Bun’s runtime is built around a full transpiler, not a type-stripper. When you run a .ts, .tsx, or .jsx file with bun run, the engine reads the source, applies the JSX transform specified in tsconfig.json (or bunfig.toml), strips the TypeScript type annotations, and executes the resulting JavaScript directly . There is no separate tsc step,…
Bun’s execution layer is split into two distinct commands that serve different purposes. bun run executes scripts defined in package.json or runs source files directly. bunx executes binaries from npm packages, installing them temporarily if they are not already present. The distinction matters: bun run operates within the project’s context, while bunx operates at the…
1. Toolchain & Installation 2. Project Initialization 3. Dependency Management 4. Installation & Lockfile 5. Running Scripts & Binaries 6. Workspaces (Monorepos) 7. Configuration (.npmrc vs pnpm-workspace.yaml) 8. Strict Dependency Trees 9. Patches and Overrides 10. CI/CD Integration 11. Publishing Packages 12. Offline Mode 13. Environment Variables 14. Migration from npm/Yarn 15. Key File Locations…
Migrating a project from npm or Yarn to pnpm is not a single command. It is a sequence of decisions: how to convert the lockfile, how to handle the strict dependency resolution that pnpm enforces, how to rewrite CI scripts, and how to deal with the inevitable phantom dependency that npm’s hoisting was hiding. The…
Publishing with pnpm is not a wrapper around the npm CLI. Since pnpm 11, pnpm publish is implemented natively, which means the behavior differs from npm in several important ways: OTP is passed through PNPM_CONFIG_OTP instead of NPM_CONFIG_OTP, web-based authentication prints a QR code, and the packageManager field is stripped from the published manifest unless…
A lockfile that is committed but not enforced is a suggestion, not a contract. The –frozen-lockfile flag is the mechanism that turns the lockfile into an enforcement tool: it installs the exact versions recorded in the lockfile and fails if the lockfile would need to change. In pnpm, this flag is not just recommended for…
A dependency has a bug. The upstream fix is months away, or the maintainer is unresponsive, or the fix exists only in a pull request that has not been merged. Forking the repository is heavy: you lose the link to the original, you must maintain the fork, and your package.json points to a Git URL…
Configuration in pnpm 11 is not a single file. It is a deliberate split: authentication and registry settings live in .npmrc (INI format), while pnpm-specific behavior lives in pnpm-workspace.yaml (YAML format). The pnpmfile.js is a third mechanism entirely—a hook system that intercepts the dependency resolution process before the lockfile is written. Understanding which file controls…
The previous chapter established the default policies and the critical safety step of allowing SSH before enabling the firewall. This chapter focuses on the rule syntax that extends beyond simple allow and deny commands. UFW rules can restrict traffic by source address, destination port, network interface, protocol, and application profile. The LFCS exam tests the…
UFW (Uncomplicated Firewall) is the default firewall configuration tool on Ubuntu and Debian-based systems. It is not a replacement for the kernel’s packet filtering framework—it is a frontend. Under the hood, UFW manages iptables rules, which in turn are translated to nftables on modern kernels . The “uncomplicated” part is the CLI: instead of writing…