npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Use when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry.
Exact registry package name.
Package ecosystem. Only npm and pypi are supported.
Exact candidate version.
Exact installed version.
Use when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry.
| Argument | Type | Description |
|---|---|---|
| package* | string | Exact registry package name. |
| runtime | object | |
| ecosystem* | string | Package ecosystem. Only npm and pypi are supported. |
| target_version* | string | Exact candidate version. |
| current_version* | string | Exact installed version. |
{
"type": "object",
"required": [
"ecosystem",
"package",
"current_version",
"target_version"
],
"properties": {
"package": {
"type": "string",
"maxLength": 214,
"description": "Exact registry package name."
},
"runtime": {
"type": "object",
"properties": {
"node": {
"type": "string"
},
"python": {
"type": "string"
}
},
"additionalProperties": false
},
"ecosystem": {
"enum": [
"npm",
"pypi"
],
"type": "string",
"description": "Package ecosystem. Only npm and pypi are supported."
},
"target_version": {
"type": "string",
"maxLength": 64,
"description": "Exact candidate version."
},
"current_version": {
"type": "string",
"maxLength": 64,
"description": "Exact installed version."
}
},
"additionalProperties": false
}Use only when an existing npm or PyPI dependency has an exact current version but no chosen target. Ranks candidates; candidates are not declared safe and require check_dependency_upgrade or plan_dependency_upgrade. Do not use when a target is stated, for a new install, or as authorization to edit files. Read-only and safe to retry.
| Argument | Type | Description |
|---|---|---|
| package* | string | Exact registry package name. |
| ecosystem* | string | Package ecosystem. Only npm and pypi are supported. |
| max_major_jump | integer | Optional major-version jump cap. 0 = stay in the same major. |
| current_version* | string | Exact installed version. |
| allow_prerelease | boolean |
{
"type": "object",
"required": [
"ecosystem",
"package",
"current_version"
],
"properties": {
"package": {
"type": "string",
"maxLength": 214,
"description": "Exact registry package name."
},
"ecosystem": {
"enum": [
"npm",
"pypi"
],
"type": "string",
"description": "Package ecosystem. Only npm and pypi are supported."
},
"max_major_jump": {
"type": "integer",
"minimum": 0,
"description": "Optional major-version jump cap. 0 = stay in the same major."
},
"current_version": {
"type": "string",
"maxLength": 64,
"description": "Exact installed version."
},
"allow_prerelease": {
"type": "boolean"
}
},
"additionalProperties": false
}Use when a coding agent needs a migration checklist, refactor actions, ordered review actions, changelog links, or test steps for exact current and target npm/PyPI versions. Use check_dependency_upgrade instead for a go/no-go without steps. Do not use to choose a target, install a package, or provide a general tutorial. Read-only and safe to retry.
| Argument | Type | Description |
|---|---|---|
| package* | string | Exact registry package name. |
| runtime | object | |
| ecosystem* | string | Package ecosystem. Only npm and pypi are supported. |
| target_version* | string | Exact candidate version. |
| current_version* | string | Exact installed version. |
{
"type": "object",
"required": [
"ecosystem",
"package",
"current_version",
"target_version"
],
"properties": {
"package": {
"type": "string",
"maxLength": 214,
"description": "Exact registry package name."
},
"runtime": {
"type": "object",
"properties": {
"node": {
"type": "string"
},
"python": {
"type": "string"
}
},
"additionalProperties": false
},
"ecosystem": {
"enum": [
"npm",
"pypi"
],
"type": "string",
"description": "Package ecosystem. Only npm and pypi are supported."
},
"target_version": {
"type": "string",
"maxLength": 64,
"description": "Exact candidate version."
},
"current_version": {
"type": "string",
"maxLength": 64,
"description": "Exact installed version."
}
},
"additionalProperties": false
}Use when an agent reviews a Dependabot, Renovate, npm, or PyPI version change before merge. One cited result combines security delta, runtime compatibility, breaking changes, go/no-go risk, and ordered migration actions for exact current and target versions. Do not use for new installs, unknown versions, general documentation, or other ecosystems. Read-only and safe to retry.
| Argument | Type | Description |
|---|---|---|
| detail | string | compact is optimized for agent decisions; full includes the complete legacy plan payload. |
| package* | string | Exact registry package name. |
| runtime | object | |
| ecosystem* | string | Package ecosystem. Only npm and pypi are supported. |
| target_version* | string | Exact candidate version. |
| current_version* | string | Exact installed version. |
{
"type": "object",
"required": [
"ecosystem",
"package",
"current_version",
"target_version"
],
"properties": {
"detail": {
"enum": [
"compact",
"full"
],
"type": "string",
"default": "compact",
"description": "compact is optimized for agent decisions; full includes the complete legacy plan payload."
},
"package": {
"type": "string",
"maxLength": 214,
"description": "Exact registry package name."
},
"runtime": {
"type": "object",
"properties": {
"node": {
"type": "string"
},
"python": {
"type": "string"
}
},
"additionalProperties": false
},
"ecosystem": {
"enum": [
"npm",
"pypi"
],
"type": "string",
"description": "Package ecosystem. Only npm and pypi are supported."
},
"target_version": {
"type": "string",
"maxLength": 64,
"description": "Exact candidate version."
},
"current_version": {
"type": "string",
"maxLength": 64,
"description": "Exact installed version."
}
},
"additionalProperties": false
}