Dependency Diff

Compare two dependency manifests and classify each move. Below 1.0.0 the versioning convention promises no stability, so a 0.x minor change is treated as potentially breaking - flagging only major bumps would miss the change that breaks most often. A range changing is reported as a change of intent rather than a version moving, and a dependency moving between a development and a runtime group is reported because it changes what ships.