Flags any package an agent silently installed, removed, or bumped without saying so.
Price: $12 one-time
Included free
npm/pip environment snapshot before a session
Post-session undisclosed-change diff notification
Unlocked with a license
go/cargo snapshot-diff support
One-click revert of an undisclosed dependency change
Lockfile-vs-manifest drift cross-check
Notes and limitations
"Post-session" drift detection is implemented as a silent diff against the saved snapshot once per VS Code session, on activation — this extension has no way to hook into an agent's own session boundaries directly, so opening (or reloading) the workspace is what triggers the check. You'll only see a notification when there actually is drift.
EnvParity: Diff Against Last Snapshot re-detects npm/pip (and, licensed, go/cargo) from scratch every time, so it also picks up an ecosystem that didn't exist at snapshot time.
The lockfile-vs-manifest cross-check only verifies exact versions and simple ^/~ ranges; complex ranges (>=, ||, git/workspace/file specifiers, tags) are skipped rather than risk a false positive.
One-click revert runs real npm install/npm uninstall commands and always asks for confirmation first — it changes your node_modules and package.json.
Getting a license
Open the EnvParity sidebar (activity bar icon) and click Get License. After purchase you'll receive a license key — paste it into the sidebar and click Activate License. Keys are machine-locked; use Move to another machine… in the sidebar before reinstalling on a new device.
