Documentation

Read once. Never think about the supply chain again.

Six short guides — most under 10 minutes. A REST API reference for automation, and a threat model for the security-minded.

Consumer setup

2 min

Verify every dependency in 2 minutes.

Publisher setup

5 min

Create a DID, attest, publish.

Policy reference

15 min

Every npmvc-policy.json key, documented.

REST API

20 min

Every endpoint, every response shape.

CI/CD integration

8 min

GitHub Actions, GitLab CI.

Key management

10 min

Backup, rotation, recovery, env vars.