Composer Lock Diff is a very handy tool to show and log differences between composer updates. Typically,, it's used in combination with a .git folder in the same directory.
Using the following composer.json script you can also use it without git to log the changes:
https://github.com/davidrjonas/composer-lock-diff
"scripts": {
"post-update-cmd": [
"echo \"Composer package changes (composer-lock-diff):\"",
"mkdir -p log",
"touch log/composer-update-history.md",
"cp composer.lock composer_before.lock",
"echo \"# `date` (`whoami`):\" >> log/composer-update-history.md",
"composer-lock-diff --from composer_before.lock --to composer.lock --md >> log/composer-update-history.md"
]
},Works simple and great! Feel free to adjust to your needs.
