Vlt 1.0 and Hosted Package Registries

55 pointsposted 2 days ago
by patrikcsak

14 Comments

thataccount

2 days ago

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

clarke78

2 days ago

5s: save time & money

10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations).

20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtime, then you should check us out.

22s: Also, <insert jFrog grumble>.

d_sc

a day ago

Can anyone from vlt explain the inconsistencies in their performance over time graph? When I compare it w/ the npm baseline, it looks like it fluctuates between being ~4s faster typically but then there are periods where the performance is worse.

I appreciate the transparency that the company has showing their performance, the early August degradation has me wondering what’s going on.

ruyadorno

a day ago

I believe most, if not all of those, were due to some variation of adding some new feature/capability to the system and then making things faster again.

viviansolide

2 days ago

This will benefit the entire ecosystem. Well done.

clarke78

2 days ago

Appreciate the kind words! We're excited to keep supporting this ecosystem.

nerdalytics

2 days ago

Over a year I joined the waitlist and almost forgot that I did. Today the registry is open to deliver on its promises—secure the supply chain.

clarke78

2 days ago

Founder here - thanks for the vote of confidence! We've got a lot more in store.

merb

2 days ago

Without identity federation via oidc it’s basically not really a replacement for verdaccio

clarke78

2 days ago

This is coming imminently but appreciate the feedback & will push to get this landed here quickly. That said, our client does support OIDC publishing if your registry does so hopefully you'll still find value there as it's a major step up from legacy npm clients.

joeyagreco

2 days ago

So this is advertising as a secure npm?

boxed

2 days ago

The entire page doesn't even mention javascript :/

lukekarrys

2 days ago

thanks for the feedback. we will update the announcement post. we at least try to make that clear on the main landing page https://www.vlt.io/home