js package manager with signed packages and identical builds - View it on GitHub