{"slug":"api-zfinia-com-x402-v1-lockfile-change-report-7a2a29","title":"Compare two lockfiles and report what a manifest diff cannot see","host":"api.zfinia.com","method":"POST","resource":"https://api.zfinia.com/x402/v1/lockfile-change-report","category":"company","description":"Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behin","price_listed":0.18,"price_asked":0.18,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":2476,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"after":{"lockfileVersion":3,"packages":{"":{"name":"orders-api","version":"2.2.0"},"node_modules/cookie":{"integrity":"sha512-TAMPERED","resolved":"https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz","version":"0.5.0"},"node_modules/express":{"integrity":"sha512-DDDD","resolved":"https://registry.npmjs.org/express/-/express-5.0.0.tgz","version":"5.0.0"},"node_modules/router":{"integrity":"sha512-EEEE","resolved":"https://packages.internal.example/router/-/router-2.0.0.tgz","version":"2.0.0"}}},"before":{"lockfileVersion":3,"packages":{"":{"name":"orders-api","version":"2.1.0"},"node_modules/cookie":{"integrity":"sha512-BBBB","resolved":"https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz","version":"0.5.0"},"node_modules/dropped":{"integrity":"sha512-CCCC","resolved":"https://registry.npmjs.org/dropped/-/dropped-1.0.0.tgz","version":"1.0.0"},"node_modules/express":{"integrity":"sha512-AAAA","resolved":"https://registry.npmjs.org/express/-/express-4.18.2.tgz","version":"4.18.2"}}},"expected_registry":"https://registry.npmjs.org/"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"additionalProperties":false,"properties":{"after":{"type":"object"},"before":{"type":"object"},"expected_registry":{"maxLength":256,"type":"string"}},"required":["before","after"],"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-04","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.18,"price_match":true,"latency_ms":2476,"error":null}],"description_full":"Compare two lockfiles and report what a manifest diff cannot see. Reports newly installed transitive packages, resolved version moves with breaking risk, a registry that changed, and the most serious finding available here: the same version with a different integrity hash, meaning the artifact behind a version that was supposed to be immutable is not the one that was there before.","last_updated":"2026-10-04T08:04:45.009Z","schemes":["exact"]}