Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Financials
Overview
JavaScript package registriesfor teams that move fast. Publish scoped and private packages, manage organizations and access, and give every developer and CI environment a consistent source for public and private JavaScript dependencies.
News
vlt 1.0 & Hosted Package Registries
Stable client release and general availability of hosted JavaScript registries & ecosystem mirrors.
Read more
Report
Typosquatting was a spellcheck issue. Slopsquatting is a trust issue.
Consuming JavaScript packages safely just got more complicated.
Read more
Report
Ship JavaScript? Hang onto your lockfile
Pinning dependencies in package.json won't save you in a supply-chain attack - a committed lockfile does. Here's why, and how to install so it holds.
Read more
Report
Beyond disabling postinstalls: how npm install will change in npm 12
As part of its planned 12th release, the npm CLI drops automatically running lifecycle scripts on installs as part of multiple planned breaking changes
Read more
Report
Why Drizzle ORM couldn't publish new releases on NPM for a month
Drizzle ORM recently hit a 100 MB limit in the npm registry and couldn't ship new releases for weeks. What is this limit?
Read more
Report
Pro access
Upgrade to see all 40 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.