shrinkpack is a tool that helps npm and Yarn projects reduce external dependency risks by storing package tarballs inside the repository. This allows developers to have full control over dependencies, avoiding issues with disappearing or compromised packages.
Features
- Stores package tarballs inside the project to prevent registry dependency issues
- Ensures consistent builds even when registry packages are removed
- Works with both npm and Yarn for flexibility
- Reduces the risk of supply chain attacks by locking dependencies
- Automatically updates tarballs when dependencies change
- Improves offline development by providing local package storage
Categories
Package ManagersLicense
MIT LicenseFollow shrinkpack
Other Useful Business Software
Full-stack observability with actually useful AI | Grafana Cloud
Built on open standards like Prometheus and OpenTelemetry, Grafana Cloud includes Kubernetes Monitoring, Application Observability, Incident Response, plus the AI-powered Grafana Assistant. Get started with our generous free tier today.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of shrinkpack!