aube
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
4recommend
0warn against
Apr 21, 2026first mention
Jun 24, 2026latest mention
Why people recommend it
“It has the strongest security posture of any node pm.”
Show 2 more
“It's great that it's faster but what I really liked was the safety configuration defaults”
Caveats and dissent
No one in these comments warned against it.
Often compared with
Threads where it came up
- I am worried about Bun 2 mentions
- Show HN: Nub – A Bun-like all-in-one toolkit for Node.js 1 mention
- Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised 1 mention
- TanStack NPM Packages Compromised 1 mention
- Aube: A fast Node.js package manager 1 mention
- aube: A New Dawn for Node Installs (from mise author) 1 mention
Also written as Aube. Data: aube.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 7
Certainly. We're using subtrees now instead of submodules, lets avoids some tricky worktree/submodule interactions during local dev. We've already pulled changes since that PR landed. https://github.com/nubjs/nub/commit/b4abee87
“now has a "jailBuilds" flag”
“It has the strongest security posture of any node pm.”
“released a faster alternative”
“Aube[0] seems interesting to me”
“aube was about 30% slower than pnpm in my testing”
“It's great that it's faster but what I really liked was the safety configuration defaults”