jdx/aube

Health v2 · maintenance only

Flags: young

Adoption not part of the score

1925 stars · 60 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

aube is a fast Node.js package manager written in Rust that auto-installs dependencies when you run scripts, with secure defaults like a lifecycle-script jail and trust-downgrade protection. It reads and writes existing lockfiles (pnpm-lock.yaml, package-lock., yarn.lock, bun.lock) in place and uses a global content-addressable store to reduce disk usage.

Use cases

• install node dependencies faster than pnpm or bun
• avoid forgetting to install dependencies before running scripts
• use existing lockfiles without team-wide migration
• reduce disk usage across multiple node projects
• block malicious lifecycle scripts during package installs
• run one-off tools without installing them globally
• pin and switch node versions per project

When to choose

• you want the fastest available node package manager with secure defaults
• your team uses pnpm/npm/yarn/bun lockfiles and you don't want to migrate
• you're concerned about supply-chain attacks via lifecycle scripts
• you work across many projects and want to save disk space

When to avoid

• you need a very mature tool with a large ecosystem and plugin support
• you rely on package-manager features aube doesn't implement yet
• your CI requires tooling only available in npm/yarn workspaces conventions

Facets

cli-tool · maturity active

package-manager security cli developer-tools developer-tools web-development security windows cli cross-platform nodejs npm pnpm lockfile-compatibility content-addressable-store lifecycle-script-jail rust javascript command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jdx/aube")