upm launches tiny npm replacement

upm makes a compelling case that package managers have become unnecessarily heavy, especially in CI and embedded developer tooling.

• –Uses Node.js built-ins instead of shipping a large native binary
• –Reuses a shared content-addressed store for cheaper repeat installs
• –Defaults to a one-day release-age delay and skips lifecycle scripts for safer installs
• –Existing lockfile support lowers migration friction, though workspaces and Git dependencies remain limited
• –The importable API could make dependency installation practical inside other developer tools