Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Vlt 1.0 and Hosted Package Registries

vlt.io

Post reply on HN
Print view View original

11–20 of 21 posts

Re: Vlt 1.0 and Hosted Package Registries

#11

Post by baq »

clarke78 wrote: post #7
thataccount wrote: post #5

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

5s: save time & money 10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations). 20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtim…

...can you make the 5s pitch be more like 'X times faster than pnpm and more secure' but fill X for me? unless it isn't pnpm at all in which case replace with 'it does X' because I've no idea after reading your post and a quick skim of the announcement itself?

Re: Vlt 1.0 and Hosted Package Registries

#13

Post by clarke78 »

baq wrote: post #11
clarke78 wrote: post #7

Earlier quoted context omitted.

5s: save time & money 10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations). 20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtim…

...can you make the 5s pitch be more like 'X times faster than pnpm and more secure' but fill X for me? unless it isn't pnpm at all in which case replace with 'it does X' because I've no idea after reading your post and a quick skim of the announcement itself?

Perf is highly nuanced but we've been doing realistic benchmarking for the ecosystem for almost a year now: https://benchmarks.vlt.sh/

We've got more improvements coming soon but we're a roughly ~10-40% faster registry then npm out-of-the-box. Compared to incumbent enterprise registries we're like ~3x.

Re: Vlt 1.0 and Hosted Package Registries

#15

Post by xixixao »

clarke78 wrote: post #7
thataccount wrote: post #5

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

5s: save time & money 10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations). 20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtim…

jFrog is horrendous, so can you also tackle Python please?

Re: Vlt 1.0 and Hosted Package Registries

#16

Post by skrebbel »

clarke78 wrote: post #7
thataccount wrote: post #5

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

5s: save time & money 10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations). 20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtim…

Yeah but what is it?

Re: Vlt 1.0 and Hosted Package Registries

#19

Post by esafak »

skrebbel wrote: post #16
clarke78 wrote: post #7

Earlier quoted context omitted.

5s: save time & money 10s: vlt helps engineering teams build JavaScript software faster, reduce supply chain risk, and lower infrastructure costs (via. API perf / payload optimizations). 20s: If you've used npm for years & are just narrowly escaping the various malware attacks or are on the hook for running up CI/agent bills at work because cold installs are X percent of the time compared to your actual builds/runtim…

Yeah but what is it?

Package registry for Javascript; like npm but your own so you can lock it down.

Re: Vlt 1.0 and Hosted Package Registries

#20

Post by d_sc »

Can anyone from vlt explain the inconsistencies in their performance over time graph? When I compare it w/ the npm baseline, it looks like it fluctuates between being ~4s faster typically but then there are periods where the performance is worse.

I appreciate the transparency that the company has showing their performance, the early August degradation has me wondering what’s going on.

Post reply on HN