Vdm

Vendored Dependencies Manager

Pull dependency code right into your repo without sacrificing developer experience.

Install Vdm

  • curl -fsSL https://vdm.fyi/install.sh | sh
  • irm https://vdm.fyi/install.ps1 | iex

Why Vdm

    Protect from Supply Chain Attacks
    No more surprise updates with malicious code. Neither Shai-Hulud, Shia LaBeouf, nor any other malicious actor, can sneak into your dependencies unnoticed.
    Fight Dependencies Bloat
    Tired of lengthy package.json with single-function dependencies? Pull only the code you need and get rid of the rest. Now leftpad finally makes sense.
    Own Your Dependencies
    Your dependencies now are yours! Fix bugs, add bugs, and do whatever you want without waiting for a burnt-out maintainer to do it for you.
    AI-Assisted Review
    Everybody says you should read your dependencies' code. Now you actually will with the built-in AI review feature, whether you install a new dependency or update an existing one.
    Btw
    Vdm is built with Rust. Just saying.