The blog post introduces Phased Package Installations, a new approach to package management that separates the installation and building phases to enhance security. Traditional package managers run scripts automatically during ins...
About:
The blog is dedicated to vlt design, engineering, and thoughts.
Website:
Specializations:
Subscribe to RSS:
The blog post introduces the new :host selector in vlt's Dependency Selector Syntax (DSS), which allows users to manage dependencies across multiple projects. It explains how the :host selector can be used for cross-project securi...
The blog post introduces Graph Modifiers, a new feature in vlt that allows developers to customize their dependency graphs with precision. It explains how Graph Modifiers enable users to override specific dependency declarations, ...
The post introduces the new --scope flag for vlr, vlx, and vlt pkg commands, allowing developers to target specific dependencies in their projects using the Dependency Selector Syntax. This feature enhances precision in running sc...
The blog post discusses significant updates to a GUI that allows users to interactively create queries for managing dependencies in JavaScript projects without needing to know the Dependency Selector Syntax (DSS). It highlights th...
The blog post discusses the new features of the vlt tool for managing releases in projects or monorepos. It introduces commands like 'vlt version', 'vlt pack', and 'vlt publish' that support graph-aware release operations using th...
The blog post announces the introduction of catalog support in vlt, which allows for centralized dependency management across projects. It explains what catalogs are, how to set them up in the vlt.json file, and provides examples ...
The text introduces the support for installing JSR packages directly with the vlt client, explaining how it works and what it opens up in the future.
The text introduces the new vlt exec and vlt exec-cache commands, explaining how they work and how to use them. It describes how vlx and vlxl commands work, and how to use the exec-cache command. It also explains the exec-cache fe...
The text introduces a new set of security-focused Dependency Selector Syntax (DSS) selectors in the vlt client, powered by Socket, to provide developers with insights into the risks in their dependency trees. It explains the need ...
The JavaScript package ecosystem has been under scrutiny due to security and trustworthiness concerns. Provenance systems have limitations, and a new open-source tool called reproduce is designed to independently verify whether a ...
0Fresh New GUI Features
2025-02-13 • gui dashboard dependency management vlt client
The text discusses the new features of VLT's graphical user interface, including the ability to initialize a new project with one click, managing dependencies, saved queries, project-specific and globally accessible saved queries,...
The text is a recap of the HalfStack Phoenix conference, where the author presented a talk titled 'Performing Laparoscopic Lockfile Surgery' about dependency graphs in complex monorepos. The talk focused on the challenges of under...
The vlt team attended NodeConf EU and the Node.js Collaborator Summit to share the first public version of the vlt Client and Serverless Registry. The conference included a technical dive into building a faster package manager, a ...
Introducing vlt, a new JavaScript package manager and serverless registry. The vlt client offers innovative dependency query selector syntax, export formats, and GUI experience. The vsr serverless package registry provides a uniqu...
The text discusses the team's commitment to the open source ecosystem, their decision to join the Open Source Pledge, and their financial contributions to open source projects and maintainers. They believe in the importance of ope...
Luke Karrys announces joining vlt to work on JavaScript packages, expressing excitement for the opportunity and gratitude for his time at GitHub working on npm. He believes npm will continue to be important, but sees the need for ...
0Collision Conf 2024: Join vlt in Toronto!
2024-06-13 •
...
The text introduces the team and investors of vlt technology Inc., highlighting their experience and vision. The team includes Isaac Z. Schlueter, Darcy Clarke, and Ruy Adorno, who have extensive experience in the tech industry. T...
The npm ecosystem has a massive bug where the manifest of a package is published independently from its tarball, leading to inconsistencies and potential exploitation. The bug impacts cache poisoning, installation of unknown depen...