whatsdiff

Meet whatsdiff

whatsdiff is a command-line tool for understanding dependency changes in Composer and npm lockfiles. It compares uncommitted work, commits, branches, or release tags and summarizes packages that were added, removed, upgraded, or downgraded. Release notes cover the versions between the old and new dependency rather than only the latest release.

Security auditing checks installed versions against advisories and can focus on issues introduced by a branch. An interactive terminal view places packages beside their changelogs, while scriptable checks support CI decisions. The included MCP server exposes registry information to coding assistants. The tool is free and MIT-licensed, and requires a compatible PHP and Composer environment.