feat: guard the root and registry manifests against dependency drift - #166

Merged

lmcorbalan merged 11 commits into

feat/registry-distributionfrom

feat/registry-deps-guard

Sep 3, 2026

Commits on Sep 2, 2026

feat: fail when the root and registry manifests disagree on a dependency
lmcorbalan
committed
1fc5816
fix: compare every section a package is declared in, not the last one seen
lmcorbalan
committed
f281726
fix: fail when engines.node or type is absent from both manifests
lmcorbalan
committed
3d3eb6a
fix: name the operation that actually converges two lockfiles
lmcorbalan
committed
d2cadd4
fix: report both lockfiles when neither records a shared package
lmcorbalan
committed
31273a2
feat: fail when a lockfile no longer records the manifest beside it
lmcorbalan
committed
c423634
fix: say a lockfile does not record a package instead of printing undefined
lmcorbalan
committed
7724fd9
docs: describe every rule the guard enforces in its header comment
lmcorbalan
committed
0a61363

Commits on Sep 3, 2026