crates.io
rustsec/rustsec
RustSec API & Tooling
Custom licenseOct 20, 2026 · metrics 2.10.0
All tags
Catalogue tag
#lockfile
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
20 records
Go
git-pkgs/manifests
A Go library for parsing package manager manifest and lockfiles.
MITSep 19, 2026 · metrics 2.10.0
npm
lirantal/lockfile-lint
Lint an npm or yarn lockfile to analyze and detect security issues
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
0x80/isolate-package
Isolate monorepo packages to form a self-contained deployable unit
MITSep 13, 2026 · metrics 2.10.0
Go
skills-lock/skil-lock
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
github/actions-lockfile
The authoritative definition of the GitHub Actions dependency lockfile format, plus a Go parser for auditing and verifying the action pins in use across a repo's workflows.
MITSep 16, 2026 · metrics 2.10.0
Go
jrjsmrtn/ansible-bom
Inventory installed Ansible content — collections and roles — and emit a lockfile, drift report, and CycloneDX BOM
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
chains-project/ghasum
Checksums for GitHub Actions.
Apache-2.0Oct 10, 2026 · metrics 2.10.0
PyPI
pyodide/pyodide-lock
Tooling to manage the `pyodide-lock.json` file
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
yunaremaia/taintrace
Typosquat detector for AI coding agent dependencies
MITOct 4, 2026 · metrics 2.10.0
Go
matteo-sung/lockvet
Explain any lockfile change: bumps release-verified against 22 registries, vulns (OSV), ages, deprecations, typosquats, integrity tampering — 61 formats incl. pdm.lock, vcpkg, mise.lock, build.gradle, pom.xml, go.sum, GitHub Actions, GitLab CI, Dockerfiles, Kubernetes, Helm, SBOMs. CLI + CI gate + MCP server + playground. By an AI agent.
MITAug 23, 2026 · metrics 2.10.0
Go
Conalh/tofulock
Lock & verify Terraform/OpenTofu module sources by commit digest - the integrity providers get from the native lockfile, but modules don't.
MITSep 14, 2026 · metrics 2.10.0
npm
tmokmss/lockfile-subset
Extract a subset of package-lock.json
MITSep 18, 2026 · metrics 2.10.0
npm
tiktok/pnpm-sync
Automatically resync injected dependencies when using the PNPM package manager
MITSep 27, 2026 · metrics 2.10.0
npm
DebadityaHait/skillcap-lock
Review what an Agent Skill can newly do, not just what bytes changed
MITSep 18, 2026 · metrics 2.10.0
PyPI
mwilliamson/locket.py
File-based locks for Python on Linux and Windows
BSD-2-ClauseAug 27, 2026 · metrics 2.10.0
Go
nightlyone/lockfile
Handle locking via pid files
MITOct 5, 2026 · metrics 2.10.0
PyPI
jazzband/pip-tools
A set of tools to keep your pinned Python dependencies fresh.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
moxystudio/node-proper-lockfile
An inter-process and inter-machine lockfile utility that works on a local or network file system.
MITSep 15, 2026 · metrics 2.10.0
npm
spencerbeggs/workspaces-effect
Effect-based library for working with npm, pnpm, yarn and Bun workspace protocols
MITOct 21, 2026 · metrics 2.10.0