Explain any lockfile change: bumps, breaking jumps, vulnerabilities introduced & fixed, release ages, deprecations — across 29 lockfile formats.
vet what lockfiles pin RIGHT NOW, not a change: every pinned version affected by known advisories, missing from registry index, deprecated/retracted/yanked, or published only days ago
triage EVERY open Dependabot/Renovate PR of a GitHub user, org, repo, GitLab group/project, Gitea/Forgejo user/org/repo, Bitbucket Cloud workspace/repo, or Azure DevOps project/repo in one table
vet two lockfiles or SBOMs (CycloneDX or SPDX JSON) on disk
vet lockfile changes between two git revisions in a local repository
vet a GitHub, GitLab, Bitbucket, Gitea/Forgejo, or Azure DevOps pull request, merge request, or commit without cloning
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 13 | 2026-07-28+ | v2 |