split · split · Apr 1, 2026 · Apr 1, 2026 · Apr 1, 2026 · Apr 1, 2026
diff --git a/AGENTS.md b/AGENTS.md
@@ -1,25 +1,32 @@
 ## Code style
+
 - Pure functions preferred; side effects only at I/O boundaries
 - Name files after what they do: `parse-pnpm-lockfile.ts`, `resolve-affected-packages.ts`
 - No force casts (`as Foo`) — use type guards and narrowing
 - Imports require `.js` extensions (NodeNext module resolution)
 - Conventional commits for commit messages
 
 ## Architecture
+
 Vertical slice — one package per concern:
+
 - `@lockfile-affected/core` — pure domain logic, cli and adapter agnostic
 - `@lockfile-affected/lockfile-*` — one package per lockfile format
 - `@lockfile-affected/cli` — I/O boundary, orchestration
 
 ## Adding a lockfile format
+
 1. Create `packages/lockfile-<format>/`
 2. Export a `LockfileParser` from `@lockfile-affected/core`
 3. Write tests against fixture content before implementing
 4. Register the parser in `@lockfile-affected/cli`
 
 ## Feedback loop
+
 After every change:
+
 ```
-pnpm test && pnpm typecheck && pnpm format:check
+pnpm test && pnpm typecheck && pnpm format:check && pnpm lint
 ```
+
 Write tests before implementation. One logical change per commit.
diff --git a/packages/cli/README.md b/packages/cli/README.md
@@ -3,6 +3,8 @@
 [![CI](https://github.com/split/lockfile-affected/actions/workflows/ci.yml/badge.svg)](https://github.com/split/lockfile-affected/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/lockfile-affected)](https://www.npmjs.com/package/lockfile-affected)
 
+> **Warning:** This tool is still in early development. The API may change, and some features are incomplete or not yet fully tested. Use in production at your own risk.
+
 Find which workspace packages are affected by lockfile changes.
 
 ## Purpose

diff --git a/packages/cli/e2e/fixtures/bun-root-deps-affect-all/after-bun.lock b/packages/cli/e2e/fixtures/bun-root-deps-affect-all/after-bun.lock
@@ -0,0 +1,26 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "test-monorepo",
+      "dependencies": {
+        "lodash": "^4.17.0"
+      },
+      "devDependencies": {
+        "vitest": "^1.0.0"
+      }
+    },
+    "packages/pkg-a": {
+      "name": "pkg-a",
+      "version": "1.0.0",
+      "dependencies": {}
+    }
+  },
+  "packages": {
+    "lodash": ["lodash@4.17.22", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w=="],
+    "lodash@4.17.22": ["lodash@4.17.22", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w=="],
+    "vitest": ["vitest@1.0.0", "", {}, "sha512-dummy"],
+    "vitest@1.0.0": ["vitest@1.0.0", "", {}, "sha100-dummy"]
+  }
+}
diff --git a/packages/cli/e2e/fixtures/bun-root-deps-affect-all/before-bun.lock b/packages/cli/e2e/fixtures/bun-root-deps-affect-all/before-bun.lock
@@ -0,0 +1,26 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "test-monorepo",
+      "dependencies": {
+        "lodash": "^4.17.0"
+      },
+      "devDependencies": {
+        "vitest": "^1.0.0"
+      }
+    },
+    "packages/pkg-a": {
+      "name": "pkg-a",
+      "version": "1.0.0",
+      "dependencies": {}
+    }
+  },
+  "packages": {
+    "lodash": ["lodash@4.17.21", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w=="],
+    "lodash@4.17.21": ["lodash@4.17.21", "", {}, "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w=="],
+    "vitest": ["vitest@1.0.0", "", {}, "sha512-dummy"],
+    "vitest@1.0.0": ["vitest@1.0.0", "", {}, "sha512-dummy"]
+  }
+}
diff --git a/packages/cli/e2e/fixtures/bun-root-deps-affect-all/workspace/package.json b/packages/cli/e2e/fixtures/bun-root-deps-affect-all/workspace/package.json
@@ -0,0 +1,13 @@
+{
+  "name": "test-monorepo",
+  "private": true,
+  "workspaces": [
+    "packages/*"
+  ],
+  "dependencies": {
+    "lodash": "^4.17.0"
+  },
+  "devDependencies": {
+    "vitest": "^1.0.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/bun-root-deps-affect-all/workspace/packages/pkg-a/package.json b/packages/cli/e2e/fixtures/bun-root-deps-affect-all/workspace/packages/pkg-a/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "pkg-a",
+  "version": "1.0.0",
+  "dependencies": {
+    "lodash": "^4.17.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/npm-root-deps-affect-all/after-package-lock.json b/packages/cli/e2e/fixtures/npm-root-deps-affect-all/after-package-lock.json
diff --git a/packages/cli/e2e/fixtures/npm-root-deps-affect-all/before-package-lock.json b/packages/cli/e2e/fixtures/npm-root-deps-affect-all/before-package-lock.json
diff --git a/packages/cli/e2e/fixtures/npm-root-deps-affect-all/workspace/package.json b/packages/cli/e2e/fixtures/npm-root-deps-affect-all/workspace/package.json
@@ -0,0 +1,13 @@
+{
+  "name": "test-monorepo",
+  "private": true,
+  "workspaces": [
+    "packages/*"
+  ],
+  "dependencies": {
+    "lodash": "^4.17.0"
+  },
+  "devDependencies": {
+    "vitest": "^1.0.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/npm-root-deps-affect-all/workspace/packages/pkg-a/package.json b/packages/cli/e2e/fixtures/npm-root-deps-affect-all/workspace/packages/pkg-a/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "pkg-a",
+  "version": "1.0.0",
+  "dependencies": {
+    "lodash": "^4.17.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/after-pnpm-lock.yaml b/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/after-pnpm-lock.yaml
diff --git a/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/before-pnpm-lock.yaml b/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/before-pnpm-lock.yaml
diff --git a/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/workspace/package.json b/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/workspace/package.json
@@ -0,0 +1,13 @@
+{
+  "name": "test-monorepo",
+  "private": true,
+  "workspaces": [
+    "packages/*"
+  ],
+  "dependencies": {
+    "lodash": "^4.17.0"
+  },
+  "devDependencies": {
+    "vitest": "^1.0.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/workspace/packages/pkg-a/package.json b/packages/cli/e2e/fixtures/pnpm-root-deps-affect-all/workspace/packages/pkg-a/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "pkg-a",
+  "version": "1.0.0",
+  "dependencies": {
+    "lodash": "^4.17.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/after-yarn.lock b/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/after-yarn.lock
@@ -0,0 +1,26 @@
+# yarn.lock - Yarn Berry (v4) format
+
+__metadata:
+  version: 6
+  cacheKey: 8
+
+"lodash@npm:^4.17.20":
+  version: 4.17.22
+  resolution: "lodash@npm:4.17.22"
+  checksum: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w==
+  languageName: node
+  linkType: hard
+
+"vitest@npm:^1.0.0":
+  version: 1.0.0
+  resolution: "vitest@npm:1.0.0"
+  checksum: sha512-dummy
+  languageName: node
+  linkType: hard
+
+"pkg-a@workspace:packages/pkg-a":
+  version: 1.0.0
+  resolution: "pkg-a@workspace:packages/pkg-a"
+  checksum: sha512-pkg-a-1-0-0
+  languageName: node
+  linkType: soft
diff --git a/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/before-yarn.lock b/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/before-yarn.lock
@@ -0,0 +1,26 @@
+# yarn.lock - Yarn Berry (v4) format
+
+__metadata:
+  version: 6
+  cacheKey: 8
+
+"lodash@npm:^4.17.20":
+  version: 4.17.21
+  resolution: "lodash@npm:4.17.21"
+  checksum: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZbet2yk9dzQ1uFR5/0w==
+  languageName: node
+  linkType: hard
+
+"vitest@npm:^1.0.0":
+  version: 1.0.0
+  resolution: "vitest@npm:1.0.0"
+  checksum: sha512-dummy
+  languageName: node
+  linkType: hard
+
+"pkg-a@workspace:packages/pkg-a":
+  version: 1.0.0
+  resolution: "pkg-a@workspace:packages/pkg-a"
+  checksum: sha512-pkg-a-1-0-0
+  languageName: node
+  linkType: soft
diff --git a/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/workspace/package.json b/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/workspace/package.json
@@ -0,0 +1,13 @@
+{
+  "name": "test-monorepo",
+  "private": true,
+  "workspaces": [
+    "packages/*"
+  ],
+  "dependencies": {
+    "lodash": "^4.17.0"
+  },
+  "devDependencies": {
+    "vitest": "^1.0.0"
+  }
+}
diff --git a/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/workspace/packages/pkg-a/package.json b/packages/cli/e2e/fixtures/yarn-root-deps-affect-all/workspace/packages/pkg-a/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "pkg-a",
+  "version": "1.0.0",
+  "dependencies": {
+    "lodash": "^4.17.0"
+  }
+}