Knot.js — Dependencies without node

Knot is an experimental content-addressed execution framework for JavaScript and TypeScript. Declare what a program may use. Knot resolves, verifies, caches, and runs it.

git clone <project>
cd project
knot run

Traditional

project
└── node_modules
    ├── dependency
    ├── dependency
    ├── dependency
    └── thousands more files

Knot

project
│
└──────────────┐
               ↓
         Content Graph
               ↓
          ~/.knot/store
          ↙     ↓     ↘
      Project Project Project

What Knot actually does

Identifies artifacts by SHA-256, not folder location
Materializes packages when execution needs them
Refuses corrupt cache objects
Signs lockfiles with a developer key when you configure one
Verifies npm attestations without confusing content for publisher identity
Denies install scripts unless you allow them
Stays ejectable

Knot.js — Dependencies without node_modules

Traditional

Knot

What Knot actually does