We don't just ship open source. We invest in it.

Battle-tested internals from our monorepo under permissive licenses—inspect, fork, and reuse. Product-specific terms are on each product page.

41+

Published packages

829

GitHub stars

3.3M+

Monthly downloads

Featured

vltnpm:vlt

Learn more

A next-generation JavaScript package manager built for speed, security, and developer experience.

14.0k/mo

VSRnpm:@vltpkg/vsr

Learn more

npm-compatible registry for development, testing, and CI—granular tokens and lightweight deployment.

48/mo

reproducenpm:reproduce

Learn more

Independently verify whether a published npm package can be faithfully rebuilt from its declared source.

128.4k/mo

Packages

Reusable internals from the vlt monorepo — published to npm and available for anyone to use. Filter by category or search by name. Browse all packages on npmx.dev.

cachenpm:@vltpkg/cache

BSD-2

Content-addressable cache for package tarballs and metadata.

129.3k/mo

cache-unzipnpm:@vltpkg/cache-unzip

BSD-2

Streaming unzip for cached package tarballs.

129.2k/mo

cli-sdknpm:@vltpkg/cli-sdk

BSD-2

SDK for building CLI commands with consistent config and output.

637/mo

cmd-shimnpm:@vltpkg/cmd-shim

BSD-2

Create command shims for cross-platform bin linking.

765/mo

confignpm:@vltpkg/config

BSD-2

Unified configuration loading and validation for vlt.

599/mo

dep-idnpm:@vltpkg/dep-id

BSD-2

Dependency identifier parsing and serialization.

273.1k/mo

dot-propnpm:@vltpkg/dot-prop

MIT

Get, set, and delete nested properties using dot notation.

532/mo

dss-breadcrumbnpm:@vltpkg/dss-breadcrumb

BSD-2

Breadcrumb navigation for Dependency Selector Syntax queries.

788/mo

dss-parsernpm:@vltpkg/dss-parser

BSD-2

Parser for Dependency Selector Syntax (DSS) query strings.

843/mo

error-causenpm:@vltpkg/error-cause

BSD-2

Structured error causes with typed metadata.

275.6k/mo

fast-splitnpm:@vltpkg/fast-split

BSD-2

High-performance string splitting utility.

273.1k/mo

gitnpm:@vltpkg/git

ISC

Git operations for cloning, resolving refs, and fetching packages from git.

129.3k/mo

git-scp-urlnpm:@vltpkg/git-scp-url

BSD-2

Parse and normalize SCP-style git URLs.

129.2k/mo

guinpm:@vltpkg/gui

BSD-2

Interactive visual explorer for vlt dependency graphs.

67/mo

graphnpm:@vltpkg/graph

BSD-2

Dependency graph data structure with lockfile support and ideal tree building.

740/mo

graph-runnpm:@vltpkg/graph-run

BSD-2

Execute scripts across a dependency graph with topological ordering.

729/mo

initnpm:@vltpkg/init

BSD-2

Initialize new vlt projects with sensible defaults.

703/mo

keychainnpm:@vltpkg/keychain

BSD-2

Secure credential storage using OS-level keychain APIs.

861/mo

outputnpm:@vltpkg/output

BSD-2

Structured output formatting for CLI commands.

877/mo

package-infonpm:@vltpkg/package-info

BSD-2

Fetch and normalize package metadata from registries.

129.2k/mo

package-jsonnpm:@vltpkg/package-json

BSD-2

Read, write, and normalize package.json files.

129.4k/mo

pick-manifestnpm:@vltpkg/pick-manifest

BSD-2

Select the best matching version from a packument.

129.2k/mo

promise-spawnnpm:@vltpkg/promise-spawn

ISC

Promise-based child process spawning with streaming output.

129.3k/mo

querynpm:@vltpkg/query

BSD-2

Query dependency graphs using Dependency Selector Syntax (DSS).

695/mo

registry-clientnpm:@vltpkg/registry-client

BSD-2

HTTP client for interacting with npm-compatible registries.

129.3k/mo

rollback-removenpm:@vltpkg/rollback-remove

BSD-2

Atomic file removal with rollback support.

765/mo

runnpm:@vltpkg/run

BSD-2

Script runner with lifecycle hooks and workspace support.

614/mo

satisfiesnpm:@vltpkg/satisfies

BSD-2

Check if a version satisfies a range with vlt semantics.

746/mo

security-archivenpm:@vltpkg/security-archive

BSD-2

Security advisory archive for vulnerability scanning.

797/mo

servernpm:@vltpkg/server

BSD-2

Local server backend that powers the vlt GUI.

101/mo

semvernpm:@vltpkg/semver

BSD-2

Semantic versioning parser and comparator.

273.2k/mo

specnpm:@vltpkg/spec

BSD-2

Package specifier parsing for registry, git, file, and remote specs.

657.9k/mo

tarnpm:@vltpkg/tar

BSD-2

Tar pack and unpack with streaming support.

129.4k/mo

typesnpm:@vltpkg/types

BSD-2

Shared TypeScript type definitions for the vlt ecosystem.

273.2k/mo

url-opennpm:@vltpkg/url-open

BSD-2

Open URLs in the default browser across platforms.

850/mo

vlt-jsonnpm:@vltpkg/vlt-json

BSD-2

Read and write vlt.json project configuration files.

846/mo

vsrnpm:@vltpkg/vsr

BSD-2

npm-compatible registry oriented toward development, testing, and CI—lightweight to deploy and run beside your tooling.

48/mo

vlxnpm:@vltpkg/vlx

BSD-2

Execute packages without installing — vlt's package runner.

487/mo

whichnpm:@vltpkg/which

ISC

Find executables in the PATH, cross-platform.

129.2k/mo

workspacesnpm:@vltpkg/workspaces

BSD-2

Workspace discovery and configuration for monorepo projects.

129.2k/mo

xdgnpm:@vltpkg/xdg

BSD-2

XDG Base Directory paths for cache, config, and data.

131.5k/mo

Investing in the ecosystem

Our team has contributed to the open source ecosystem for decades. We're proud members of the Open Source Pledge alongside Sentry, Astral, Val Town, and others — for 2025/26 that's $14,000 across our four full-time engineers ($3,500 per engineer annually).

Recipient2024/252025/26

OpenJS FoundationSilver Member

Node.js, ESLint, Electron, Express, Webpack, Fastify, nvm & more

$5,000$5,000

npmxPatron

—$6,000

pnpmSponsor Badge

$500$900

ViteBronze Sponsor

—$600

e18eSponsor

—$600

Alexander Akait (postcss-selector-parser)

—$600

oxcBronze Sponsor

—$300

typescript-eslint

$500—

Yusuke Wada (Hono)

$500—

Daishi Kato (Zustand)

$500—

Total$7,000$14,000

Read about our pledge

community leadership

Our team gives back

Beyond financial contributions, our team actively leads, maintains, and contributes to foundational open source projects across the JavaScript ecosystem.

Darcy Clarke

Decades of open source leadership across the JavaScript ecosystem. Continues to contribute to OpenJS Foundation initiatives including the Cross Project Council (CPC) and broader governance efforts.

95 repos63k+ stars1.7k followers100 npm packages

OpenJS Foundation CPCnpm AlumnijQuery Alumni

Ruy Adorno

Co-chair of the Node.js Technical Steering Committee (TSC). Has helped shepherd numerous Node.js releases, contributed to npm/cli, and continues to shape the direction of the runtime that powers the modern web.

247 repos3.4k stars909 followers127 npm packages

Node.js TSC Co-ChairNode.js Releasesnpm Alumni

Luke Karrys

Active maintainer of node-gyp (10.5k stars) — one of the most critical tools in the Node.js ecosystem, responsible for compiling native addon modules across every major platform.

124 repos10.5k+ stars700 followers85 npm packages

node-gyp Maintainernpm Alumni

Evert Pot

Creator of Curveball, @badgateway/oauth2-client, and co-creator of sabre/dav (1.7k stars). Active contributor to web standards and HTTP specification work.

179 repos825 stars468 followers92 npm packages

@badgateway/oauth2-clientWeb Standards

Maintainer Program

Free accounts for open source maintainers

If you maintain critical open source infrastructure, we want to support your work. The vlt Open Source Maintainer Program provides free Pro accounts to qualifying maintainers and contributors.

Learn more and apply