aube

Use aube as the Node.js package manager, installed and pinned through mise. aube is jdx's fast, security-first package manager (https://aube.jdx.dev/); this skill captures the how we use it here decisions, not the official reference.

Quick start

Install and pin aube via mise (not standalone). Daily work goes through aubr <script> (= aube run); CI uses aube ci (frozen lockfile). Keep a Dependabot-compatible lockfile, keep one version source in mise.toml, and accept aube's strict supply-chain defaults.

Core conventions