lockfile

A set of tools to keep your pinned Python dependencies fresh.

Lint an npm or yarn lockfile to analyze and detect security issues

Fast, resilient, reproducible builds with npm install.

Lightweight lockfile for conda environments

An inter-process and inter-machine lockfile utility that works on a local or network file system.

The missing `yarn audit fix`

🔒 Your lockfile, up to date, all the time

Lockfile-first scanner for compromised npm/PyPI/Maven/Cargo/Go/RubyGems packages — OSV + curated extras feed, SLSA L3, locked-container CI

Handle locking via pid files

hatch plugin to use pip-compile (or uv) to manage project dependencies and lockfiles

Lean, Bundler-compatible gem manager written in Go

A plugin for Tox that lets you install test environment dependencies from the Poetry lockfile

A Poetry plugin to support monorepo setups for Python, enabling shared lockfiles and directory dependency pinning.

A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.

A simple pip freeze workflow for Python application developers

Heavily tested, but simple filelocking solution using flock command.

A simple Bash lock file library.

Tool for smart revert of integrity changes for npm lock file

Use `npx aud` instead of `npm audit`, whether you have a lockfile or not!

Simple and flexible tool to build clojure projects with Nix