Pkglinks

"name": "kubectl", "version": "1.30.0", "urls": "linux_amd64": "https://dl.k8s.io/release/v1.30.0/bin/linux/amd64/kubectl", "darwin_arm64": "..."


pkglinks diff requests urllib3 --ecosystem pypi

Shows shared vs unique dependencies.


CI/CD pipelines generate enormous network costs. By analyzing go.sum or package-lock.json, tools can pre-fetch all Pkglinks into a local cache. Tools like Go Module Proxy or NPM cache work because they permanently store the content addressed by the Pkglink. Pkglinks

pkglinks cross-deps axios --ecosystem npm --target pypi "name": "kubectl", "version": "1

Fix: Either update the hash with pkglinks update --force or investigate if someone changed the source without intent. pkglinks diff requests urllib3 --ecosystem pypi