
Research
Node.js Fixes AsyncLocalStorage Crash Bug That Could Take Down Production Servers
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.
@vltpkg/gui
Advanced tools
The vlt gui for visualizing dependencies in your project.
Create a .env file in the src/gui directory with your development
settings:
# Enable live reload for development
__VLT_INTERNAL_LIVE_RELOAD=1
# Optional: Simulate hosted environment (useful for testing auth and other hosted-only features)
# __VLT_FORCE_HOSTED=1
To start the esbuild dev server, run the gui watch script:
$ pnpm -F gui watch
In a separate terminal, run the app:
$ ./scripts/bins/vlt gui
Changes to src/gui will cause open browser windows to reload().
Note:
Environment variables are loaded from your
.envfile and injected at build time. If the esbuild dev server is not running, then requests will fallback to the static asset like normal and message will be logged in the browser.
__VLT_INTERNAL_LIVE_RELOADhas no effect on production builds. The code is stripped by esbuild from both the GUI and the CLI.__VLT_FORCE_HOSTEDforces the application to behave as if it's running in a hosted environment, disabling local GUI server features. This has no effect on production builds where hosted mode is determined automatically based on the hostname and port.
See the contributing guide for more information on how to build and develop the various workspaces.
This project is licensed under the Functional Source License (FSL-1.1-MIT).
FAQs
Look under the hood of a vlt install in HD
The npm package @vltpkg/gui receives a total of 12 weekly downloads. As such, @vltpkg/gui popularity was classified as not popular.
We found that @vltpkg/gui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.