•1 min read•from InfoQ
vlt 1.0 Ships as a Drop-in npm Replacement with Phased Installs, Graph Queries, and Malware-Blocking
vlt, created by the original npm team, has launched version 1.0 as a drop-in replacement for npm. It features phased installations to prevent automatic script execution, a queryable dependency graph with over 60 selectors, and hosted registries that block malicious packages. The tool aims to enhance security and streamline the JavaScript development process.
By Daniel CurtisWant to read more?
Check out the full article on the original site
Tagged with
#vlt
#npm
#JavaScript
#dependency graph
#package manager
#security
#malware
#malicious packages
#phased installs
#script execution
#hosted registries
#selectors
#development process
#drop-in replacement
#versions 1.0
#automatic script
#queryable
#node.js
#registries
#packages