
Product
Socket for Jira Is Now Available
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.
@vltpkg/dep-id
Advanced tools
A library for serializing dependencies into terse string identifiers,
and turning those serialized identifiers back into Spec objects.
import {
getId,
getTuple,
hydrate,
hydrateTuple,
joinDepIDTuple,
splitDepID,
} from '@vltpkg/dep-id'
import { manifest } from '@vltpkg/package-info'
{
// default registry
const spec = Spec.parse('x@latest')
const mani = await manifest(spec)
const id = getId(spec, mani) // registry;;x@1.2.3
}
{
// not default registry
const spec = Spec.parse('x@vlt:y@latest', {
registries: { vlt: 'http://vlt.sh' },
})
const mani = await manifest(spec)
const id = getId(spec, mani) // registry;vlt;y@latest
}
{
// git, hosted
const spec = Spec.parse('x@github:a/b#branch')
const mani = await manifest(spec)
const id = getId(spec, mani) // git;github:a/b;branch
}
// Hydrate by providing a name, and options for the spec creation
const spec = hydrate('git;github:a/b;branch', 'x') // x@github:a/b#branch
multiple different spec/manifest combinations can result in the same
identifier. For example, the specifiers x@npm:y@latest and
asdf@npm:y@1.x might both ultimately resolve to the same package, so
they only need to appear in the store once.
An isomorphic API @vltpkg/dep-id/browser is provided for use in the
browser.
FAQs
create and hydrate dependency IDs
The npm package @vltpkg/dep-id receives a total of 45,549 weekly downloads. As such, @vltpkg/dep-id popularity was classified as popular.
We found that @vltpkg/dep-id demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.

Company News
Socket won two 2026 Reppy Awards from RepVue, ranking in the top 5% of all sales orgs. AE Alexandra Lister shares what it's like to grow a sales career here.

Security News
NIST will stop enriching most CVEs under a new risk-based model, narrowing the NVD's scope as vulnerability submissions continue to surge.