Get the latest tech news
JSR Is Not Another Package Manager
JSR introduces a new way to share JavaScript and TypeScript code across platforms, focusing on simplifying distribution without replacing existing package managers.
As a result, the npm registry and Node defaulted to CommonJS ( require), a system with fundamental flaws that made it unworkable in browsers. This clear gap in the ecosystem prompted the creation of JSR, not as another package manager but as a transformative registry designed to revolutionize how JavaScript and TypeScript are shared across server-side runtimes, browsers, and various tools. By integrating OIDC tokens with GitHub Actions, JSR creates advanced, verifiable provenance attestations using the Supply Chain Levels for Software Artifacts and stores them in Sigstore.
Or read this on Hacker News