lockscope 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 v01dst
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,99 @@
+<div align="center">
+
+<img src="assets/banner.svg" width="100%" alt="lockscope banner">
+
+# lockscope
+
+**Know exactly what changed in your package-lock.json.**
+
+[![npm version](https://img.shields.io/npm/v/lockscope)](https://www.npmjs.com/package/lockscope)
+[![CI](https://github.com/v01dst/lockscope/actions/workflows/ci.yml/badge.svg)](https://github.com/v01dst/lockscope/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
+![node >=18](https://img.shields.io/badge/node-%3E%3D18-blue)
+![zero runtime dependencies](https://img.shields.io/badge/runtime%20dependencies-0-brightgreen)
+
+</div>
+
+## ✨ Why lockscope?
+
+A 3,000-line `package-lock.json` diff tells you nothing. lockscope tells you everything: which packages appeared, which vanished, which changed — with **semver arrows** and **major/minor/patch bucketing** so you can spot the risky upgrades at a glance. Supports lockfile v1 *and* v2/v3 formats, and diffs across them.
+
+- 🔼 **Semver arrows** — `1.0.0 → 2.1.0` with color-coded majors
+- 🧮 **Summary** — `+added −removed ~changed (major · minor · patch)` totals
+- 🧩 **v1 ↔ v3** — diff legacy trees against modern lockfiles
+- 📦 **CLI + library** — use in scripts or import the API
+- 🪶 **Zero runtime dependencies** — TypeScript, ESM, tiny
+
+## 🖼️ Showcase
+
+```bash
+lockscope old-package-lock.json package-lock.json
+```
+
+<img src="assets/screenshot-diff.svg" alt="lockscope output" width="72%">
+
+## 📦 Install
+
+```bash
+npm install -g lockscope
+# one-shot
+npx lockscope old.json new.json
+```
+
+## 🚀 Usage
+
+```bash
+# compare against the last commit
+git show HEAD:package-lock.json > /tmp/old.lock
+lockscope /tmp/old.lock package-lock.json
+
+# audit a PR
+lockscope base.lock pr.lock --json | jq '.stats'
+
+# library
+import { parseLock, diffLocks, summarize } from "lockscope";
+```
+
+## ⚙️ Options
+
+| Flag             | Description                            |
+| ---------------- | -------------------------------------- |
+| `--json`         | `{ changes: [...], stats: {...} }`     |
+| `--only-changes` | hide the summary block                 |
+| `--color M`      | `always \| auto \| never`              |
+| `-V, --help`     | version / help                         |
+
+Exit codes: `0` compared · `2` bad input/unreadable file.
+
+## 🧩 Library API
+
+```ts
+import { parseLock, diffLocks, summarize, semverDelta } from "lockscope";
+
+const before = parseLock(oldJsonString);
+const after = parseLock(newJsonString);
+const changes = diffLocks(before, after);   // [{ kind: "changed", name: "a", from: "1.0.0", to: "2.1.0", dev: false }]
+const stats = summarize(changes, before, after); // { added: 0, removed: 0, changed: 1, major: 1, ... }
+```
+
+## 🛠️ Development
+
+```bash
+npm install
+npm test    # 13 tests: v1/v3 parsing, cross-format diffs, CLI e2e
+```
+
+## 🗺️ Roadmap
+
+- [ ] yarn.lock / pnpm-lock.yaml support
+- [ ] `--critical-only` (major bumps + security advisories via registry)
+- [ ] `--why` — transitive path explanation for a changed package
+- [ ] GitHub Action that comments the summary on PRs
+
+## 🤝 Contributing
+
+PRs welcome — `npm test` must pass, zero runtime deps stays.
+
+## 📄 License
+
+[MIT](LICENSE) © 2026 v01dst

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export declare function main(argv: string[]): number;

package/dist/cli.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { parseLock, diffLocks, summarize } from "./core.js";
+import { render } from "./render.js";
+const VERSION = "0.1.0";
+function colorEnabled(argv) {
+    if (process.env.NO_COLOR)
+        return false;
+    const i = argv.indexOf("--color");
+    if (i !== -1)
+        return argv[i + 1] === "always";
+    const eq = argv.find((a) => a.startsWith("--color="));
+    if (eq)
+        return eq.split("=")[1] === "always";
+    if (process.env.FORCE_COLOR === "1")
+        return true;
+    return process.stdout.isTTY;
+}
+function usage() {
+    console.log(`lockdiff ${VERSION} — diff two package-lock.json files
+
+USAGE
+  lockdiff <old-lockfile> <new-lockfile> [options]
+
+OPTIONS
+  --json          machine-readable output
+  --only-changes  hide the summary block
+  --color M       always | auto | never   (env: FORCE_COLOR, NO_COLOR)
+  -V, --help      version / help
+
+EXAMPLES
+  lockdiff package-lock.json.new package-lock.json
+  git show HEAD:package-lock.json > /tmp/old.lock && lockdiff /tmp/old.lock package-lock.json`);
+}
+export function main(argv) {
+    const args = [];
+    let asJson = false;
+    let onlyChanges = false;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--json")
+            asJson = true;
+        else if (a === "--only-changes")
+            onlyChanges = true;
+        else if (a === "--color")
+            i++;
+        else if (a.startsWith("--color="))
+            continue;
+        else if (a === "-h" || a === "--help") {
+            usage();
+            return 0;
+        }
+        else if (a === "-V" || a === "--version") {
+            console.log(`lockdiff version ${VERSION}`);
+            return 0;
+        }
+        else
+            args.push(a);
+    }
+    if (args.length !== 2) {
+        usage();
+        return args.length === 0 ? 0 : 2;
+    }
+    let before, after;
+    try {
+        before = parseLock(readFileSync(args[0], "utf8"));
+        after = parseLock(readFileSync(args[1], "utf8"));
+    }
+    catch (e) {
+        console.error(`lockdiff: ${e.message}`);
+        return 2;
+    }
+    const changes = diffLocks(before, after);
+    const stats = summarize(changes, before, after);
+    if (asJson) {
+        console.log(JSON.stringify({ changes, stats }, null, 2));
+    }
+    else {
+        process.stdout.write(render(changes, stats, { color: colorEnabled(argv), onlyChanges }));
+    }
+    return 0;
+}
+if (process.argv[1] && process.argv[1].endsWith("cli.js")) {
+    process.exit(main(process.argv.slice(2)));
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,YAAY,CAAC,IAAc;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;AAC9B,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO;;;;;;;;;;;;;8FAa6D,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAc;IACjC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,IAAI,CAAC;aAC7B,IAAI,CAAC,KAAK,gBAAgB;YAAE,WAAW,GAAG,IAAI,CAAC;aAC/C,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,EAAE,CAAC;aACzB,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;aACvC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,CAAC;QACX,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC;QACX,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,MAAM,EAAE,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClD,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAEhD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/core.d.ts

@@ -0,0 +1,37 @@
+/** lockdiff core: parse package-lock.json files and diff their dependency sets. */
+export interface DepInfo {
+    name: string;
+    version: string;
+    dev: boolean;
+    resolved?: string;
+}
+export interface LockSummary {
+    lockfileVersion: number;
+    deps: Map<string, DepInfo>;
+}
+/** Parse any package-lock.json (v1 tree or v2/v3 packages) into a flat dep map. */
+export declare function parseLock(raw: string): LockSummary;
+export type ChangeKind = "added" | "removed" | "changed";
+export interface Change {
+    kind: ChangeKind;
+    name: string;
+    from?: string;
+    to?: string;
+    dev: boolean;
+}
+/** Compare two parsed lockfiles and produce sorted changes. */
+export declare function diffLocks(before: LockSummary, after: LockSummary): Change[];
+/** Major/minor/patch/release bucket for a semver-ish version string. */
+export declare function semverDelta(from: string, to: string): "major" | "minor" | "patch" | "other";
+export interface DiffStats {
+    added: number;
+    removed: number;
+    changed: number;
+    major: number;
+    minor: number;
+    patch: number;
+    dev: number;
+    totalBefore: number;
+    totalAfter: number;
+}
+export declare function summarize(changes: Change[], before: LockSummary, after: LockSummary): DiffStats;

package/dist/core.js

@@ -0,0 +1,111 @@
+/** lockdiff core: parse package-lock.json files and diff their dependency sets. */
+/** Parse any package-lock.json (v1 tree or v2/v3 packages) into a flat dep map. */
+export function parseLock(raw) {
+    let json;
+    try {
+        json = JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`not valid JSON: ${e.message}`);
+    }
+    if (typeof json !== "object" || json === null) {
+        throw new Error("lockfile root is not an object");
+    }
+    const version = Number(json.lockfileVersion ?? 1) || 1;
+    const deps = new Map();
+    if (version >= 2 && json.packages) {
+        for (const [key, info] of Object.entries(json.packages)) {
+            if (!key.startsWith("node_modules/") || !info || typeof info.version !== "string")
+                continue;
+            const name = key.slice("node_modules/".length);
+            // v3 nested entries ("node_modules/a/node_modules/b") are aliased installs;
+            // keep the shallowest occurrence for each name.
+            if (name.includes("node_modules/"))
+                continue;
+            deps.set(name, {
+                name,
+                version: info.version,
+                dev: Boolean(info.dev),
+                resolved: typeof info.resolved === "string" ? info.resolved : undefined,
+            });
+        }
+    }
+    else if (json.dependencies) {
+        const walk = (tree, prefix = "") => {
+            for (const [name, info] of Object.entries(tree)) {
+                if (!info || typeof info !== "object")
+                    continue;
+                const full = prefix + name;
+                if (!deps.has(full) && typeof info.version === "string") {
+                    deps.set(full, {
+                        name: full,
+                        version: info.version,
+                        dev: Boolean(info.dev),
+                        resolved: typeof info.resolved === "string" ? info.resolved : undefined,
+                    });
+                }
+                if (info.dependencies && typeof info.dependencies === "object") {
+                    walk(info.dependencies, full + "/");
+                }
+            }
+        };
+        walk(json.dependencies);
+    }
+    return { lockfileVersion: version, deps };
+}
+/** Compare two parsed lockfiles and produce sorted changes. */
+export function diffLocks(before, after) {
+    const changes = [];
+    for (const [name, info] of after.deps) {
+        const old = before.deps.get(name);
+        if (!old)
+            changes.push({ kind: "added", name, to: info.version, dev: info.dev });
+        else if (old.version !== info.version)
+            changes.push({ kind: "changed", name, from: old.version, to: info.version, dev: info.dev });
+    }
+    for (const [name, info] of before.deps) {
+        if (!after.deps.has(name))
+            changes.push({ kind: "removed", name, from: info.version, dev: info.dev });
+    }
+    const rank = { changed: 0, added: 1, removed: 2 };
+    return changes.sort((a, b) => rank[a.kind] - rank[b.kind] || a.name.localeCompare(b.name));
+}
+/** Major/minor/patch/release bucket for a semver-ish version string. */
+export function semverDelta(from, to) {
+    const parse = (v) => v.replace(/^[^0-9]*/, "").split(/[.+-]/).map((x) => parseInt(x, 10) || 0);
+    const [fMaj, fMin, fPat] = parse(from);
+    const [tMaj, tMin, tPat] = parse(to);
+    if (tMaj !== fMaj)
+        return "major";
+    if (tMin !== fMin)
+        return "minor";
+    if (tPat !== fPat)
+        return "patch";
+    return "other";
+}
+export function summarize(changes, before, after) {
+    const s = {
+        added: 0, removed: 0, changed: 0, major: 0, minor: 0, patch: 0, dev: 0,
+        totalBefore: before.deps.size, totalAfter: after.deps.size,
+    };
+    for (const ch of changes) {
+        if (ch.kind === "added")
+            s.added++;
+        if (ch.kind === "removed")
+            s.removed++;
+        if (ch.kind === "changed") {
+            s.changed++;
+            const d = semverDelta(ch.from, ch.to);
+            if (d === "major")
+                s.major++;
+            else if (d === "minor")
+                s.minor++;
+            else if (d === "patch")
+                s.patch++;
+        }
+        if (ch.dev)
+            s.dev++;
+    }
+    return s;
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAcnF,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mBAAoB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IAExC,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAA+B,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/C,4EAA4E;YAC5E,gDAAgD;YAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,SAAS;YAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBACb,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE;YACtD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAChD,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACxD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;wBACb,IAAI,EAAE,IAAI;wBACV,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;wBACtB,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;qBACxE,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC/D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAYD,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAAmB,EAAE,KAAkB;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;aAC5E,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAW,CAAC;IAC3D,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,EAAU;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACvG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAcD,MAAM,UAAU,SAAS,CAAC,OAAiB,EAAE,MAAmB,EAAE,KAAkB;IAClF,MAAM,CAAC,GAAc;QACnB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;QACtE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;KAC3D,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;YAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,IAAK,EAAE,EAAE,CAAC,EAAG,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,OAAO;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC;iBACxB,IAAI,CAAC,KAAK,OAAO;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC;iBAC7B,IAAI,CAAC,KAAK,OAAO;gBAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,EAAE,CAAC,GAAG;YAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,6 @@
+import type { Change, DiffStats } from "./core.js";
+export interface RenderOptions {
+    color: boolean;
+    onlyChanges: boolean;
+}
+export declare function render(changes: Change[], stats: DiffStats, opts: RenderOptions): string;

package/dist/render.js

@@ -0,0 +1,56 @@
+import { semverDelta } from "./core.js";
+const RESET = "\x1b[0m";
+const DIM = "\x1b[2m";
+const BOLD = "\x1b[1m";
+const RED = "\x1b[38;5;203m";
+const GREEN = "\x1b[38;5;114m";
+const YELLOW = "\x1b[38;5;220m";
+const CYAN = "\x1b[38;5;75m";
+function paint(on, code, s) {
+    return on ? `${code}${s}${RESET}` : s;
+}
+export function render(changes, stats, opts) {
+    const { color, onlyChanges } = opts;
+    const lines = [];
+    const headers = {
+        changed: paint(color, BOLD + CYAN, "changed dependencies"),
+        added: paint(color, BOLD + GREEN, "added dependencies"),
+        removed: paint(color, BOLD + RED, "removed dependencies"),
+    };
+    for (const kind of ["changed", "added", "removed"]) {
+        const group = changes.filter((c) => c.kind === kind);
+        if (group.length === 0)
+            continue;
+        lines.push("");
+        lines.push(`${headers[kind]} ${paint(color, DIM, `(${group.length})`)}`);
+        for (const ch of group) {
+            const dev = ch.dev ? paint(color, DIM, " [dev]") : "";
+            if (ch.kind === "changed") {
+                const d = semverDelta(ch.from, ch.to);
+                const ccol = d === "major" ? RED : d === "minor" ? YELLOW : GREEN;
+                lines.push(`  ${paint(color, BOLD, ch.name)}  ${paint(color, DIM, ch.from)} → ${paint(color, ccol, ch.to)}${dev}`);
+            }
+            else if (ch.kind === "added") {
+                lines.push(`  ${paint(color, BOLD, ch.name)}  ${paint(color, GREEN, ch.to)}${dev}`);
+            }
+            else {
+                lines.push(`  ${paint(color, BOLD, ch.name)}  ${paint(color, DIM, ch.from)}${dev}`);
+            }
+        }
+    }
+    if (!onlyChanges) {
+        lines.push("");
+        lines.push(`${paint(color, BOLD, "summary")}  ` +
+            `${paint(color, GREEN, `+${stats.added}`)} ` +
+            `${paint(color, RED, `-${stats.removed}`)} ` +
+            `${paint(color, YELLOW, `~${stats.changed}`)} ` +
+            `${paint(color, DIM, `(major ${stats.major} · minor ${stats.minor} · patch ${stats.patch})`)}` +
+            (stats.dev ? paint(color, DIM, ` · ${stats.dev} dev`) : ""));
+        lines.push(`${paint(color, DIM, `total: ${stats.totalBefore} → ${stats.totalAfter} packages`)}` +
+            (stats.totalBefore === stats.totalAfter ? "" : paint(color, DIM, ` (${stats.totalAfter > stats.totalBefore ? "+" : ""}${stats.totalAfter - stats.totalBefore})`)));
+    }
+    if (changes.length === 0)
+        lines.push("no dependency changes — lockfiles are equivalent");
+    return lines.join("\n") + "\n";
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAOxC,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAC7B,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,IAAI,GAAG,eAAe,CAAC;AAE7B,SAAS,KAAK,CAAC,EAAW,EAAE,IAAY,EAAE,CAAS;IACjD,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAiB,EAAE,KAAgB,EAAE,IAAmB;IAC7E,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,OAAO,GAA2B;QACtC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,EAAE,sBAAsB,CAAC;QAC1D,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,oBAAoB,CAAC;QACvD,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,GAAG,EAAE,sBAAsB,CAAC;KAC1D,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,IAAK,EAAE,EAAE,CAAC,EAAG,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClE,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAK,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAAG,CAAC,GAAG,GAAG,EAAE,CACzG,CAAC;YACJ,CAAC;iBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI;YAClC,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG;YAC5C,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG;YAC5C,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG;YAC/C,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE;YAC9F,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D,CAAC;QACF,KAAK,CAAC,IAAI,CACR,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,KAAK,CAAC,WAAW,MAAM,KAAK,CAAC,UAAU,WAAW,CAAC,EAAE;YAClF,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CACpK,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "lockscope",
+  "version": "0.1.0",
+  "description": "Diff two package-lock.json files: added, removed and changed dependencies with semver arrows. Zero dependencies.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "lockscope": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "npm run build && node test/core.test.mjs && node test/cli.test.mjs",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "lockfile",
+    "package-lock",
+    "diff",
+    "npm",
+    "dependencies",
+    "cli",
+    "semver"
+  ],
+  "license": "MIT",
+  "author": "v01dst",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/v01dst/lockdiff.git"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.0",
+    "@types/node": "^22.0.0"
+  }
+}