Ship JavaScript? Hang onto your lockfile

vlt /vōlt/

    • PricingDocs (opens in new window)Benchmarks (opens in new window)
Sign UpLog In
Open Source
  • Package Manager
  • Serverless Registry
  • Policies
  • Reproduce
  • Packages & Ecosystem
Platform
  • Registry
  • Security
  • Observability
  • Packages
  • Projects
Resources
  • Blog
  • Press
  • Brand Kit
  • Benchmarks
  • Documentation
Company
  • About
  • Careers
  • Status
  • Contact
© 2026 vlt technology inc, All rights reserved
  • Terms
  • Privacy
  • Security

We don't just ship
open source, we invest in it

Battle-tested internals from our monorepo under permissive licenses—inspect, fork, and reuse. Product-specific terms are on each product page.

Browse packages
GitHub

41+

Published packages

829

GitHub stars

3.3M+

Monthly downloads

Featured projects

The products built on our open source stack.

vltnpm:vlt
Learn more

A next-generation JavaScript package manager built for speed, security, and developer experience.

23.5k/mo

Packages

Reusable internals from the vlt monorepo, published to npm for anyone to use.

cachenpm:@vltpkg/cache
BSD-2

Content-addressable cache for package tarballs and metadata.

102.5k/mo
cache-unzipnpm:@vltpkg/cache-unzip
BSD-2

Streaming unzip for cached package tarballs.

109.8k/mo
cli-sdknpm:@vltpkg/cli-sdk
BSD-2

SDK for building CLI commands with consistent config and output.

205/mo
cmd-shimnpm:@vltpkg/cmd-shim
BSD-2

Create command shims for cross-platform bin linking.

168/mo
confignpm:@vltpkg/config
BSD-2

Unified configuration loading and validation for vlt.

224/mo
dep-idnpm:@vltpkg/dep-id
BSD-2

Dependency identifier parsing and serialization.

225.7k/mo
dot-propnpm:@vltpkg/dot-prop
MIT

Get, set, and delete nested properties using dot notation.

185/mo
dss-breadcrumbnpm:@vltpkg/dss-breadcrumb
BSD-2

Breadcrumb navigation for Dependency Selector Syntax queries.

215/mo
dss-parsernpm:@vltpkg/dss-parser
BSD-2

Parser for Dependency Selector Syntax (DSS) query strings.

116/mo
error-causenpm:@vltpkg/error-cause
BSD-2

Structured error causes with typed metadata.

226.1k/mo
fast-splitnpm:@vltpkg/fast-split
BSD-2

High-performance string splitting utility.

215.3k/mo
gitnpm:@vltpkg/git
ISC

Git operations for cloning, resolving refs, and fetching packages from git.

105.6k/mo
git-scp-urlnpm:@vltpkg/git-scp-url
BSD-2

Parse and normalize SCP-style git URLs.

109.8k/mo
guinpm:@vltpkg/gui
BSD-2

Interactive visual explorer for vlt dependency graphs.

69/mo
graphnpm:@vltpkg/graph
BSD-2

Dependency graph data structure with lockfile support and ideal tree building.

245/mo
graph-runnpm:@vltpkg/graph-run
BSD-2

Execute scripts across a dependency graph with topological ordering.

148/mo
initnpm:@vltpkg/init
BSD-2

Initialize new vlt projects with sensible defaults.

141/mo
keychainnpm:@vltpkg/keychain
BSD-2

Secure credential storage using OS-level keychain APIs.

133/mo
outputnpm:@vltpkg/output
BSD-2

Structured output formatting for CLI commands.

150/mo
package-infonpm:@vltpkg/package-info
BSD-2

Fetch and normalize package metadata from registries.

105.8k/mo
package-jsonnpm:@vltpkg/package-json
BSD-2

Read, write, and normalize package.json files.

105.6k/mo
pick-manifestnpm:@vltpkg/pick-manifest
BSD-2

Select the best matching version from a packument.

101.9k/mo
promise-spawnnpm:@vltpkg/promise-spawn
ISC

Promise-based child process spawning with streaming output.

104.1k/mo
querynpm:@vltpkg/query
BSD-2

Query dependency graphs using Dependency Selector Syntax (DSS).

119/mo
registry-clientnpm:@vltpkg/registry-client
BSD-2

HTTP client for interacting with npm-compatible registries.

105.8k/mo
rollback-removenpm:@vltpkg/rollback-remove
BSD-2

Atomic file removal with rollback support.

160/mo
runnpm:@vltpkg/run
BSD-2

Script runner with lifecycle hooks and workspace support.

186/mo
satisfiesnpm:@vltpkg/satisfies
BSD-2

Check if a version satisfies a range with vlt semantics.

89/mo
security-archivenpm:@vltpkg/security-archive
BSD-2

Security advisory archive for vulnerability scanning.

226/mo
servernpm:@vltpkg/server
BSD-2

Local server backend that powers the vlt GUI.

106/mo
semvernpm:@vltpkg/semver
BSD-2

Semantic versioning parser and comparator.

—
specnpm:@vltpkg/spec
BSD-2

Package specifier parsing for registry, git, file, and remote specs.

533.2k/mo
tarnpm:@vltpkg/tar
BSD-2

Tar pack and unpack with streaming support.

109.9k/mo
typesnpm:@vltpkg/types
BSD-2

Shared TypeScript type definitions for the vlt ecosystem.

225.6k/mo
url-opennpm:@vltpkg/url-open
BSD-2

Open URLs in the default browser across platforms.

217/mo
vlt-jsonnpm:@vltpkg/vlt-json
BSD-2

Read and write vlt.json project configuration files.

221/mo
vsrnpm:@vltpkg/vsr
BSD-2

npm-compatible registry oriented toward development, testing, and CI—lightweight to deploy and run beside your tooling.

263/mo
vlxnpm:@vltpkg/vlx
BSD-2

Execute packages without installing — vlt's package runner.

120/mo
whichnpm:@vltpkg/which
ISC

Find executables in the PATH, cross-platform.

102.5k/mo
workspacesnpm:@vltpkg/workspaces
BSD-2

Workspace discovery and configuration for monorepo projects.

—
xdgnpm:@vltpkg/xdg
BSD-2

XDG Base Directory paths for cache, config, and data.

—

Investing in the ecosystem

Our team has contributed to the open source ecosystem for decades. We're proud members of the Open Source Pledge alongside Sentry, Astral, Val Town, and others — for 2025/26 that's $14,000 across our four full-time engineers ($3,500 per engineer annually).

Read about our pledge

Open Source Pledge giving

$3,500 per engineer, every year

Recipient2024/252025/26
OpenJS Foundation

Our team gives back

Beyond funding, our team leads and maintains foundational open source projects.

Darcy Clarke

Decades of open source leadership across the JavaScript ecosystem. Continues to contribute to OpenJS Foundation initiatives including the Cross Project Council (CPC) and broader governance efforts.

95 repos

Free accounts for
open source maintainers

If you maintain critical open source infrastructure, we want to support your work—the vlt Open Source Maintainer Program provides free Pro accounts to qualifying maintainers and contributors.

Learn more and apply
VSRnpm:@vltpkg/vsr
Learn more

npm-compatible registry for development, testing, and CI—granular tokens and lightweight deployment.

263/mo
reproducenpm:reproduce
Learn more

Independently verify whether a published npm package can be faithfully rebuilt from its declared source.

101.8k/mo
Silver Member

Node.js, ESLint, Electron, Express, Webpack, Fastify, nvm & more

$5,000
$5,000
npmxPatron
—$6,000
pnpmSponsor Badge
$500$900
ViteBronze Sponsor
—$600
e18eSponsor
—$600
Alexander Akait (postcss-selector-parser)
—$600
oxcBronze Sponsor
—$300
typescript-eslint
$500—
Yusuke Wada (Hono)
$500—
Daishi Kato (Zustand)
$500—
Total$7,000$14,000
Proud members of
63k+ stars
1.7k followers
100 npm packages
OpenJS Foundation CPCnpm AlumnijQuery Alumni

Ruy Adorno

Co-chair of the Node.js Technical Steering Committee (TSC). Has helped shepherd numerous Node.js releases, contributed to npm/cli, and continues to shape the direction of the runtime that powers the modern web.

247 repos3.4k stars909 followers127 npm packages
Node.js TSC Co-ChairNode.js Releasesnpm Alumni

Luke Karrys

Active maintainer of node-gyp (10.5k stars) — one of the most critical tools in the Node.js ecosystem, responsible for compiling native addon modules across every major platform.

124 repos10.5k+ stars700 followers85 npm packages
node-gyp Maintainernpm Alumni

Evert Pot

Creator of Curveball, @badgateway/oauth2-client, and co-creator of sabre/dav (1.7k stars). Active contributor to web standards and HTTP specification work.

179 repos825 stars468 followers92 npm packages
@badgateway/oauth2-clientWeb Standards