I kept shipping version mismatches — so I built a zero-dep CLI that checks all three sources at once

You know the drill. You bump package.json, update the CHANGELOG, run the tests, push the tag — and then someone opens a bug report six hours later because the latest entry in CHANGELOG.md still says 1.3.1. It's not a bug in your code. It's a release metadata mismatch. And it happens way more often t