EnvParity

About EnvParity

Flags any package an agent silently installed, removed, or bumped without saying so.

Price: $12 one-time

Included free

• npm/pip environment snapshot before a session
• Post-session undisclosed-change diff notification

Unlocked with a license

• go/cargo snapshot-diff support
• One-click revert of an undisclosed dependency change
• Lockfile-vs-manifest drift cross-check

Notes and limitations

• "Post-session" drift detection is implemented as a silent diff against the saved snapshot once per VS Code session, on activation — this extension has no way to hook into an agent's own session boundaries directly, so opening (or reloading) the workspace is what triggers the check. You'll only see a notification when there actually is drift.
• EnvParity: Diff Against Last Snapshot re-detects npm/pip (and, licensed, go/cargo) from scratch every time, so it also picks up an ecosystem that didn't exist at snapshot time.
• The lockfile-vs-manifest cross-check only verifies exact versions and simple ^/~ ranges; complex ranges (>=, ||, git/workspace/file specifiers, tags) are skipped rather than risk a false positive.
• One-click revert runs real npm install/npm uninstall commands and always asks for confirmation first — it changes your node_modules and package.json.

Getting a license

Open the EnvParity sidebar (activity bar icon) and click Get License. After purchase you'll receive a license key — paste it into the sidebar and click Activate License. Keys are machine-locked; use Move to another machine… in the sidebar before reinstalling on a new device.