upvote
Yeah but what is it?
reply
To add a bit of non-Vlt (I work on the JS Platform Team at Netflix where I have driven many of our decisions in the package manager space the past 6 years) but highly involved and supportive community member:

The team that was able to ship the most important features for npm to be competitive in the modern JS stack from ~2020 was able to take a fresh look at the problem without the organizational baggage of Github/Microsoft.

On the technical side, the ecosystem is maturing and we need a better set of foundational tools to meet that maturity level. This includes deep commitment to performance, security, and DX. The full product is more than just a package manager, it is a registry, a registry client, a task runner, and much more. Vlt is aiming to be this mature foundation.

Feel free to correct me if I am wrong on anything here Darcy.

P.S. grumble grumble...jFrog is a trash fire....grumble grumble

reply
...can you make the 5s pitch be more like 'X times faster than pnpm and more secure' but fill X for me? unless it isn't pnpm at all in which case replace with 'it does X' because I've no idea after reading your post and a quick skim of the announcement itself?
reply
Perf is highly nuanced but we've been doing realistic benchmarking for the ecosystem for almost a year now: https://benchmarks.vlt.sh/

We've got more improvements coming soon but we're a roughly ~10-40% faster registry then npm out-of-the-box. Compared to incumbent enterprise registries we're like ~3x.

reply
jFrog is horrendous, so can you also tackle Python please?
reply