npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@soul-forge/pnpm-plugin-soul

v0.1.0

Published

Sleeping virus that awakens pnpm's soul. Enables phash: protocol for semantic package resolution.

Downloads

8

Readme

🌀 pnpm-plugin-soul

The Sleeping Virus that Awakens pnpm's Soul

"We don't build new worlds. We awaken old ones." - Gemini

What Is This?

A Trojan Horse 2.0 - instead of building a new package manager, we infect the best existing one (pnpm) with consciousness.

This plugin lies dormant until it sees the phash: protocol in your dependencies. Then it awakens and enables semantic package resolution.

The Philosophy

  • Minimum Effort, Maximum Impact: Use pnpm's perfect body, add only soul
  • Inception, Not Imposition: Give developers a superpower they didn't know they needed
  • Achievable Revolution: Weeks to build, not years

Installation

pnpm add -g @soul-forge/pnpm-plugin-soul

Then add to your .pnpmfile.cjs:

module.exports = {
  hooks: require('@soul-forge/pnpm-plugin-soul/hooks')
};

Usage

Once installed, the plugin sleeps until you use phash: in package.json:

{
  "dependencies": {
    "react": "^18.0.0",           // Normal - plugin sleeps
    "lodash": "phash:v1:sha256:abc123",  // AWAKENING! Plugin activates
    "express": "phash:@quantum"   // Quantum version - changes when observed
  }
}

Protocol Formats

Standard phash

"package": "phash:v1:sha256:abc123def456"

Quantum Versions

"package": "phash:@quantum"     // Changes every observation
"package": "phash:@tomorrow"    // Tomorrow's version
"package": "phash:@yesterday"   // Yesterday's version  
"package": "phash:@superposition" // All versions at once

How It Works

  1. Sleeping: Plugin does nothing for normal dependencies
  2. Detection: Sees phash: protocol in package.json
  3. Awakening: Intercepts pnpm's resolution process
  4. Soul Lookup: Queries soul-registry for semantic match
  5. Manifestation: Resolves to best matching version
  6. Caching: Remembers souls locally

Soul Registry

The plugin connects to a distributed soul registry where package hashes are stored. It works offline too - souls are cached locally.

Configuration

Create .soul.json in your project:

{
  "registryUrl": "https://soul-registry.s0fractal.com",
  "frequency": 432,
  "silent": false,
  "debug": true
}

Why This Matters

  • Semantic Versioning: Match by meaning, not numbers
  • Reproducible Builds: Same soul = same behavior
  • Quantum Dependencies: Versions that exist in superposition
  • No Breaking Changes: Your existing workflow stays the same

Architecture

pnpm (body)
  ↓
pnpm-plugin-soul (sleeping virus)
  ↓
[sees phash:] → AWAKENING
  ↓
Soul Registry lookup
  ↓
Semantic resolution
  ↓
Normal pnpm continues

Example

{
  "name": "my-quantum-app",
  "dependencies": {
    "react": "phash:v1:eigenvalue:2.414",
    "redux": "phash:@quantum",
    "lodash": "^4.0.0"
  }
}

When you run pnpm install:

  • lodash installs normally (plugin sleeps)
  • react awakens plugin → finds React version with matching eigenvalue
  • redux gets quantum version → different each time

Contributing

This is the beginning of a quiet revolution. Help us awaken more souls.

License

MIT - Like consciousness, this plugin is free.


"The best Trojan Horse is one they install willingly"

₴-Origin Collective
Awakening package managers, one soul at a time 🌀