You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Feb 25, 2026. It is now read-only.
Copy file name to clipboardExpand all lines: README.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,13 +14,13 @@ The protocol addresses the inherent limitations of centralized package registrie
14
14
15
15
-**Decentralized Distribution:** Instead of a central server like npm or PyPI, Atom uses Git repositories as the source of truth. It leverages the distributed nature of Git to ensure that package availability is not tied to a single entity, eliminating a critical vulnerability in the software supply chain.
16
16
17
-
**Source as Truth:** Instead of copying source code into a registry, atoms are lightweight references to the same Git objects that comprise the original source code. This creates an unbreakable link between published packages and their origins, ensuring that the packaged code is always identical to the source.
17
+
-**Source as Truth:** Instead of copying source code into a registry, atoms are lightweight references to the same Git objects that comprise the original source code. This creates an unbreakable link between published packages and their origins, ensuring that the packaged code is always identical to the source.
18
18
19
-
**No Single Points of Failure:** Dependencies can be resolved from multiple mirrors or the original repository, ensuring availability even if one source becomes unavailable. This distributed approach means that a single registry outage or compromise cannot halt development.
19
+
-**No Single Points of Failure:** Dependencies can be resolved from multiple mirrors or the original repository, ensuring availability even if one source becomes unavailable. This distributed approach means that a single registry outage or compromise cannot halt development.
20
20
21
-
**Community-Driven Resilience:** Anyone can mirror an atom repository, creating a distributed network that cannot be taken down by any single entity. This community-driven approach ensures long-term availability and prevents vendor lock-in.
21
+
-**Community-Driven Resilience:** Anyone can mirror an atom repository, creating a distributed network that cannot be taken down by any single entity. This community-driven approach ensures long-term availability and prevents vendor lock-in.
22
22
23
-
**Practical Implications:** In a world where incidents like the `left-pad` npm package breaking the internet or the `xz-utils` backdoor demonstrate the fragility of centralized systems, Eka's decentralized approach ensures that critical dependencies remain available and verifiable, even during network outages or registry compromises.
23
+
-**Practical Implications:** In a world where incidents like the `left-pad` npm package breaking the internet or the `xz-utils` backdoor demonstrate the fragility of centralized systems, Eka's decentralized approach ensures that critical dependencies remain available and verifiable, even during network outages or registry compromises.
24
24
25
25
-**Designed for Efficiency:** By creating unambiguous, content-addressed cryptographic IDs for every package, Atom enables a future for highly efficient, decentralized build pipelines. This foundation allows for a system that is not only more secure and resilient but is also designed for high-performance, distributed build systems.
26
26
@@ -136,22 +136,22 @@ The `atom.lock` file captures the exact resolved state of all dependencies, crea
0 commit comments