Agent skill · software engineering · aradotso
aube-package-manager
Expert guidance for using aube, a fast Rust-based Node.js package manager compatible with pnpm, npm, yarn, and bun lockfiles.
Why this skill is useful
Provides specific commands and workflows for using the Aube package manager that are not widely known or documented.
What it needs
Requires brew, mise, npm installed locally. About 5k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
Aube Package Manager Skill by ara.so — Daily 2026 Skills collection. Aube is a fast Node.js package manager written in Rust. It drops into existing projects by reading and writing existing lockfiles (pnpm-lock.yaml, package-lock.json, yarn.lock, bun.lock), uses a global content-addressable store to reduce disk usage, and delivers dramatically faster installs than pnpm or Bun — especially on warm CI. Installation Via mise (recommended) Via npm Via Homebrew (beta tap) Core Concepts Lockfile compatibility: Reads and writes existing lockfiles in place — no forced migration. Global store: Package files live in ~/.local/share/aube/store/ (XDG) and are shared across projects. Isolated layout: Packages link through nodemodules/.aube/ — phantom dependencies are blocked. Secure defaults: New package releases wait a minimum age; lifecycle scripts require explicit approval. Key Commands Install & Dependency Management CI Use aube ci in CI pipelines where the lockfile must be the source of truth. Running Scripts and Binaries Multicall Shims Inspection & Maintenance Publishing Lockfile Compatibility File Reads Writes in place --- --- --- aube-lock.yaml ✅ ✅ pnpm-lock.yaml v9 ✅ ✅ package-lock.json v2/v3 ✅ ✅ npm-shrinkwrap.json ✅ ✅ yarn.lock (v1 classic + v2+ berry) ✅ ✅ bun.lock ✅ ✅ Not supported: pnpm v5/v6 lockfiles (upgrade with pnpm first) Yarn PnP projects (switch to nodemodules linker first) Workspaces Workspace config files: pnpm-workspace.yaml — read and written if present aube-workspace.yaml — used for aube-first projects Example aube-workspace.yaml: Dependency Lifecycle Scripts Aube skips lifecycle scripts by default for security. After approval, the allowed packages are recorded in your project config so teammates get the same behavior. Configuration Aube reads config from package.json under "aube" key or from .auberc / aube.config.yaml. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/aube-package-manager