Next-Gen JavaScript Package Management with Ruy Adorno and Darcy Clarke

14 snips

Jan 22, 2026

Darcy Clarke and Ruy Adorno, veterans in the JavaScript world, discuss their innovative project, Vault, aimed at rethinking package management. With their extensive experience in npm and Node.js, they explore the limitations of current tools and share insights on performance bottlenecks, dependency conflicts, and security concerns. Their discussions include new features like a CSS-inspired query language, self-hosted registries, and real-time security scanning, promising to reshape how developers handle JavaScript package management in the future.

Ask episode

AI Snips

Chapters

Books

Transcript

Episode notes

ANECDOTE

From NPM To Volt

Darcy Clarke joined the npm company in 2019, experienced its acquisition by GitHub, then Microsoft, and supported the world's largest registry.
She and Ruy Adorno later left to start Volt and continue work on package tooling.

INSIGHT

Role Of Package Managers

Package managers coordinate where runtimes look for modules and where to place installed packages for consistency and security.
Darcy Clarke emphasizes package managers keep code evergreen and provide update awareness that raw CDNs lacked.

INSIGHT

Server-Side Registry Innovation

Most registry APIs haven't changed in 15+ years, so clients optimize only on the client side with diminishing returns.
Volt targets server-side registry innovation (VSR) to cache resolved graphs and reduce redundant edge compute.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

Package management sits at the foundation of modern software development, quietly powering nearly every software project in the world. Tools like npm and Yarn have long been the core of the JavaScript ecosystem, enabling developers to install, update, and share code with ease. But as projects grow larger and the ecosystem more complex, this older infrastructure is beginning to show its limits with performance bottlenecks, dependency conflicts, and growing concerns around supply chain security.

Darcy Clarke and Ruy Adorno are veterans of this ecosystem. Both spent years maintaining the npm CLI and helping guide the Node.js project, where they saw firsthand the technical debt and design tradeoffs that define modern JavaScript tooling. Now they’re building vlt, a new package manager and registry that rethinks performance, security, and developer experience from the ground up.

In this episode, Darcy and Ruy join Josh Goldberg to discuss how vlt works, why they believe package management needs a server-side reboot, what lessons they’ve drawn from npm’s evolution, and how features like declarative querying, self-hosted registries, and real-time security scanning could reshape how developers build and share JavaScript in the years ahead.

Josh Goldberg is an independent full time open source developer in the TypeScript ecosystem. He works on projects that help developers write better TypeScript more easily, most notably on typescript-eslint: the tooling that enables ESLint and Prettier to run on TypeScript code. Josh regularly contributes to open source projects in the ecosystem such as ESLint and TypeScript. Josh is a Microsoft MVP for developer technologies and the author of the acclaimed Learning TypeScript (O’Reilly), a cherished resource for any developer seeking to learn TypeScript without any prior experience outside of JavaScript. Josh regularly presents talks and workshops at bootcamps, conferences, and meetups to share knowledge on TypeScript, static analysis, open source, and general frontend and web development.

Please click here to see the transcript of this episode.

Sponsorship inquiries: sponsor@softwareengineeringdaily.com

The post Next-Gen JavaScript Package Management with Ruy Adorno and Darcy Clarke appeared first on Software Engineering Daily.