5s: save time &amp; money10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf &#x2F; payload optimizations).20s: If you&#x27;ve used npm for years &amp; are just narrowly escaping the various malware attacks or are on the hook for running up CI&#x2F;agent bills at work because cold installs are X percent of the time compared to your actual builds&#x2F;runtime, then you should check us out.22s: Also, &lt;insert jFrog grumble&gt;.

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

This will benefit the entire ecosystem.
Well done.

So this is advertising as a secure npm?

Founder here - thanks for the vote of confidence! We&#x27;ve got a lot more in store.

Over a year I joined the waitlist and almost forgot that I did. Today the registry is open to deliver on its promises—secure the supply chain.

This is coming imminently but appreciate the feedback &amp; will push to get this landed here quickly. That said, our client does support OIDC publishing if your registry does so hopefully you&#x27;ll still find value there as it&#x27;s a major step up from legacy npm clients.

Without identity federation via oidc it’s basically not really a replacement for verdaccio

Vlt 1.0 and Hosted Package Registries