Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behind a version that was supposed to be immutable is not the one that was there before.
First-party product or operator
Machine: https://api.zfinia.com/v1/graph/entities/svc-lockfile_change_report
| From | Type | To | Evidence |
|---|---|---|---|
| svc-lockfile_change_report | ACCEPTS PAYMENT VIA | x402 | Verified |
| svc-lockfile_change_report | PRICED IN | usdc | Verified |
| svc-lockfile_change_report | RUNS ON | base | Verified |
| zfinia | OFFERS | svc-lockfile_change_report | Verified |
verified · https://api.zfinia.com/.well-known/x402.json