Diff npm-shrinkwrap.json

[mantoni]

If a shrinkwrap.json file is found, the following steps should be taken:

• Read the npm-shrinkwrap.json file
• Run npm shrinkwrap
• Read the npm-shrinkwrap.json file again
• Diff the two versions and for each diff:
• Check if the module has a CHANGES.md file an if so, parse the conents according to the version change
• Add a heading to the changes stating "v1.0.3 -> v1.2.0" and the changes from the previous step

[mantoni]

Thinking a bit more about this, it could also diff npm-shrinkwrap.json (or package-lock.json if present) from the previous release tag and the current state. This would also catch manual npm shrinkwrap calls or package-lock.json updates that happened between releases.