vlt 1.0 launches hosted package registries with malware blocking

Vlt 1.0 and Hosted Package Registries

vlt 1.0 launches hosted package registries with malware blocking

vlt, the security-first JavaScript package manager, has reached 1.0 and now offers hosted package registries and ecosystem mirrors. The new infrastructure provides a generous free tier, edge-based performance, and proactive malware blocking—flagging over 275k package versions, with 25% still available on npm. The client remains a drop-in npm replacement, supporting OIDC publishing and advanced dependency querying.

At agentic scale the registry becomes the bottleneck.

More from this day

2026-08-04