Extensions
Built on source-qualified versions.
Extensions use the version string itself (a source, a version, and now-meaningful build metadata) to carry more than a number. Each one is optional, composable, and grounded in the core spec.
Dependency Locks
Pin a resolved transitive subgraph ahead of time: a portable, shareable resolution seed that any aware tool can honour, override, or reject before generating its own lockfile.
npm:express@5.2.1+lock.…
Package Integrity
Carry a verifiable content digest inside the version itself, so software can be pinned and checked against its exact bytes, with no side file.
npm:react@18.2.0+sha512.…
Build Variants
Encode os, arch, abi and feature targets as build metadata, so one release addresses a whole family of artifacts, and a range can select a coherent platform subset.
napi:sharp@0.33.0+linux.x64.musl