Pastoralist

CLI that keeps an audit trail for package.json overrides so nobody forgets why they exist.

Pluginfreeglobal

Pastoralist is a CLI that keeps an audit trail for npm, yarn, and pnpm package.json overrides, recording why each override exists, which packages still need it, which security provider found the issue, and when it can be removed. It's for engineering and security teams who don't want CVE patches and compatibility pins to become undocumented, forgotten cruft in package.json.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Pastoralist - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Pastoralist to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Pastoralist (or something else) actually fits.

Try a problem