Vlt 1.0 and Hosted Package Registries (vlt.io)

Over a year I joined the waitlist and almost forgot that I did. Today the registry is open to deliver on its promises—secure the supply chain.

Without identity federation via oidc it’s basically not really a replacement for verdaccio

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

This will benefit the entire ecosystem. Well done.

So this is advertising as a secure npm?

[dead]

The entire page doesn't even mention javascript :/

Can anyone from vlt explain the inconsistencies in their performance over time graph? When I compare it w/ the npm baseline, it looks like it fluctuates between being ~4s faster typically but then there are periods where the performance is worse.

I appreciate the transparency that the company has showing their performance, the early August degradation has me wondering what’s going on.