Lint an npm or yarn lockfile to analyze and detect security issues

A collection of manifest and lockfile examples from package managers across different programming language ecosystems.

Reimagining package management in a simplified manner

Dante is a Python dependency validation tool

A simple file-locking utility

This is a complete implementation of the tutorial on DIY lock files

Retrieve information on installed packages across npm, pnpm and yarn.

This is an incomplete copy of the tutorial https://ep2024.europython.eu/session/what-do-lockfiles-pin-actually-let-s-dig-in-and-get-our-hands-dirty

Check that the correct lockfile is present in a JavaScript project, and that no unnecessary lockfiles are added.

⚙️ Node.js tool that detects when your npm/yarn/pnpm lockfiles change after git operations

A lockfile parser in python. Currently supports Cargo.lock and poetry.lock

Update lockfiles from multiple package managers simultaneously and commit the results.