shrinkpack is a tool that helps npm and Yarn projects reduce external dependency risks by storing package tarballs inside the repository. This allows developers to have full control over dependencies, avoiding issues with disappearing or compromised packages.

Features

  • Stores package tarballs inside the project to prevent registry dependency issues
  • Ensures consistent builds even when registry packages are removed
  • Works with both npm and Yarn for flexibility
  • Reduces the risk of supply chain attacks by locking dependencies
  • Automatically updates tarballs when dependencies change
  • Improves offline development by providing local package storage

Project Samples

shrinkpack Screenshot 1

Project Activity

See All Activity >