PHPackages                             siketyan/loxcan - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. siketyan/loxcan

ActiveProject

siketyan/loxcan
===============

Universal Lock File Scanner for Git.

v0.11.0(4mo ago)64304[1 PRs](https://github.com/siketyan/loxcan/pulls)MITPHPPHP ^8.1CI passing

Since Nov 23Pushed 4mo ago1 watchersCompare

[ Source](https://github.com/siketyan/loxcan)[ Packagist](https://packagist.org/packages/siketyan/loxcan)[ GitHub Sponsors](https://github.com/siketyan)[ Patreon](https://www.patreon.com/siketyan)[ RSS](/packages/siketyan-loxcan/feed)WikiDiscussions main Synced today

READMEChangelog (10)Dependencies (16)Versions (31)Used By (0)

loxcan
======

[](#loxcan)

[![Latest Stable Version](https://camo.githubusercontent.com/b5c67cf4bb30bb27cdccbd9553ab9de3e4725d5a3930f52b8c360375a7fbafe9/68747470733a2f2f706f7365722e707567782e6f72672f73696b657479616e2f6c6f7863616e2f76)](https://packagist.org/packages/siketyan/loxcan)[![Total Downloads](https://camo.githubusercontent.com/ba029b9f49fbdbdfe47ac03ac25b2f3fee7b8fa633ca44950e4668dff7c40abd/68747470733a2f2f706f7365722e707567782e6f72672f73696b657479616e2f6c6f7863616e2f646f776e6c6f616473)](https://packagist.org/packages/siketyan/loxcan)[![License](https://camo.githubusercontent.com/0a50d3f339dfab508a735511908b758ba2f16cb43a34b467d88b281ea300dcde/68747470733a2f2f706f7365722e707567782e6f72672f73696b657479616e2f6c6f7863616e2f6c6963656e7365)](https://packagist.org/packages/siketyan/loxcan)[![Codecov](https://camo.githubusercontent.com/2680a80a2f8b6e91082394f2cbf27fcb539d8e89f3866dec9932b2af87ab4d4b/68747470733a2f2f636f6465636f762e696f2f67682f73696b657479616e2f6c6f7863616e2f6272616e63682f6d61737465722f67726170682f62616467652e7376673f746f6b656e3d324442304d52424c3445)](https://codecov.io/gh/siketyan/loxcan)[![PHP](https://github.com/siketyan/loxcan/workflows/PHP/badge.svg)](https://github.com/siketyan/loxcan/workflows/PHP/badge.svg)[![Action](https://github.com/siketyan/loxcan/workflows/Action/badge.svg)](https://github.com/siketyan/loxcan/workflows/Action/badge.svg)

Universal Lock File Scanner for Git.

🚀 Motivation
------------

[](#-motivation)

Today, most languages have a package manager, and some language have two. Dependency management is very important and difficult in software development.

In cases of code review, we check entire of the changed codes. However, we often ignore lock files in the review, which controls dependencies of the project or the library.

On GitHub Pull Request, most lock files are hidden by default.

[![Load diff screen](./resources/load-diff.png)](./resources/load-diff.png)

Actually, they are very long and not human-readable.

I tried to notify the diff of the lock files to the author of PR and/or the reviewer(s). Using this action, the added, upgraded, downgraded, and removed packages are reported to the PR, in user-friendly format.

[![Report of the changed packages](./resources/screenshot.png)](./resources/screenshot.png)

So we can check what packages will be changed by the PR, in the review.

✨ Usage
-------

[](#-usage)

### Via Composer

[](#via-composer)

```
$ composer require --dev siketyan/loxcan
```

Then you can use this tool in CLI. (In some IDEs, you can access to the executable as just `loxcan` !)

```
$ ./vendor/bin/loxcan [base] [head]
```

### In GitHub Actions

[](#in-github-actions)

Use `pull_request` events to trigger the action.

```
steps:
  - uses: actions/checkout@v3
    with:
      fetch-depth: 0

  - uses: siketyan/loxcan@main
```

📦 Supported Package Managers
----------------------------

[](#-supported-package-managers)

(✅ = Supported, ⬜️ = Scheduled)

- Composer (PHP)
- Cargo (Rust)
- Go Modules (Go)
- Pipenv (Python)
- npm (JavaScript, Node.js)
- pnpm (JavaScript, Node.js)
- Yarn (JavaScript, Node.js)
- Pub (Dart)

📋 Supported Reporters
---------------------

[](#-supported-reporters)

(✅ = Supported, ⬜️ = Scheduled)

- GitHub
- GitLab

###  Health Score

47

—

FairBetter than 94% of packages

Maintenance78

Regular maintenance activity

Popularity20

Limited adoption so far

Community15

Small or concentrated contributor base

Maturity63

Established project with proven stability

 Bus Factor1

Top contributor holds 81.1% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~67 days

Recently: every ~225 days

Total

29

Last Release

122d ago

PHP version history (5 changes)v0.1.0PHP ^7.4

v0.3.0PHP ^7.4 || ^8.0

v0.6.0PHP ^8.0

v0.7.0PHP ^8.1

v0.10.0PHP ^8.2

### Community

Maintainers

![](https://www.gravatar.com/avatar/f38c998f5488958dd5536ff75b91710784608cfcf1e1f29fc404bbc40b8b1278?d=identicon)[Siketyan](/maintainers/Siketyan)

---

Top Contributors

[![siketyan](https://avatars.githubusercontent.com/u/12772118?v=4)](https://github.com/siketyan "siketyan (404 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (83 commits)")[![mpyw](https://avatars.githubusercontent.com/u/1351893?v=4)](https://github.com/mpyw "mpyw (9 commits)")[![foolishell](https://avatars.githubusercontent.com/u/38278379?v=4)](https://github.com/foolishell "foolishell (1 commits)")[![takamichi](https://avatars.githubusercontent.com/u/1865622?v=4)](https://github.com/takamichi "takamichi (1 commits)")

---

Tags

github-actionlock-filepackage-manager

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/siketyan-loxcan/health.svg)

```
[![Health](https://phpackages.com/badges/siketyan-loxcan/health.svg)](https://phpackages.com/packages/siketyan-loxcan)
```

###  Alternatives

[shopware/platform

The Shopware e-commerce core

3.3k1.5M3](/packages/shopware-platform)[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.4k5.6M650](/packages/sylius-sylius)[drupal/core

Drupal is an open source content management platform powering millions of websites and applications.

19462.3M1.3k](/packages/drupal-core)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

595.2M386](/packages/shopware-core)[drupal/core-recommended

Locked core dependencies; require this project INSTEAD OF drupal/core.

6939.5M342](/packages/drupal-core-recommended)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)