Lint an npm or yarn lockfile to analyze and detect security issues

Reimagining package management in a simplified manner

Dante is a Python dependency validation tool

Retrieve information on installed packages across npm, pnpm and yarn.

A simple file-locking utility

Check that the correct lockfile is present in a JavaScript project, and that no unnecessary lockfiles are added.

This is an incomplete copy of the tutorial https://ep2024.europython.eu/session/what-do-lockfiles-pin-actually-let-s-dig-in-and-get-our-hands-dirty

This is a complete implementation of the tutorial on DIY lock files

Simple python scripts to update lockfiles and commit the result.

A lockfile parser in python. Currently supports Cargo.lock and poetry.lock