@lockfile-affected/core 0.1.4 → 0.2.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 split
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -10,7 +10,7 @@ npm install @lockfile-affected/core
 
 ## Programmatic API
 
-### `findAffectedPackages(options)` — high-level entry point
+### `findAffectedPackages(options)` - high-level entry point
 
 Parses two lockfile snapshots, diffs them, loads workspace manifests from disk,
 and returns the names of affected packages. This is the primary API for
@@ -25,7 +25,7 @@ const affected = await findAffectedPackages({
   afterContent: fs.readFileSync('pnpm-lock.yaml', 'utf-8'),
   parser: pnpmLockfileParser,
   workspaceRoot: process.cwd(),
-  // filter: { dependencies: true, devDependencies: true } — optional
+  // filter: { dependencies: true, devDependencies: true } - optional
 });
 // ReadonlySet<string> of affected package names
 ```
@@ -36,11 +36,12 @@ Finds the first known lockfile in `dir` by checking each parser's `lockfileNames
 
 ```ts
 import { detectLockfile } from '@lockfile-affected/core';
-import { pnpmLockfileParser, npmLockfileParser } from '...';
+import { pnpmLockfileParser, npmLockfileParser, yarnLockfileParser } from '...';
 
 const { format, path } = await detectLockfile(process.cwd(), [
   pnpmLockfileParser,
   npmLockfileParser,
+  yarnLockfileParser,
 ]);
 ```
 
@@ -65,9 +66,9 @@ These primitives are useful for building custom pipelines.
 import { diffLockfileSnapshots } from '@lockfile-affected/core';
 
 const diff = diffLockfileSnapshots(snapshotBefore, snapshotAfter);
-// diff.added   — Map<name, newVersion>
-// diff.removed — Map<name, oldVersion>
-// diff.changed — Map<name, { from, to }>
+// diff.added   - Map<name, newVersion>
+// diff.removed - Map<name, oldVersion>
+// diff.changed - Map<name, { from, to }>
 ```
 
 ### `resolveAffectedPackages(diff, workspaceGraph, filter?)`
@@ -113,9 +114,5 @@ type LockfileDiff = {
 };
 ```
 
-## Related packages
-
-- [`lockfile-affected`](https://www.npmjs.com/package/lockfile-affected) — CLI
-- [`@lockfile-affected/lockfile-pnpm`](https://www.npmjs.com/package/@lockfile-affected/lockfile-pnpm) — pnpm adapter
-- [`@lockfile-affected/lockfile-npm`](https://www.npmjs.com/package/@lockfile-affected/lockfile-npm) — npm adapter
-- [`@lockfile-affected/lockfile-yarn`](https://www.npmjs.com/package/@lockfile-affected/lockfile-yarn) — yarn adapter
+For Git-based and CI usage patterns, see the CLI guide:
+`https://github.com/split/lockfile-affected/tree/main/packages/cli#readme`.

package/dist/affected/find-affected-packages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"find-affected-packages.d.ts","sourceRoot":"","sources":["../../src/affected/find-affected-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMxG,MAAM,MAAM,mBAAmB,GAAG;IAChC,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAU9B"}
+{"version":3,"file":"find-affected-packages.d.ts","sourceRoot":"","sources":["../../src/affected/find-affected-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAM9B,MAAM,MAAM,mBAAmB,GAAG;IAChC,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAU9B"}

package/dist/affected/find-affected-packages.js

@@ -1,4 +1,4 @@
-import { ALL_DEPENDENCY_TYPES } from '../types/lockfile.js';
+import { ALL_DEPENDENCY_TYPES, } from '../types/lockfile.js';
 import { diffLockfileSnapshots } from '../diff/diff-lockfile-snapshots.js';
 import { resolveAffectedPackages } from './resolve-affected-packages.js';
 import { buildWorkspaceGraph } from '../workspace/build-workspace-graph.js';

package/dist/affected/find-affected-packages.js.map

@@ -1 +1 @@
-{"version":3,"file":"find-affected-packages.js","sourceRoot":"","sources":["../../src/affected/find-affected-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA8C,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAelF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA4B;IAE5B,MAAM,CAAC,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1C,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC;KAC9C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,uBAAuB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"find-affected-packages.js","sourceRoot":"","sources":["../../src/affected/find-affected-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAelF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA4B;IAE5B,MAAM,CAAC,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1C,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC;KAC9C,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,uBAAuB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC;AAC/F,CAAC"}

package/dist/lockfile/detect-lockfile.d.ts

@@ -7,6 +7,8 @@ export type DetectedLockfile = {
  * Finds the first known lockfile in `dir` by checking each parser's `lockfileNames`.
  * Returns the absolute path and the format name from the matching parser.
  * Throws if no lockfile is found.
+ *
+ * Supports: pnpm, npm, yarn, and bun lockfile formats.
  */
 export declare function detectLockfile(dir: string, parsers: readonly LockfileParser[]): Promise<DetectedLockfile>;
 //# sourceMappingURL=detect-lockfile.d.ts.map

package/dist/lockfile/detect-lockfile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect-lockfile.d.ts","sourceRoot":"","sources":["../../src/lockfile/detect-lockfile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,SAAS,cAAc,EAAE,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAe3B"}
+{"version":3,"file":"detect-lockfile.d.ts","sourceRoot":"","sources":["../../src/lockfile/detect-lockfile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,SAAS,cAAc,EAAE,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAe3B"}

package/dist/lockfile/detect-lockfile.js

@@ -4,6 +4,8 @@ import { join } from 'node:path';
  * Finds the first known lockfile in `dir` by checking each parser's `lockfileNames`.
  * Returns the absolute path and the format name from the matching parser.
  * Throws if no lockfile is found.
+ *
+ * Supports: pnpm, npm, yarn, and bun lockfile formats.
  */
 export async function detectLockfile(dir, parsers) {
     for (const parser of parsers) {

package/dist/lockfile/detect-lockfile.js.map

@@ -1 +1 @@
-{"version":3,"file":"detect-lockfile.js","sourceRoot":"","sources":["../../src/lockfile/detect-lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAkC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,sBAAsB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"detect-lockfile.js","sourceRoot":"","sources":["../../src/lockfile/detect-lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAkC;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,sBAAsB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/package.json

@@ -1,7 +1,12 @@
 {
   "name": "@lockfile-affected/core",
-  "version": "0.1.4",
+  "version": "0.2.2",
   "description": "Core diff engine and affected package resolver",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/split/lockfile-affected"
+  },
   "type": "module",
   "engines": {
     "node": ">=18"
@@ -11,7 +16,8 @@
     "README.md"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",