io.github.CloudCorpRecords由 GitHub 账号 CloudCorpRecords 发布v0.1.0更新于 Nov 6, 2026
Lockfile versus package.json drift auditor for a repo or monorepo.
Lockdrift 将 package.json 与 package-lock.json 对比并报告依赖漂移，让助手审计仓库或 monorepo 的锁文件一致性。
Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。
参照 仓库 中的启动说明。
Has the lockfile drifted from the manifest? lockdrift compares
the dependency ranges a package.json declares against the
ranges recorded in package-lock.json and reports every
difference, sorted by name:
missing_from_lockfile — declared in the manifest, absent
from the lockfile (someone edited package.json and never
reinstalled)version_mismatch — present in both, but the recorded ranges
disagreeextra_in_lockfile — recorded in the lockfile but no longer
declaredLockfile v2/v3 (the root packages[""] entry) and v1 (the
top-level dependencies map) are both supported. The comparison
is of the recorded ranges — lockdrift reports recorded drift;
it does not resolve semver or talk to a registry. Pure local
computation: no network, no configuration.
Output is the report as JSON, e.g.
{"in_sync": false, "drift_count": 1, "drift": [{"name": "zod", "kind": "version_mismatch", "declared_in": "dependencies", "package_json_range": "^3", "lockfile_range": "^2"}]}.
Exit codes: 0 on success (drift is a result, not an error),
1 on a runtime error (unreadable or invalid file), 2 on a
usage error.
MCP client config:
check_lockfile_drift — Compare a package.json against its
package-lock.json and report drift.
package_json (string, required) — the package.json
document, as a JSON stringlockfile_json (string, required) — the package-lock.json
document, as a JSON stringMIT — Copyright (c) 2026 Rene Turcios
来源：README.md，提交 f18fa1e
Check a package.json against its package-lock.json: dependencies with no lock entry, locked versions that do not satisfy the declared range (exact, caret, tilde, and >= ranges), packages locked but not declared, and a missing or unparsable lockfile. Verdict IN-SYNC or DRIFT with per-dependency evidence.
path必填已满足适用检查项的 90%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。
npx @reneturcios/lockdrift check package.json package-lock.jsonnpx @reneturcios/lockdrift --versionnpx -y @reneturcios/lockdrift mcp{ "mcpServers": { "lockdrift": { "command": "npx", "args": ["-y", "@reneturcios/lockdrift", "mcp"] } }}docker run -i ghcr.io/cloudcorprecords/lockdriftdocker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/lockdrift check /w/package.json /w/package-lock.jsonnpm installnpm run build # tsc -> dist/npm test # tsx --test test/*.test.ts (pure local, no network)npm run dev # run the CLI from source