io.github.CloudCorpRecords由 GitHub 帳號 CloudCorpRecords 發布v0.1.0更新於 Nov 6, 2026
Lockfile versus package.json drift auditor for a repo or monorepo.
Lockdrift 比對 package.json 與 package-lock.json 並回報相依性漂移，讓助理稽核儲存庫或 monorepo 的鎖定檔一致性。
Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。
參照 儲存庫 中的啟動說明。
Has the lockfile drifted from the manifest? lockdrift compares
the dependency ranges a package.json declares against the
ranges recorded in package-lock.json and reports every
difference, sorted by name:
missing_from_lockfile — declared in the manifest, absent
from the lockfile (someone edited package.json and never
reinstalled)version_mismatch — present in both, but the recorded ranges
disagreeextra_in_lockfile — recorded in the lockfile but no longer
declaredLockfile v2/v3 (the root packages[""] entry) and v1 (the
top-level dependencies map) are both supported. The comparison
is of the recorded ranges — lockdrift reports recorded drift;
it does not resolve semver or talk to a registry. Pure local
computation: no network, no configuration.
Output is the report as JSON, e.g.
{"in_sync": false, "drift_count": 1, "drift": [{"name": "zod", "kind": "version_mismatch", "declared_in": "dependencies", "package_json_range": "^3", "lockfile_range": "^2"}]}.
Exit codes: 0 on success (drift is a result, not an error),
1 on a runtime error (unreadable or invalid file), 2 on a
usage error.
MCP client config:
check_lockfile_drift — Compare a package.json against its
package-lock.json and report drift.
package_json (string, required) — the package.json
document, as a JSON stringlockfile_json (string, required) — the package-lock.json
document, as a JSON stringMIT — Copyright (c) 2026 Rene Turcios
來源：README.md，提交 f18fa1e
Check a package.json against its package-lock.json: dependencies with no lock entry, locked versions that do not satisfy the declared range (exact, caret, tilde, and >= ranges), packages locked but not declared, and a missing or unparsable lockfile. Verdict IN-SYNC or DRIFT with per-dependency evidence.
path必填已滿足適用檢查項的 90%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。
npx @reneturcios/lockdrift check package.json package-lock.jsonnpx @reneturcios/lockdrift --versionnpx -y @reneturcios/lockdrift mcp{ "mcpServers": { "lockdrift": { "command": "npx", "args": ["-y", "@reneturcios/lockdrift", "mcp"] } }}docker run -i ghcr.io/cloudcorprecords/lockdriftdocker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/lockdrift check /w/package.json /w/package-lock.jsonnpm installnpm run build # tsc -> dist/npm test # tsx --test test/*.test.ts (pure local, no network)npm run dev # run the CLI from source