We are building the future of JavaScript packages.

Joined March 2023
6 Photos and videos
vlt /vōlt/ retweeted
⚡️ We're looking for a DevRel person @vltpkg based in our Toronto 🇨🇦 HQ. You'll work closely w/ me & should love the idea of owning various aspects of product marketing. You'll be vlt's biggest fan & advocate; molding this unique role in a way that plays to your strengths & ours.
3
4
24
3,214
vlt /vōlt/ retweeted
Love the work @motdotla is doing with @dotenvx & am excited by what he's doing with Armor ⛨ - Our @vltpkg team got a excited when we first saw that first name change & appreciated Scott's willingness to adapt the name again to ensure there wasn't any confusion. Much love 🖤
Update: Renamed again to Armor ⛨. @darcy and the amazing team behind @vltpkg - many of the same guys instrumental with npm and github - kindly brought up a concern that naming it VLT could confuse the community. It was a good point and really glad they raised it with me. Armor ⛨ it is!
2
2
11
2,337
vlt /vōlt/ retweeted
While others race away from Open Source, @vltpkg is doubling down. 🖤⚡ Today we’re announcing our renewed commitment to @ThePledge and investing back into the ecosystem. vlt.io/blog/doubling-down-on…
2
5
10
813
vlt /vōlt/ retweeted
📖 This article by @sarahgooding at @SocketSecurity highlights a concerning trend (ref. socket.dev/blog/attackers-hu…) 📕 Story time: this kind of supply chain targeting isn't unique. I myself & everyone on our team @vltpkg have been the targets of consistent, concerted efforts.
2
4
16
3,137
vlt /vōlt/ retweeted
Apr 1
Everyone should be using vlt
1
3
11
1,605
vlt /vōlt/ retweeted
tldr; if you used @vltpkg as your package manager, then you were protected the minute @SocketSecurity flagged the malicious packages in the `axios` attack yesterday. The best time to switch your package manager was 48hrs ago, the next best time is right now. More below: blog.vlt.sh/blog/vlt-build
🧨 Axios only needed to be resolved somewhere in your dependency graph to affect you. Semver transitive deps runtime installs = hidden blast radius. If you only checked your project’s lockfile, you may still not know. socket.dev/blog/hidden-blast… #nodejs
3
14
45
12,183
vlt /vōlt/ retweeted
For now 😉 a new vlt release should be out by EOW that jumps us back up there. Happy to see these benchmarks are helpful though.
deno is now second place here benchmarks.vlt.sh/#/package-…
2
7
1,124
vlt /vōlt/ retweeted
Coding isn't holding you back. Product work is. Introducing Modem, your dev team's auto-triage PM. It listens to user signals 24/7, finds problems before you do & does the work you're slow at – filing tickets, pinging teammates, closing the loop. Sign up today at @modemdev
74
84
1,029
282,118
vlt /vōlt/ retweeted
Feb 11
Thank you @vltpkg for sponsoring me on @github. You can join them at my sponsors profile: github.com/sponsors/Boshen?o…
2
44
3,621
vlt /vōlt/ retweeted
🚀 Launch Week Day 3! The #JavaScript ecosystem moves fast, especially in the package management and tooling space. Early adopters deserve best-in-class malicious package detection, so we're continuing our track record of supporting new tools with @bunjavascript and @vltpkg!
19 Nov 2025
🚀 Big news for JavaScript teams: Socket now supports Bun and vlt in beta. You no longer have to choose between innovation and security. Commit a bun.lock or vlt-lock.json and Socket gives you full supply chain protection.
3
5
2,062
vlt /vōlt/ retweeted
19 Nov 2025
🚀 Happy to announce Phased Package Installations have landed in the @vltpkg client! `vlt install` now blocks all scripts by default while it & our new `vlt build` command are now utilizing our powerful Dependency Selector Syntax to intelligently configure opt-ins.
2
3
5
774
vlt /vōlt/ retweeted
18 Sep 2025
🚀 We just shipped support for a `:host()` selector in @vltpkg which allows for system-wide project querying. Combine this w/ all of our existing metadata selectors & integrations creates an ever more powerful, unified package management toolchain!
1
2
11
1,273
vlt /vōlt/ retweeted
4 Sep 2025
⚡ Point. Click. Discover. 🚀 We're excited to unveil a new Query Builder to @vltpkg's UI. It's now dead simple to visually navigate complex dependency graph filters without typing a thing. No need to memorize our selector syntax (if you don't want to).
1
3
5
942
vlt /vōlt/ retweeted
21 Aug 2025
🚀 New query-powered @vltpkg commands just dropped! See how to release subsets of your packages with the new version, pack, and publish commands, all backed by the powerful dependency selector syntax. blog.vlt.sh/blog/pack-publis…
4
6
776
vlt /vōlt/ retweeted
14 Aug 2025
🚀Dependency Selector Syntax can now be used across @vltpkg commands like run, exec, and pkg! This enables precise filtering when running scripts, executing commands, or getting package info. You have access to the whole graph! Read more about it: blog.vlt.sh/blog/run-exec-qu…
3
4
554
vlt /vōlt/ retweeted
🚀 Excited to announce another major addition to the @vltpkg client: Graph Modifiers! Graph Modifiers enable fine-grained customization of your install using our powerful Dependency Selector Syntax ⚡️ Read more about it here: blog.vlt.sh/blog/introducing…
3
5
479
vlt /vōlt/ retweeted
30 Jul 2025
🚀 We just shipped catalog support to `vlt`! If you go grab the latest version you can now install & manage dependencies with pnpm-like catalog definitions (ex. `vlt i typescript@catalog:dev`). You can read more here: blog.vlt.sh/blog/catalogs?c=…

4
9
606
vlt /vōlt/ retweeted
29 Jul 2025
We're looking for a Senior Backend Engineer to join our team at @vltpkg based here in Toronto 🇨🇦 at our HQ. If you love JavaScript & open source this may be right up your alley. Please share if you know anyone who would be a great fit. linkedin.com/posts/darcyclar… #javascript #nodejs
8
20
1,361