We are building the future of JavaScript packages.
Joined March 2023
- Tweets 103
- Following 240
- Followers 1,437
- Likes 439
6 Photos and videos
vlt /vōlt/ retweeted
Jun 1
⚡️ We're looking for a DevRel person @vltpkg based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours.
3
4
24
3,214
vlt /vōlt/ retweeted
Jun 1
Love the work @motdotla is doing with @dotenvx & am excited by what he's doing with Armor ⛨ - Our @vltpkg team got a excited when we first saw that first name change & appreciated Scott's willingness to adapt the name again to ensure there wasn't any confusion. Much love 🖤
Jun 1
2
2
11
2,337
vlt /vōlt/ retweeted
Apr 29
While others race away from Open Source, @vltpkg is doubling down. 🖤⚡
Today we’re announcing our renewed commitment to @ThePledge and investing back into the ecosystem.
vlt.io/blog/doubling-down-on…
2
5
10
813
vlt /vōlt/ retweeted
Apr 5
📖 This article by @sarahgooding at @SocketSecurity highlights a concerning trend (ref. socket.dev/blog/attackers-hu…)
📕 Story time: this kind of supply chain targeting isn't unique. I myself & everyone on our team @vltpkg have been the targets of consistent, concerted efforts.
2
4
16
3,137
vlt /vōlt/ retweeted
Apr 1
tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now.
More below: blog.vlt.sh/blog/vlt-build
Apr 1
🧨 Axios only needed to be resolved somewhere in your dependency graph to affect you.
Semver transitive deps runtime installs = hidden blast radius.
If you only checked your project’s lockfile, you may still not know.
socket.dev/blog/hidden-blast… #nodejs
3
14
45
12,183
vlt /vōlt/ retweeted
Mar 5
For now 😉 a new vlt release should be out by EOW that jumps us back up there. Happy to see these benchmarks are helpful though.
2
7
1,124
vlt /vōlt/ retweeted
Mar 3
Coding isn't holding you back. Product work is.
Introducing Modem, your dev team's auto-triage PM.
It listens to user signals 24/7, finds problems before you do & does the work you're slow at – filing tickets, pinging teammates, closing the loop.
Sign up today at @modemdev
74
84
1,029
282,118
Thank you @vltpkg for sponsoring me on @github. You can join them at my sponsors profile: github.com/sponsors/Boshen?o…
2
44
3,621
vlt /vōlt/ retweeted
19 Nov 2025
🚀 Launch Week Day 3! The #JavaScript ecosystem moves fast, especially in the package management and tooling space. Early adopters deserve best-in-class malicious package detection, so we're continuing our track record of supporting new tools with @bunjavascript and @vltpkg!
🚀 Big news for JavaScript teams: Socket now supports Bun and vlt in beta.
You no longer have to choose between innovation and security. Commit a bun.lock or vlt-lock.json and Socket gives you full supply chain protection.
3
5
2,062
vlt /vōlt/ retweeted
19 Nov 2025
🚀 Happy to announce Phased Package Installations have landed in the @vltpkg client! `vlt install` now blocks all scripts by default while it & our new `vlt build` command are now utilizing our powerful Dependency Selector Syntax to intelligently configure opt-ins.
2
3
5
774
vlt /vōlt/ retweeted
18 Sep 2025
🚀 We just shipped support for a `:host()` selector in @vltpkg which allows for system-wide project querying. Combine this w/ all of our existing metadata selectors & integrations creates an ever more powerful, unified package management toolchain!
1
2
11
1,273
vlt /vōlt/ retweeted
4 Sep 2025
⚡ Point. Click. Discover.
🚀 We're excited to unveil a new Query Builder to @vltpkg's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
1
3
5
942
vlt /vōlt/ retweeted
21 Aug 2025
🚀 New query-powered @vltpkg commands just dropped!
See how to release subsets of your packages with the new version, pack, and publish commands, all backed by the powerful dependency selector syntax.
blog.vlt.sh/blog/pack-publis…
4
6
776
vlt /vōlt/ retweeted
14 Aug 2025
🚀Dependency Selector Syntax can now be used across @vltpkg commands like run, exec, and pkg!
This enables precise filtering when running scripts, executing commands, or getting package info. You have access to the whole graph!
Read more about it: blog.vlt.sh/blog/run-exec-qu…
3
4
554
vlt /vōlt/ retweeted
11 Aug 2025
1
7
635
vlt /vōlt/ retweeted
6 Aug 2025
🚀 Excited to announce another major addition to the @vltpkg client: Graph Modifiers!
Graph Modifiers enable fine-grained customization of your install using our powerful Dependency Selector Syntax ⚡️ Read more about it here: blog.vlt.sh/blog/introducing…
3
5
479
vlt /vōlt/ retweeted
31 Jul 2025
💬 @vltpkg is starting Weekly Community Sync calls today (in ~10min actually); here's the deets:
📝 Agenda: github.com/vltpkg/vltpkg/iss…
🎙️ Join: recording.vlt.sh
🔴 Watch:
- Riverside: recording.vlt.sh
- YouTube: youtube.com/@vltpkg/live (somewhat delayed)
Excited to build together!
/cc @ljharb @wesleytodd @ruyadorno @lukekarrys
3
7
898
vlt /vōlt/ retweeted
30 Jul 2025
🚀 We just shipped catalog support to `vlt`! If you go grab the latest version you can now install & manage dependencies with pnpm-like catalog definitions (ex. `vlt i typescript@catalog:dev`).
You can read more here:
blog.vlt.sh/blog/catalogs?c=…
4
9
606
vlt /vōlt/ retweeted
29 Jul 2025
We're looking for a Senior Backend Engineer to join our team at @vltpkg based here in Toronto 🇨🇦 at our HQ. If you love JavaScript & open source this may be right up your alley. Please share if you know anyone who would be a great fit.
linkedin.com/posts/darcyclar…
#javascript #nodejs
8
20
1,361