Diff two npm/PyPI versions or lockfiles: new install scripts, network/shell/eval calls, new deps.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Diff two npm/PyPI versions or lockfiles: new install scripts, network/shell/eval calls, new deps.