Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behind a version that was supposed to be immutable is not the one that was there before.
Coinbase Agentic Market feed · snapshot May 2026 (not live on-chain)
| From | Amount | When |
|---|---|---|
| 0x7e6b65…2b1c | $0.0010 | 2026-09-09T21:47:47 |