Analyze an npm package-lock.json, yarn.lock, or pnpm-lock.yaml: total package count, duplicated package versions with who pulled in each, dev/prod split, registry breakdown, and the largest dependency subtree. All parsing happens client-side.
Paste an npm package-lock.json, yarn.lock, or pnpm-lock.yaml to see duplicate-version packages, dev/prod split, and registry breakdown.
Supports npm package-lock.json (both lockfileVersion 1's nested tree and 2/3's flat packages map), Yarn Classic yarn.lock, and pnpm-lock.yaml. Yarn Berry (v2+) lockfiles are detected but not fully parsed. All parsing happens client-side — nothing is uploaded anywhere.
Analyze an npm package-lock.json, yarn.lock, or pnpm-lock.yaml: total package count, duplicated package versions with who pulled in each, dev/prod split, registry breakdown, and the largest dependency subtree. All parsing happens client-side.
Yes. Lockfile Analyzer can find duplicated package versions in a package-lock.json, directly in your browser.
Yes. Lockfile Analyzer can compare dev vs production dependency counts, directly in your browser.
Yes. Lockfile Analyzer can see which packages pulled in a duplicated version, directly in your browser.
No. This tool runs entirely in your browser — your input is processed locally on your device and is never uploaded or stored on a server.