git bisect for the inside of a lockfile diff.
A grouped dependency update bumped a pile of packages in one commit and CI went red. git bisect is useless - it was one commit. lockbisect finds the exact culprit package anyway by bisecting inside the lockfile diff.
Zero dependencies
Available on npm
Works with npm, yarn, and pnpm lockfiles