lockstep-evidence 0.2.0

T1Covered by 1 source · first reported by PyPI / crates.io / RubyGems / Go index / NuGet at 25 Sept, 23:46 UTC

Does what's actually installed match the lockfile? Runtime dependency drift, not just a commit-time CVE scan.