
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@vltpkg/keychain
Advanced tools
The filesystem keychain for @vltpkg/registry-client
This is a tool to store and retrieve private keys for use in the
@vltpkg/registry-client.
import { Keychain } from '@vltpkg/keychain'
// define a keychain with a given application scope
const kc = new Keychain('vlt/auth')
// fetch the auth for a given origin, for example.
// will load file on demand when first get() called.
const auth = await kc.get('https://registry.npmjs.org')
// set a value like this
kc.set('https://some-registry.com', 'Bearer newtoken')
// will attempt to save on process end if there are pending
// writes, but only if the file has not been modified since.
// you can also trigger a write explicitly.
await kc.save()
FAQs
The filesystem keychain for `@vltpkg/registry-client`
The npm package @vltpkg/keychain receives a total of 46,653 weekly downloads. As such, @vltpkg/keychain popularity was classified as popular.
We found that @vltpkg/keychain demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.