Download the PHP package whatsdiff/whatsdiff without Composer

whatsdiff

What's diff is a CLI tool to help you inspect what has changed in your dependencies after a composer update, npm update, or pnpm update.

Visit whatsdiff.app for complete documentation and usage examples.

✨ Features

• Analyse changes in composer.lock, package-lock.json, and pnpm-lock.yaml between commits
• Read changelog and release notes of updated packages
• Interactive Terminal UI
• Multiple output formats (text, JSON, markdown)
• MCP server to help LLM understand how to upgrade your project dependencies
• CI/CD integration to check if specific packages have changed

🚀 Installation

Via Composer global require command

or by downloading binaries on the latest release, currently only these binaries are compiled on the CI:

• macOS x86_64
• macOS arm64
• linux x86_64
• linux arm64
• windows x64

📚 Usage

For complete documentation, visit whatsdiff.app/docs

Analyse Command

Show what changed after your last composer update, npm update, or pnpm update:

Between Command

Compare dependencies between two commits, branches, or tags:

Terminal UI Mode

Launch an interactive Terminal UI with keyboard navigation:

Check Command

Check if a specific package has changed (useful for CI/CD):

Changelog Command

View release notes for updated packages:

Audit Command

List known security advisories that affect your installed dependencies. Works on composer.lock, package-lock.json, and pnpm-lock.yaml, like composer audit / npm audit / pnpm audit but with whatsdiff's output formats:

npm and pnpm audits query the GitHub Advisory Database once per package, so the first run on a large package-lock.json or pnpm-lock.yaml may be slow; subsequent runs are cached.

Configuration

Manage cache and other settings:

Output Formats

All commands support multiple output formats:

AI Agent Auto-Detection

When whatsdiff is invoked from inside an AI coding agent (Claude Code, Cursor, Gemini CLI, Codex, Copilot CLI, OpenCode, Replit, Devin, Augment, Amp, Antigravity, Pi, Kiro, etc.), it detects the environment via well-known variables (powered by laravel/agent-detector) and defaults --format to json so the agent receives structured output without parsing colored text. Passing --format=text (or any other explicit value) always overrides the auto-detected default.

🔧 Contributing

This project follows PSR coding style. You can use composer pint to apply.

All tests are executed with pest. Use composer pest

It's recommended to execute composer qa before commiting (alias for executing Pint and Pest)

Testing

This project use Pest for testing.

Build from sources

This project use box, php-static-cli and php-micro. A build script has been created to build the project. (tested only on macOS x86_64)

Then you can build the binary that you can retrieve in build/bin/

👥 Credits

whatsdiff was created by Eser DENIZ.

📝 License

whatsdiff PHP is licensed under the MIT License. See LICENSE for more information.