vlt 1.0 launches hosted package registries with malware blocking
Vlt 1.0 and Hosted Package Registries
vlt, the security-first JavaScript package manager, has reached 1.0 and now offers hosted package registries and ecosystem mirrors. The new infrastructure provides a generous free tier, edge-based performance, and proactive malware blocking—flagging over 275k package versions, with 25% still available on npm. The client remains a drop-in npm replacement, supporting OIDC publishing and advanced dependency querying.
At agentic scale the registry becomes the bottleneck.
- thataccount
I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?
- viviansolide
This will benefit the entire ecosystem.
Well done.
- nerdalytics
Over a year I joined the waitlist and almost forgot that I did. Today the registry is open to deliver on its promises—secure the supply chain.