the versioned README and linked source checks. A declared peer range is not evidence that every version in it was tested.

Versioned reference

This reference comes from the published @stackline/[email protected] README. Its upstream attribution and license remain with the source. Benchmark and security statements describe the cited tests and advisories, not a guarantee for every application.

@stackline/yarn

Yarn Classic-compatible package management with maintained Node.js tooling and declared runtime dependencies.

Documentation | npm | Issues | Repository

Current package version: 1.0.4


Why this package?

@stackline/yarn is the Stackline-maintained distribution of [email protected]. It is an independent continuation of yarn; original authors and licenses remain credited below.

Compatibility

Item Value
Package @stackline/[email protected]
API target [email protected]
Supported Node.js >=20.19.0
License BSD-2-Clause
CLI yarn, yarnpkg
Runtime dependencies @zkochan/cmd-shim, bytes, camelcase, chalk, cli-table3, commander, death, debug, deep-equal, detect-indent, dnscache, glob, gunzip-maybe, hash-for-dep, ini, inquirer, invariant, is-builtin-module, is-ci, is-webpack-bundle, js-yaml, leven, loud-rejection, micromatch, mkdirp, node-emoji, normalize-url, npm-logical-tree, object-path, proper-lockfile, puka, punycode, read, request, request-capture-har, rimraf, semver, ssri, strip-ansi, strip-bom, tar-fs, tar-stream, uuid, v8-compile-cache, validate-npm-package-license, yn, minimatch

Installation

npm install @stackline/yarn

Preserve existing imports and plugin resolution with an npm alias:

npm install yarn@npm:@stackline/yarn

Usage and API reference

A maintained fork of Yarn Classic 1.22.22, rebuilt from its source history. Requires Node.js >=20.19.0. Published package version: 1.0.2.

npm install --global @stackline/[email protected]
yarn --version
yarnpkg install --frozen-lockfile

For a project-local toolchain:

npm install --save-dev yarn@npm:@stackline/[email protected]
npx yarn install

The yarn and yarnpkg commands retain Classic's v1 lockfile, dependency protocols, cache/offline behavior and script/bin invocation. Existing Classic documentation describes those commands. This fork is independent of the Yarn project.

Packaging and compatibility

This release raises the Node.js minimum from upstream's Node 4 baseline to 20.19. It rebuilds the CLI and lockfile parser with current tools and security updates. Third-party runtime dependencies are external and declared in package.json, so normal npm installation is required. lib/cli.js copied alone is no longer a standalone distribution. OS installers and Corepack integration are outside this release's packaging contract.

lib/build-inventory.json lists the bundled project modules and external runtime dependency specifications. The build rejects undeclared imports and embedded third-party modules. package-lock.json records the exact CI graph. The published tarball is the tested CI artifact, with npm provenance and a matching immutable GitHub release.

Development

npm ci --ignore-scripts
npm run build
npm test
npm run test:cli
npm run test:security
npm run test:package
npm audit --audit-level=low

See UPSTREAM.md for issue triage, compatibility decisions and known qualifications, CHANGELOG.md for changes, and SECURITY.md for private vulnerability reporting.

Maintenance and compatibility notes

Node.js >=20.19.0 is required. Runtime dependencies are declared and installed normally; copying lib/cli.js alone does not create a standalone Yarn distribution. The original 15 skipped upstream tests and retained transitive deprecations are documented in UPSTREAM.md.

Credits and original authors

Original copyright, license notices and contributor acknowledgements remain part of this distribution. Stackline maintenance does not replace authorship of the original work.

License

BSD-2-Clause. See the license and notice files in the repository.

Use this repository's issue tracker for reproducible bugs and feature requests. Join r/Stackline for examples, usage questions and release discussions.