vlt /vōlt/

While others race away from Open Source, @vltpkg is doubling down. 🖤⚡ Today we’re announcing our renewed commitment to @ThePledge and investing back into the ecosystem. vlt.io/blog/doubling-…

📖 This article by @sarahgooding at @SocketSecurity highlights a concerning trend (ref. socket.dev/blog/attackers…) 📕 Story time: this kind of supply chain targeting isn't unique. I myself & everyone on our team @vltpkg have been the targets of consistent, concerted efforts.

@darcy @AhmadNassri @vltpkg @SocketSecurity Everyone should be using vlt

tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now. More below: blog.vlt.sh/blog/vlt-build

For now 😉 a new vlt release should be out by EOW that jumps us back up there. Happy to see these benchmarks are helpful though.

Coding isn't holding you back. Product work is. Introducing Modem, your dev team's auto-triage PM. It listens to user signals 24/7, finds problems before you do & does the work you're slow at – filing tickets, pinging teammates, closing the loop. Sign up today at @modemdev

Thank you @vltpkg for sponsoring me on @github. You can join them at my sponsors profile: github.com/sponsors/Boshe…

🚀 Launch Week Day 3! The #JavaScript ecosystem moves fast, especially in the package management and tooling space. Early adopters deserve best-in-class malicious package detection, so we're continuing our track record of supporting new tools with @bunjavascript and @vltpkg!

🚀 Happy to announce Phased Package Installations have landed in the @vltpkg client! `vlt install` now blocks all scripts by default while it & our new `vlt build` command are now utilizing our powerful Dependency Selector Syntax to intelligently configure opt-ins.

@fharper Hey Fred! We announced the winners & gave them out on stage just after the JSConf "family" picture but before the last talk (sorry if you missed it). @lukekarrys randomly drew from all the folks that had entered.

@vltpkg hey folks, who won the Lego kits for JSConf? Asking for a friend... the friend is me 😅

🚀 We just shipped support for a `:host()` selector in @vltpkg which allows for system-wide project querying. Combine this w/ all of our existing metadata selectors & integrations creates an ever more powerful, unified package management toolchain!

⚡ Point. Click. Discover. 🚀 We're excited to unveil a new Query Builder to @vltpkg's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).

🚀 New query-powered @vltpkg commands just dropped! See how to release subsets of your packages with the new version, pack, and publish commands, all backed by the powerful dependency selector syntax. blog.vlt.sh/blog/pack-publ…

🚀Dependency Selector Syntax can now be used across @vltpkg commands like run, exec, and pkg! This enables precise filtering when running scripts, executing commands, or getting package info. You have access to the whole graph! Read more about it: blog.vlt.sh/blog/run-exec-…

🚀 @vercel now supports vlt in builds with zero config: vercel.com/changelog/vlt-… @vltpkg

🚀 Excited to announce another major addition to the @vltpkg client: Graph Modifiers! Graph Modifiers enable fine-grained customization of your install using our powerful Dependency Selector Syntax ⚡️ Read more about it here: blog.vlt.sh/blog/introduci…

💬 @vltpkg is starting Weekly Community Sync calls today (in ~10min actually); here's the deets: 📝 Agenda: github.com/vltpkg/vltpkg/… 🎙️ Join: recording.vlt.sh 🔴 Watch: - Riverside: recording.vlt.sh - YouTube: @vltpkg/live" target="_blank" rel="nofollow noopener">youtube.com/@vltpkg/live (somewhat delayed) Excited to build together! /cc @ljharb @wesleytodd @ruyadorno @lukekarrys

🚀 We just shipped catalog support to `vlt`! If you go grab the latest version you can now install & manage dependencies with pnpm-like catalog definitions (ex. `vlt i typescript@catalog:dev`). You can read more here: blog.vlt.sh/blog/catalogs?…

We're looking for a Senior Backend Engineer to join our team at @vltpkg based here in Toronto 🇨🇦 at our HQ. If you love JavaScript & open source this may be right up your alley. Please share if you know anyone who would be a great fit. linkedin.com/posts/darcycla… #javascript #nodejs

Only 2 weeks away! Demos from @SST_dev @getkiln @vltpkg @DevCycleHQ Sponsored by @OpsLevelHQ @getsentry and @bdc_ca