whatsdiff is a command you type, so it only tells you things on the days you remember to ask. Unolia runs it for you.
Point it at the projects you already maintain and it checks them on every deploy and on a schedule, then comes to you when something moves.
What you get
- Every project in one view. Dependency changes across all of them, without cloning anything locally.
- Alerts the day they land. A new advisory in a package you ship reaches you that morning, not during next quarter's audit.
- Reports in the pull request. The change summary and the advisories posted where the review happens.
- The rest of the project alongside. DNS, SSL, deployments, servers and costs sit next to the dependencies.
Pricing
The CLI and the MCP server stay free and MIT-licensed. Automation is the part you pay for — see unolia.com for plans.
Keeping the CLI
Nothing here replaces the CLI. whatsdiff analyse works the same whether or not you use Unolia, and the two read the same lock files.