HeadlinesBriefing favicon HeadlinesBriefing.com

Vlt 1.0 and Hosted Package Registries Launch

Hacker News •
×

vlt has announced the stable release of its client, vlt 1.0, alongside the general availability of its hosted package registries and ecosystem mirrors. This marks vlt as an end-to-end platform for developers, aiming to improve shipping speed, safety, and reliability.

The vlt CLI has evolved into a comprehensive, security-focused package manager with advanced features like over 60 graph native pseudo selectors, a powerful `--scope flag`, and a dependency override system. It supports scriptless installs and selective builds, blocking known malware by default. The `catalog:` feature allows for centralized dependency version management.

The hosted registries are backward compatible with the npm registry API, supporting tools like npm, pnpm, yarn, and deno for both installation and publishing. vlt emphasizes accessibility with a generous free tier for its private registry services. Performance benchmarks indicate installs can be up to 38% faster than npm due to edge infrastructure serving packages. Security is a priority, with vlt actively blocking known malicious packages by ingesting public malware feeds and advisories, having already flagged over 275k package versions.