#lockfile

Isolate monorepo packages to form a self-contained deployable unit

Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.

The authoritative definition of the GitHub Actions dependency lockfile format, plus a Go parser for auditing and verifying the action pins in use across a repo's workflows.

Inventory installed Ansible content — collections and roles — and emit a lockfile, drift report, and CycloneDX BOM

Checksums for GitHub Actions.

Tooling to manage the `pyodide-lock.json` file

Typosquat detector for AI coding agent dependencies

Explain any lockfile change: bumps release-verified against 22 registries, vulns (OSV), ages, deprecations, typosquats, integrity tampering — 61 formats incl. pdm.lock, vcpkg, mise.lock, build.gradle, pom.xml, go.sum, GitHub Actions, GitLab CI, Dockerfiles, Kubernetes, Helm, SBOMs. CLI + CI gate + MCP server + playground. By an AI agent.