vlt 1.0 Ships as a Drop-in npm Replacement with Phased Installs, Graph Queries, and Malware-Blocking
<img src="https://res.infoq.com/news/2026/09/vlt-npm-replacement/en/headerimage/generatedHeaderImage-1788539629791.jpg"/><p>vlt, created by the original npm team, has launched version 1.0 as a drop-in replacement for npm. It features phased installations to prevent automatic script execution, a queryable dependency graph with over 60 selectors, and hosted registries that block malicious packages.…