oxc package manager?

[chvanam]

It's a bit of a tangent, but It would seem like there is an opportunity for a oxc based package manager, taking the best from pnpm and competing with bun install in terms of speed!

Also, Vite+ having an vite install command (bootstrapping itself in the process) could be a desired feature, and a must for entreprise if it comes with security/audit best-practices!

[ild0tt0re]

Hey I come from the future. Im using Oxpm and It suggest me the best alternative of already installed packages, It alert me for CVEs, avoid packages duplication in my monorepo, and it is based on a smart registry that download only the changed files if I have different versions.

[chvanam]

Looks like I was close, given that vite install was presented during Vite Conf! A smart alias for npm/pnpm/yarn seems like a good start, but a full package manager would probably be the best!

[tt-a1i]

Interesting idea. The JS tooling ecosystem definitely has room for a faster package manager.

That said, package management is a massive undertaking - registry compatibility, lockfile handling, workspace support, security auditing, etc. It's a different problem domain than parsing/linting/formatting.

If oxc did go this route, I'd suggest focusing on what makes oxc unique:

• Leverage the fast parser for better package.json validation
• Use the resolver for smarter dependency deduplication
• Integrate with oxlint for security scanning during install

But honestly, pnpm is already quite fast and feature-complete. The wins might not justify the engineering effort when there's so much more to do on the core toolchain (formatter, transformer, bundler).