pypa / pip-tools

A set of tools to keep your pinned Python dependencies fresh.

microsoft / rushstack

Monorepo for tools developed by the Rush Stack community

lirantal / lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues

conda / conda-lock

Lightweight lockfile for conda environments

OWASP / cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.