
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
flash-install
Advanced tools
Blazingly fast package installation for Node.js
A fast, drop-in replacement for npm install, focused on drastically speeding up Node.js dependency installation through deterministic caching, parallel operations, and .flashpack archive snapshotting.
.flashpack archives for instant dependency restorationnpm install -g flash-install
Replace your regular npm install command with flash-install:
flash-install
Create a .flashpack snapshot of your node_modules directory:
flash-install snapshot
Restore your node_modules from a .flashpack snapshot:
flash-install restore
Remove node_modules and local .flashpack file:
flash-install clean
Clean the global cache:
flash-install clean --global
Efficiently update dependencies without a full reinstall:
flash-install sync
View information about the global cache:
flash-install cache
Verify cache integrity:
flash-install cache --verify
Optimize cache storage:
flash-install cache --optimize
List installed plugins:
flash-install plugin list
Add a plugin:
flash-install plugin add <path-to-plugin>
Remove a plugin:
flash-install plugin remove <plugin-name>
-o, --offline: Use offline mode (requires cache or snapshot)--no-cache: Disable cache usage-c, --concurrency <number>: Number of concurrent installations-p, --package-manager <manager>: Package manager to use (npm, yarn, pnpm)--no-dev: Skip dev dependencies--skip-postinstall: Skip postinstall scripts-v, --verbose: Enable verbose logging-q, --quiet: Suppress all output except errors-f, --format <format>: Snapshot format (zip, tar, tar.gz)-c, --compression <level>: Compression level (0-9)-o, --output <path>: Custom output path for snapshot-s, --snapshot <path>: Path to snapshot file-g, --global: Clean global cache instead of project-a, --all: Clean both project and global cache--cache-max-age <days>: Maximum age for cache entries in days-f, --force: Force sync even if dependencies are up to date--skip-snapshot: Skip creating snapshot after sync--skip-cache: Skip using cache during sync--verify: Verify cache integrity--optimize: Optimize cache storageadd <path>: Add a plugin from a pathremove <name>: Remove a plugin by namelist: List all installed plugins.flashpack snapshot exists.flashpack snapshot with fingerprinting for future useflash-install includes a powerful plugin system that allows extending functionality through lifecycle hooks:
Plugins can be used for tasks like:
| Scenario | npm install | flash-install | Speedup |
|---|---|---|---|
| First install (small project) | 30-60s | 10-15s | 3-4x |
| First install (large project) | 3-5min | 1-2min | 2-3x |
| Subsequent install (from cache) | 30-60s | 5-10s | 6-10x |
| Subsequent install (from snapshot) | 30-60s | 1-3s | 20-30x |
| CI/CD environment | 1-3min | 5-15s | 10-20x |
Contributions are welcome! Please feel free to submit a Pull Request.
git checkout -b feature/amazing-feature)git commit -m 'Add some amazing feature')git push origin feature/amazing-feature)To publish a new version of flash-install to npm:
npm loginnpm run publish-packagenpm run buildnpm loginnpm publishMIT
FAQs
A fast, drop-in replacement for npm install with deterministic caching
We found that flash-install demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.