Installs consume the committed graph instead of silently rewriting it.
Predictable package management
Fast installs.
Auditable releases.
A JavaScript workspace package manager written in Go. Standard manifests and registries, strict lockfiles, controlled scripts, and deliberate release workflows.
$ curl -fsSL https://flog.run/install | sh $ flog install installed locked dependencies $ flog run build completed build
Designed for review
Boring where it matters.
Lifecycle scripts run only when the project deliberately permits them.
Build, test, pack, and publish selections share one package model.