Vlt 1.0 and Hosted Package Registries

I am not sure exactly what this service is or why it is desirable. Pitch me in five seconds or less?

This will benefit the entire ecosystem. Well done.

Over a year I joined the waitlist and almost forgot that I did. Today the registry is open to deliver on its promises—secure the supply chain.

So this is advertising as a secure npm?

Without identity federation via oidc it’s basically not really a replacement for verdaccio

[dead]