Profile avatar
darcyclarke.me
@vlt.sh Founder / CEO Prev: GitHub, npm & Themify Co-Founder
50 posts 1,600 followers 105 following
Regular Contributor
Active Commenter

Watching @bizza.pizza speak at @github.com HQ like it's early 2020... only took 5+ years & me quitting to finally see the inside of this office πŸ€¦πŸ»β€β™‚οΈ Continue Dev landed a good one

ℹ️ I'm in πŸ‡ΊπŸ‡Έ SF all this week for the ai.engineer conference; if you're around DM & let's hang.

JSR now supports @vlt.sh πŸŽ‰

βš‘οΈπŸ“¦ Wherever your packages are, we're there... `$ vlt i jsr:@hono/hono`

$ vlx all-the-things

vlt client: query package data for security information (provided by Socket) @ruyadorno.com @vlt.sh blog.vlt.sh/blog/insight... #ECMAScript #JavaScript

πŸš€ The @vlt.sh team just launched real-time dependency analysis powered by Socket! Developers can now explore supply chain risks directly in their graph, with rich security metadata from Socket built in. More on the integration β†’ socket.dev/blog/vlt-lau... #JavaScript

πŸš€ Querying dep graphs w/ @vlt.sh is even more powerful today w/ the introduction of @socket.dev's first-class security insights. There's 30+ new selectors & all kinds of data to explore. For Automation/CI purposes we've also added a new `--expects-results=<numeric>` flag to `vlt query`. Try it out!

The vibes these days... #PromptAndPray

Big feels today

We're back in business! Big thanks to @voodootikigod.bsky.social & @openjs.bsky.social for bringing JSConf back to NA ❀️ The whole @vlt.sh team will be there & hopefully many old & new faces. Get an early bird ticket before they are gone! events.linuxfoundation.org/jsconf-north...

Watching @mhdawson.bsky.social share how the @nodejs.org project works/collaborates & the Next-10 Initiative/WG #nodejs #future

🎀 I had two amazing talks here @ @confooca.bsky.social over the last two days. Big thanks to Yann & the team that run this amazing πŸ‡¨πŸ‡¦ conference here in Montreal. If you want to check out my slide decks they are: πŸ”„ Securing the JS Ecosystem with Reproducibility: tinyurl.com/reproduce-2025 And...

The @vlt.sh team launched "reproduce" today, an #OSS tool that verifies if npm packages match their source code. With recent supply chain attacks exposing provenance limitations, this approach is already showing better adoption rates than traditional methods. ➳ socket.dev/blog/vlt-lau... #JavaScript

For folks in πŸ‡¨πŸ‡¦ Montreal today for @confooca.bsky.social - I'll be talking all things "reproducibility" & `reproduce` @ 2pm in Outremont 4. Come check it out! bsky.app/profile/darc... #confoo #montreal #npm #javascript

πŸš€ We just launched `$ npx reproduce <pkg>`

πŸ”₯ Our new Design Engineer Jason Korol wrote up an awesome article on some recent ships related to the @vlt.sh GUI, including: πŸ’Ύ Saved Queries 🏷️ Labelling πŸ” Interactive Dep Management πŸ–ΌοΈ Improved Metadata #gui #interactive #dashboard #query #interactive #dependencies

remix.run/jam/2025

A great talk by @lukekarrys.com on performing lockfile surgery which is getting much easier with @vlt.sh

Just recorded a @devtools.fm episode with @darcyclarke.me on vlt.sh This will be a must listen for JS devs