vlt /vōlt/

@vltpkg

JavaScript package registries & tooling for teams that move fast.

Joined March 2023

vlt /vōlt/
@vltpkg
9h
Semantic Versioning solved "Is this compatible?"—but that's just the version number. Provenance, integrity, SBOMs—fragmented. What if we built *on* semver instead of replacing it? Darcy Clarke at Render ATL, Wed 2pm ET. renderatl.com/node What's your priority?
NodeJS Interactive at RenderATL
From renderatl.com
vlt /vōlt/
@vltpkg
Aug 11
Semantic Versioning solved "Is this compatible?"—but not "is this safe?" Provenance, integrity, SBOMs—all fragmented. Tomorrow, Darcy Clarke asks bigger question: can we build *on* semver instead replacing it? @RenderATL, Weds 2pm ET. renderatl.com/node Attending?
vlt /vōlt/
@vltpkg
Aug 11
Wake up in the morning to a feed full of CLIs 🎶
vlt /vōlt/
@vltpkg
Aug 8
You've got an SBOM. Your team trusts it. But what's actually shipping in your node_modules? Most teams can't answer that. An SBOM is a snapshot of declared dependencies. Your actual graph—what specs resolved to, what got yanked, what changed at publish time—is invisible. That
vlt /vōlt/
@vltpkg
Aug 7
Guesss who's featured in Node Weekly? nodeweekly.com/issues/636