Skip to content

v0.1.0

Choose a tag to compare

@wangxpych wangxpych released this 28 Aug 18:54

First public release of lockfile-review.\n\nHighlights:\n- Review pnpm v9 dependency intent without installing packages.\n- Detect unrelated lockfile changes and unexpected downgrades.\n- Detect package.json/root importer drift and semantic-only YAML churn.\n- Use as a Docker GitHub Action or a cross-platform single-file CLI.\n- Declare expected targets for lockfile-only security updates.\n\nSee the README and changelog for usage and current scope.