FelixMiddelhoff

FelixMiddelhoff/ratchet-verify

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

19 good first / help-wanted issues · TypeScript · last activity Sep 23, 2026

0 stars 0 forks 0 watchers TypeScript MIT License
automation bisect ci-cd cli code-quality continuous-integration dependencies dependency-management developer-tools devtools github-actions javascript nodejs npm package-management semver static-analysis supply-chain-security testing typescript
19 Open Issues Need Help Last updated: Sep 23, 2026

Open Issues Need Help

View All on GitHub
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: sandbox
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: sandbox
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: detection
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
help wanted good first issue area: ci
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
help wanted good first issue question
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted size: large
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: bisect
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
help wanted good first issue area: ci area: docs
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
help wanted good first issue area: ci
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
help wanted good first issue area: corpus
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: bisect
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: detection
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: lockfile size: large
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
Support pnpm-lock.yaml about 1 month ago
enhancement help wanted area: lockfile
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: lockfile
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript
enhancement help wanted area: sandbox size: large
FelixMiddelhoff/ratchet-verify
0

Verify a dependency bump before you merge it: runs your real test suite, checks the changelog's breaking changes against how you actually use the package, and bisects to the exact version that broke things. Not another bot that opens a PR - a verdict with evidence.

TypeScript
#automation#bisect#ci-cd#cli#code-quality#continuous-integration#dependencies#dependency-management#developer-tools#devtools#github-actions#javascript#nodejs#npm#package-management#semver#static-analysis#supply-chain-security#testing#typescript