upm Launches as a Fast, Tiny Package Manager Written in TypeScript

upm is a new prerelease TypeScript package manager for the npm registry created by Nuxt contributor Pooya Parsa, designed to provide fast installs while remaining small enough to embed directly in JavaScript tools. Built with Node.js native capabilities, it occupies roughly 250 KB, supports common commands and selected .npmrc settings, offers a JavaScript API, and can read certain npm, pnpm, and Bun lockfiles without replacing them. Its benchmarks show strong cold-install performance but less competitive warm-install results, while comparisons with larger tools may not fully reflect real CI workloads. upm emphasizes security by disabling automatic dependency lifecycle scripts and applying a configurable 24-hour delay before selecting newly released package versions. However, it remains limited by incomplete lockfile compatibility, missing support for Git and local dependencies, restricted peer dependency handling, no update or audit commands, and potential extra setup for packages that rely on installation scripts.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.