3 items tagged with "lockfile"
Use the Vibgrate Dependency Graph Scanner to find duplicate packages, phantom dependencies, and workspace graph issues from your lockfile.
Lockfile warnings indicate you don't have a package-lock.json, yarn.lock, pnpm-lock.yaml, or bun.lockb. This affects dependency graph analysis and dup...
A lockfile records the exact, resolved version of every dependency in a project — direct and transitive — so installs are reproducible and the true dependency set is auditable.