Lint an npm or yarn lockfile to analyze and detect security issues

An inter-process and inter-machine lockfile utility that works on a local or network file system.

🔒 Your lockfile, up to date, all the time

Use `npx aud` instead of `npm audit`, whether you have a lockfile or not!

Use npm's Arborist to get a dependency tree for a package.

Migrate your npm shrinkwrap to a yarn lockfile without a headache

Safely generate an npm lockfile and output it to the filename of your choice.

Prevent committing lockfiles

Lockfiles have needs too and this package takes care of them

Detect lockfiles in the working directory

Package Overmanager. Easy CLI shortcuts for npm, pnpm, Yarn and Lerna.

parse lockfiles of npm, yarn, pnpm. generic lockfile parser for javascript, to get the deep tree of dependencies, without deduplication. alternative to snyk-nodejs-lockfile-parser

Check if a `package-lock.json` is present in the working directory

Delete `node_modules` and lockfiles

Lock-Distill is a tool designed to create "minimal" lockfiles to be used when building OCI/Docker images, in the context of monorepos.

Zero-dependency heuristic scanner CLI to detect supply chain attacks in node_modules. Detects malicious install scripts, network access, env exfiltration, lockfile integrity, obfuscated code, and suspicious patterns. Works fully offline.

Create a simple one-line mutex, useful for shell scripts.

Check if `npm-shrinkwrap.json` is present in the working directory

Yarn plugin to pin dependencies to their currently resolved version. Available for Yarn v2 and Yarn v3

A CLI tool for checking and reporting justification of inclusion of NodeJS packages based on Yarn lock file