archestra-ai/archestra tech-debt free score 0/100

Tech-debt free score

0/100

Rotting

3 critical or high advisories, 2 moderate advisories, 58 packages a whole major behind and 108 more behind the safe target.

How we got −18

Critical/high CVEs and outdated majors cost 80 of 118 lost points. Fix the 3 critical/high CVEs first.

3 critical/high CVEs3 × 25 = 75capped at 50costs −50 points, 42% of points lost
58 majors behind58 × 6 = 348capped at 30costs −30 points, 25% of points lost
2 moderate/low CVEs2 × 8costs −16 points, 14% of points lost
88 minors behind88 × 2 = 176capped at 12costs −12 points, 10% of points lost
2 deprecated packages2 × 5costs −10 points, 8% of points lost

Nothing found in: Node runtime EOL

Debt-free score100 − 118 =−18

100 means no dependency debt; below zero means the debt outweighs the whole scale. Every advisory and every version behind costs points.

archestra-ai/archestra scores 0 out of 100 on the tech-debt free score (rotting; 100 means no dependency debt). 3 of its 256 packages carry known advisories, 3 of them critical or high. 58 packages are a whole major version behind and 108 more trail the safe target. The scan covers npm and github-actions. Last scanned 26 Oct 2026.

Last scanned 26 Oct 2026 · 1 public scan so far · re-scanned about once a week

Packages & tools

256

166 behind the safe target (65%)

Needs action

advisory, deprecated or a major behind

Behind target

128

minor or patch behind

Current

at or above the safe target

Advisories

across 3 packages, from OSV.dev

How the 256 packages splitred needs a ticket, amber a bump, green nothing

62 need action128 behind target66 current

01 · Worst first

The 5 packages costing archestra-ai/archestra the most

Each one links to its row in the table below, with the safe target and the advisories.

@ai-sdk/amazon-bedrock 4.0.159 → 5.0.113
npm · a whole major behind
@ai-sdk/anthropic 3.0.128 → 4.0.78
npm · a whole major behind
@ai-sdk/cerebras 2.0.39 → 3.0.67
npm · a whole major behind
@ai-sdk/cohere 3.0.25 → 4.0.59
npm · a whole major behind
@ai-sdk/google 3.0.43 → 4.0.93
npm · a whole major behind

02 · Packages

256 packages, worst first

The safe target is the newest stable release that has been public for at least 14 days. Fresh releases are where supply-chain attacks land.

Packages with installed, latest and safe target versions
Status	Package	Installed	Latest	≥ 14d	Safe target	Drift	CVEs
Needs action	npmdependencies · 4.0.159Sign up to research for @ai-sdk/amazon-bedrock	4.0.159lockfile	5.0.12424 Oct 2026	Latest release is only 1 days old, inside the 14-day window	5.0.1138 Oct 2026	major	0
Upgrade path major Installed4.0.159 from the lockfile Safe target5.0.1138 Oct 2026public for 14+ days Latest5.0.12424 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.159. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.0.159 → 5.0.113` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 4.0.159 Deprecated No
Needs action	npmdependencies · ^3.0.128Sign up to research for @ai-sdk/anthropic	3.0.128lockfile	4.0.8824 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.788 Oct 2026	major	0
Upgrade path major Installed3.0.128 from the lockfile Safe target4.0.788 Oct 2026public for 14+ days Latest4.0.8824 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.128. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.128 → 4.0.78` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.128 Deprecated No
Needs action	npmdependencies · ^2.0.39Sign up to research for @ai-sdk/cerebras	2.0.39lockfile	3.0.7824 Oct 2026	Latest release is only 1 days old, inside the 14-day window	3.0.678 Oct 2026	major	0
Upgrade path major Installed2.0.39 from the lockfile Safe target3.0.678 Oct 2026public for 14+ days Latest3.0.7824 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.39. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.39 → 3.0.67` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.0.39 Deprecated No
Needs action	npmdependencies · ^3.0.25Sign up to research for @ai-sdk/cohere	3.0.25lockfile	4.0.6924 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.598 Oct 2026	major	0
Upgrade path major Installed3.0.25 from the lockfile Safe target4.0.598 Oct 2026public for 14+ days Latest4.0.6924 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.25. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.25 → 4.0.59` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.25 Deprecated No
Needs action	npmdependencies · ^3.0.43Sign up to research for @ai-sdk/google	3.0.43lockfile	4.0.10524 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.938 Oct 2026	major	0
Upgrade path major Installed3.0.43 from the lockfile Safe target4.0.938 Oct 2026public for 14+ days Latest4.0.10524 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.43. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.43 → 4.0.93` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.43 Deprecated No
Needs action	npmdependencies · ^4.0.211Sign up to research for @ai-sdk/google-vertex	4.0.211lockfile	5.0.12224 Oct 2026	Latest release is only 1 days old, inside the 14-day window	5.0.1098 Oct 2026	major	0
Upgrade path major Installed4.0.211 from the lockfile Safe target5.0.1098 Oct 2026public for 14+ days Latest5.0.12224 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.211. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.0.211 → 5.0.109` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.0.211 Deprecated No
Needs action	npmdependencies · ^3.0.29Sign up to research for @ai-sdk/groq	3.0.29lockfile	4.0.7024 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.598 Oct 2026	major	0
Upgrade path major Installed3.0.29 from the lockfile Safe target4.0.598 Oct 2026public for 14+ days Latest4.0.7024 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.29. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.29 → 4.0.59` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.29 Deprecated No
Needs action	npmdependencies · ^3.0.24Sign up to research for @ai-sdk/mistral	3.0.24lockfile	4.0.7224 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.628 Oct 2026	major	0
Upgrade path major Installed3.0.24 from the lockfile Safe target4.0.628 Oct 2026public for 14+ days Latest4.0.7224 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.24. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.24 → 4.0.62` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.24 Deprecated No
Needs action	npmdependencies · ^3.0.41Sign up to research for @ai-sdk/openai	3.0.41lockfile	4.0.10224 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.918 Oct 2026	major	0
Upgrade path major Installed3.0.41 from the lockfile Safe target4.0.918 Oct 2026public for 14+ days Latest4.0.10224 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.41. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.41 → 4.0.91` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.41 Deprecated No
Needs action	npmdependencies · ^2.0.35Sign up to research for @ai-sdk/openai-compatible	2.0.35lockfile	3.0.7824 Oct 2026	Latest release is only 1 days old, inside the 14-day window	3.0.678 Oct 2026	major	0
Upgrade path major Installed2.0.35 from the lockfile Safe target3.0.678 Oct 2026public for 14+ days Latest3.0.7824 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.35. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.35 → 3.0.67` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.0.35 Deprecated No
Needs action	npmdependencies · ^3.0.195Sign up to research for @ai-sdk/react	3.0.195lockfile	4.0.15724 Oct 2026	Latest release is only 1 days old, inside the 14-day window	4.0.1409 Oct 2026	major	0
Upgrade path major Installed3.0.195 from the lockfile Safe target4.0.1409 Oct 2026public for 14+ days Latest4.0.15724 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.195. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.195 → 4.0.140` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.195 Deprecated No
Needs action	npmdependencies · ^3.0.67Sign up to research for @ai-sdk/xai	3.0.67lockfile	5.0.3024 Oct 2026	Latest release is only 1 days old, inside the 14-day window	5.0.208 Oct 2026	major	0
Upgrade path major Installed3.0.67 from the lockfile Safe target5.0.208 Oct 2026public for 14+ days Latest5.0.3024 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.67. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.67 → 5.0.20` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.0.67 Deprecated No
Needs action	npmdependencies · catalog:Sign up to research for @better-auth/oauth-provider	1.6.22lockfile	1.7.1325 Oct 2026	Latest release is only 0 days old, inside the 14-day window	1.7.730 Sep 2026	minor	1
Upgrade path minor Installed1.6.22 from the lockfile Safe target1.7.730 Sep 2026public for 14+ days Latest1.7.1325 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 1 1 moderate moderateCVSS 6.4GHSA-p2fr-6hmx-4528 @better-auth/oauth-provider may provide access tokens for unauthorized audiences via unbound resource indicators CVE-2026-67332fixed in `1.7.0-beta.4` Research not included on this scan Breaking changes, the work involved and the new features between `1.6.22 → 1.7.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared catalog: Deprecated No
Needs action	npmdependencies · ^8.0.2Sign up to research for @fastify/formbody	8.0.2lockfile	9.0.18 Oct 2026	Latest release is 17 days old, past the 14-day window	9.0.18 Oct 2026	major	0
Upgrade path major Installed8.0.2 from the lockfile Safe target · latest9.0.18 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.0.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.0.2 → 9.0.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^8.0.2 Deprecated No
Needs action	npmdependencies · ^1.44.0Sign up to research for @google/genai	1.45.0lockfile	2.31.023 Oct 2026	Latest release is only 3 days old, inside the 14-day window	2.28.07 Oct 2026	major	0
Upgrade path major Installed1.45.0 from the lockfile Safe target2.28.07 Oct 2026public for 14+ days Latest2.31.023 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.45.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.45.0 → 2.28.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.44.0 Deprecated No
Needs action	npmdependencies · ^2.2.3Sign up to research for @keyv/postgres	2.2.3lockfile	6.1.06 Oct 2026	Latest release is 19 days old, past the 14-day window	6.1.06 Oct 2026	major	0
Upgrade path major Installed2.2.3 from the lockfile Safe target · latest6.1.06 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.2.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.2.3 → 6.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.2.3 Deprecated No
Needs action	npmdependencies · ^1.4.0Sign up to research for @kubernetes/client-node	1.4.0lockfile	2.0.120 Oct 2026	Latest release is only 6 days old, inside the 14-day window	2.0.012 Aug 2026	major	0
Upgrade path major Installed1.4.0 from the lockfile Safe target2.0.012 Aug 2026public for 14+ days Latest2.0.120 Oct 2026only 6d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.4.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.4.0 → 2.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.4.0 Deprecated No
Needs action	npmdependencies · ^81.0.0Sign up to research for @linear/sdk	81.0.0lockfile	99.0.021 Oct 2026	Latest release is only 4 days old, inside the 14-day window	97.1.07 Oct 2026	major	0
Upgrade path major Installed81.0.0 from the lockfile Safe target97.1.07 Oct 2026public for 14+ days Latest99.0.021 Oct 2026only 4d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 81.0.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `81.0.0 → 97.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^81.0.0 Deprecated No
Needs action	npmdependencies · ^1.1.1Sign up to research for @modelcontextprotocol/ext-apps	1.3.1lockfile	2.0.08 Sep 2026	Latest release is 47 days old, past the 14-day window	2.0.325 Sep 2026	major	0
Upgrade path major Installed1.3.1 from the lockfile Safe target2.0.325 Sep 2026public for 14+ days Latest2.0.08 Sep 202647d public, past the window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.3.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.3.1 → 2.0.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.1 Deprecated No
Needs action	npmdependencies · ^2.12.0deprecatedSign up to research for @opentelemetry/sdk-trace-base	2.12.0lockfile	2.12.06 Oct 2026	Latest release is 19 days old, past the 14-day window	-	unknown	0
Upgrade path unknown Installed2.12.0 from the lockfile Safe target- no release has cleared the window yet Latest2.12.06 Oct 202619d public, past the window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.12.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.12.0 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.12.0 Deprecated Yes, by its maintainers
Needs action	npmdependencies · ^10.76.1Sign up to research for @sentry/core	10.76.1lockfile	11.9.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	11.6.08 Oct 2026	major	0
Upgrade path major Installed10.76.1 from the lockfile Safe target11.6.08 Oct 2026public for 14+ days Latest11.9.022 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.76.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.76.1 → 11.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.76.1 Deprecated No
Needs action	npmdependencies · ^10.76.1Sign up to research for @sentry/nextjs	10.76.1lockfile	11.9.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	11.6.08 Oct 2026	major	0
Upgrade path major Installed10.76.1 from the lockfile Safe target11.6.08 Oct 2026public for 14+ days Latest11.9.023 Oct 2026only 2d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.76.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.76.1 → 11.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.76.1 Deprecated No
Needs action	npmdependencies · ^10.76.1Sign up to research for @sentry/node	10.76.1lockfile	11.9.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	11.6.08 Oct 2026	major	0
Upgrade path major Installed10.76.1 from the lockfile Safe target11.6.08 Oct 2026public for 14+ days Latest11.9.023 Oct 2026only 2d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.76.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.76.1 → 11.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.76.1 Deprecated No
Needs action	npmdependencies · ^10.76.1Sign up to research for @sentry/opentelemetry	10.76.1lockfile	11.9.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	11.6.08 Oct 2026	major	0
Upgrade path major Installed10.76.1 from the lockfile Safe target11.6.08 Oct 2026public for 14+ days Latest11.9.023 Oct 2026only 2d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.76.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.76.1 → 11.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.76.1 Deprecated No
Needs action	npmdependencies · ^10.76.1Sign up to research for @sentry/profiling-node	10.76.1lockfile	11.9.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	11.6.08 Oct 2026	major	0
Upgrade path major Installed10.76.1 from the lockfile Safe target11.6.08 Oct 2026public for 14+ days Latest11.9.023 Oct 2026only 2d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.76.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.76.1 → 11.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.76.1 Deprecated No
Needs action	npmdependencies · ^2.0.5Sign up to research for @slack/socket-mode	2.0.5lockfile	3.1.030 Sep 2026	Latest release is 25 days old, past the 14-day window	3.1.030 Sep 2026	major	0
Upgrade path major Installed2.0.5 from the lockfile Safe target · latest3.1.030 Sep 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.5. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.5 → 3.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.0.5 Deprecated No
Needs action	npmdependencies · ^7.14.1Sign up to research for @slack/web-api	7.14.1lockfile	8.2.030 Sep 2026	Latest release is 25 days old, past the 14-day window	8.2.030 Sep 2026	major	0
Upgrade path major Installed7.14.1 from the lockfile Safe target · latest8.2.030 Sep 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.14.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `7.14.1 → 8.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^7.14.1 Deprecated No
Needs action	npmdependencies · 1.1.1Sign up to research for @streamdown/code	1.1.1lockfile	2.0.030 Sep 2026	Latest release is 25 days old, past the 14-day window	2.0.030 Sep 2026	major	0
Upgrade path major Installed1.1.1 from the lockfile Safe target · latest2.0.030 Sep 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.1 → 2.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.1.1 Deprecated No
Needs action	npmdependencies · ^8.21.3Sign up to research for @tanstack/react-table	8.21.3lockfile	9.3.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	9.2.88 Oct 2026	major	0
Upgrade path major Installed8.21.3 from the lockfile Safe target9.2.88 Oct 2026public for 14+ days Latest9.3.112 Oct 2026only 13d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.21.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.21.3 → 9.2.8` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^8.21.3 Deprecated No
Needs action	npmdevDependencies · ^6.9.1Sign up to research for @testing-library/jest-dom	6.9.1lockfile	7.0.19 Aug 2026	Latest release is 77 days old, past the 14-day window	7.0.19 Aug 2026	major	0
Upgrade path major Installed6.9.1 from the lockfile Safe target · latest7.0.19 Aug 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.9.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.9.1 → 7.0.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^6.9.1 Deprecated No
Needs action	npmdevDependencies · ^28.0.1Sign up to research for @types/jsdom	28.0.1lockfile	30.0.07 Aug 2026	Latest release is 79 days old, past the 14-day window	30.0.07 Aug 2026	major	0
Upgrade path major Installed28.0.1 from the lockfile Safe target · latest30.0.07 Aug 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 28.0.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `28.0.1 → 30.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^28.0.1 Deprecated No
Needs action	npmdevDependencies · ^25.5.0Sign up to research for @types/node	25.5.0lockfile	26.6.59 Oct 2026	Latest release is 16 days old, past the 14-day window	26.6.59 Oct 2026	major	0
Upgrade path major Installed25.5.0 from the lockfile Safe target · latest26.6.59 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 25.5.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `25.5.0 → 26.6.5` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^25.5.0 Deprecated No
Needs action	npmdependencies · catalog:Sign up to research for ai	6.0.193lockfile	7.0.15324 Oct 2026	Latest release is only 1 days old, inside the 14-day window	7.0.1379 Oct 2026	major	0
Upgrade path major Installed6.0.193 from the lockfile Safe target7.0.1379 Oct 2026public for 14+ days Latest7.0.15324 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.0.193. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.0.193 → 7.0.137` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared catalog: Deprecated No
Needs action	npmdevDependencies · ^9.2.1Sign up to research for concurrently	9.2.1lockfile	10.0.68 Oct 2026	Latest release is 17 days old, past the 14-day window	10.0.68 Oct 2026	major	0
Upgrade path major Installed9.2.1 from the lockfile Safe target · latest10.0.68 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9.2.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `9.2.1 → 10.0.6` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^9.2.1 Deprecated No
Needs action	npmdependencies · ^2.1.0Sign up to research for confluence.js	2.1.0lockfile	3.3.113 Oct 2026	Latest release is only 12 days old, inside the 14-day window	3.2.010 Aug 2026	major	0
Upgrade path major Installed2.1.0 from the lockfile Safe target3.2.010 Aug 2026public for 14+ days Latest3.3.113 Oct 2026only 12d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.1.0 → 3.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.1.0 Deprecated No
Needs action	npmdependencies · ^17.3.1Sign up to research for dotenv	17.3.1lockfile	18.0.922 Oct 2026	Latest release is only 3 days old, inside the 14-day window	18.0.79 Oct 2026	major	0
Upgrade path major Installed17.3.1 from the lockfile Safe target18.0.79 Oct 2026public for 14+ days Latest18.0.922 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 17.3.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `17.3.1 → 18.0.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^17.3.1 Deprecated No
Needs action	npmdependencies · ^5.12.2Sign up to research for fastify	5.12.5lockfile	5.12.713 Oct 2026	Latest release is only 12 days old, inside the 14-day window	5.12.516 Sep 2026	current	1
Upgrade path current Installed5.12.5 from the lockfile Safe target5.12.516 Sep 2026public for 14+ days Latest5.12.713 Oct 2026only 12d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 1 1 low lowCVSS 3.7GHSA-389g-gv7q-r4x8 fastify is vulnerable to header validation bypass via case-sensitive propertyNames CVE-2026-107832fixed in `5.12.6` Research not included on this scan Breaking changes, the work involved and the new features between `5.12.5 → 5.12.5` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.12.2 Deprecated No
Needs action	npmdependencies · ^12.1.0Sign up to research for fastify-metrics	12.1.0lockfile	14.1.117 Oct 2026	Latest release is only 8 days old, inside the 14-day window	14.1.03 Sep 2026	major	0
Upgrade path major Installed12.1.0 from the lockfile Safe target14.1.03 Sep 2026public for 14+ days Latest14.1.117 Oct 2026only 8d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 12.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `12.1.0 → 14.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^12.1.0 Deprecated No
Needs action	npmdependencies · ^5.1.0Sign up to research for fastify-plugin	5.1.0lockfile	6.0.110 Oct 2026	Latest release is 15 days old, past the 14-day window	6.0.110 Oct 2026	major	0
Upgrade path major Installed5.1.0 from the lockfile Safe target · latest6.0.110 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.1.0 → 6.0.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.1.0 Deprecated No
Needs action	npmdependencies · ^6.0.0Sign up to research for fastify-type-provider-zod	6.1.0lockfile	7.0.024 Jun 2026	Latest release is 124 days old, past the 14-day window	7.0.024 Jun 2026	major	0
Upgrade path major Installed6.1.0 from the lockfile Safe target · latest7.0.024 Jun 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.1.0 → 7.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^6.0.0 Deprecated No
Needs action	npmdependencies · ^10.5.0Sign up to research for google-auth-library	10.5.0lockfile	11.3.115 Oct 2026	Latest release is only 10 days old, inside the 14-day window	11.2.07 Oct 2026	major	0
Upgrade path major Installed10.5.0 from the lockfile Safe target11.2.07 Oct 2026public for 14+ days Latest11.3.115 Oct 2026only 10d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.5.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.5.0 → 11.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.5.0 Deprecated No
Needs action	npmdependencies · ^171.4.0Sign up to research for googleapis	171.4.0lockfile	188.0.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	185.0.08 Oct 2026	major	0
Upgrade path major Installed171.4.0 from the lockfile Safe target185.0.08 Oct 2026public for 14+ days Latest188.0.022 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 171.4.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `171.4.0 → 185.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^171.4.0 Deprecated No
Needs action	npmdependencies · ^5.3.1Sign up to research for jira.js	5.3.1lockfile	6.3.07 Oct 2026	Latest release is 18 days old, past the 14-day window	6.3.07 Oct 2026	major	0
Upgrade path major Installed5.3.1 from the lockfile Safe target · latest6.3.07 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.3.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.3.1 → 6.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.3.1 Deprecated No
Needs action	npmdependencies · ^4.1.1Sign up to research for js-yaml	4.3.2lockfile	5.5.015 Oct 2026	Latest release is only 10 days old, inside the 14-day window	5.4.35 Oct 2026	major	0
Upgrade path major Installed4.3.2 from the lockfile Safe target5.4.35 Oct 2026public for 14+ days Latest5.5.015 Oct 2026only 10d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.3.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.3.2 → 5.4.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.1.1 Deprecated No
Needs action	npmdependencies · ^29.0.0Sign up to research for jsdom	29.0.0lockfile	30.1.315 Oct 2026	Latest release is only 10 days old, inside the 14-day window	30.1.24 Oct 2026	major	0
Upgrade path major Installed29.0.0 from the lockfile Safe target30.1.24 Oct 2026public for 14+ days Latest30.1.315 Oct 2026only 10d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 29.0.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `29.0.0 → 30.1.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^29.0.0 Deprecated No
Needs action	npmdependencies · ^5.6.0Sign up to research for keyv	5.6.0lockfile	6.1.06 Oct 2026	Latest release is 19 days old, past the 14-day window	6.1.06 Oct 2026	major	0
Upgrade path major Installed5.6.0 from the lockfile Safe target · latest6.1.06 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.6.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.6.0 → 6.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.6.0 Deprecated No
Needs action	npmdevDependencies · ^5.85.0Sign up to research for knip	5.86.0lockfile	6.43.024 Oct 2026	Latest release is only 1 days old, inside the 14-day window	6.41.09 Oct 2026	major	0
Upgrade path major Installed5.86.0 from the lockfile Safe target6.41.09 Oct 2026public for 14+ days Latest6.43.024 Oct 2026only 1d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.86.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.86.0 → 6.41.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^5.85.0 Deprecated No
Needs action	npmdependencies · ^0.577.0Sign up to research for lucide-react	0.577.0lockfile	1.61.021 Oct 2026	Latest release is only 5 days old, inside the 14-day window	1.55.010 Oct 2026	major	0
Upgrade path major Installed0.577.0 from the lockfile Safe target1.55.010 Oct 2026public for 14+ days Latest1.61.021 Oct 2026only 5d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.577.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.577.0 → 1.55.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.577.0 Deprecated No
Needs action	npmdependencies · ^11.16.1Sign up to research for mermaid	11.16.1lockfile	12.2.013 Oct 2026	Latest release is only 12 days old, inside the 14-day window	12.1.02 Oct 2026	major	0
Upgrade path major Installed11.16.1 from the lockfile Safe target12.1.02 Oct 2026public for 14+ days Latest12.2.013 Oct 2026only 12d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 11.16.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `11.16.1 → 12.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^11.16.1 Deprecated No
Needs action	npmdevDependencies · ^2.14.6Sign up to research for msw	2.14.6lockfile	3.0.310 Oct 2026	Latest release is 16 days old, past the 14-day window	3.0.310 Oct 2026	major	0
Upgrade path major Installed2.14.6 from the lockfile Safe target · latest3.0.310 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.14.6. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.14.6 → 3.0.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^2.14.6 Deprecated No
Needs action	npmdependencies · ^5.1.16Sign up to research for nanoid	5.1.16lockfile	6.0.25 Oct 2026	Latest release is 20 days old, past the 14-day window	6.0.25 Oct 2026	major	0
Upgrade path major Installed5.1.16 from the lockfile Safe target · latest6.0.25 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.1.16. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.1.16 → 6.0.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.1.16 Deprecated No
Needs action	npmdependencies · 3.6.0Sign up to research for ollama-ai-provider-v2	3.6.0lockfile	4.1.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	4.0.18 Jul 2026	major	0
Upgrade path major Installed3.6.0 from the lockfile Safe target4.0.18 Jul 2026public for 14+ days Latest4.1.022 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.6.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.6.0 → 4.0.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 3.6.0 Deprecated No
Needs action	npmdependencies · ^6.26.0Sign up to research for openai	6.29.0lockfile	7.43.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	7.32.09 Oct 2026	major	0
Upgrade path major Installed6.29.0 from the lockfile Safe target7.32.09 Oct 2026public for 14+ days Latest7.43.022 Oct 2026only 3d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.29.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.29.0 → 7.32.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^6.26.0 Deprecated No
Needs action	npmdependencies · 1.1.1Sign up to research for pdf-parse	1.1.1lockfile	2.4.520 Oct 2025	Latest release is 370 days old, past the 14-day window	2.4.520 Oct 2025	major	0
Upgrade path major Installed1.1.1 from the lockfile Safe target · latest2.4.520 Oct 2025public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.1 → 2.4.5` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.1.1 Deprecated No
Needs action	npmtooling · 11.9.0Sign up to research for pnpm	11.9.0declared	12.15.021 Oct 2026	Latest release is only 4 days old, inside the 14-day window	12.12.111 Oct 2026	major	3
Upgrade path major Installed11.9.0 declared, no lockfile Safe target12.12.111 Oct 2026public for 14+ days Latest12.15.021 Oct 2026only 4d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 3 3 high highCVSS 7.1GHSA-c59q-g84q-2gj5 pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph CVE-2026-82392fixed in `11.11.0` highCVSS 7.5GHSA-vq4v-j7r6-jq4m pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install CVE-2026-82393fixed in `11.11.0` highCVSS 7.4GHSA-vx52-2968-3vc6 pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml CVE-2026-101043fixed in `10.34.5` Research not included on this scan Breaking changes, the work involved and the new features between `11.9.0 → 12.12.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section tooling Declared 11.9.0 Deprecated No
Needs action	npmdependencies · ^15.1.3deprecatedSign up to research for prom-client	15.1.3lockfile	15.1.327 Jun 2024	Latest release is 850 days old, past the 14-day window	-	unknown	0
Upgrade path unknown Installed15.1.3 from the lockfile Safe target- no release has cleared the window yet Latest15.1.327 Jun 2024850d public, past the window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 15.1.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `15.1.3 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^15.1.3 Deprecated Yes, by its maintainers
Needs action	npmdependencies · ^9.14.0Sign up to research for react-day-picker	9.14.0lockfile	10.0.230 Sep 2026	Latest release is 25 days old, past the 14-day window	10.0.230 Sep 2026	major	0
Upgrade path major Installed9.14.0 from the lockfile Safe target · latest10.0.230 Sep 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9.14.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `9.14.0 → 10.0.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^9.14.0 Deprecated No
Needs action	npmdependencies · ^5.9.3Sign up to research for typescript	5.9.3lockfile	7.0.28 Jul 2026	Latest release is 109 days old, past the 14-day window	7.0.28 Jul 2026	major	0
Upgrade path major Installed5.9.3 from the lockfile Safe target · latest7.0.28 Jul 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.9.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.9.3 → 7.0.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.9.3 Deprecated No
Needs action	npmdependencies · ^1.0.41Sign up to research for ua-parser-js	1.0.41lockfile	2.0.1021 May 2026	Latest release is 158 days old, past the 14-day window	2.0.1021 May 2026	major	0
Upgrade path major Installed1.0.41 from the lockfile Safe target · latest2.0.1021 May 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.41. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.41 → 2.0.10` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.0.41 Deprecated No
Needs action	npmdependencies · 7.30.1Sign up to research for undici	7.30.1lockfile	8.12.319 Oct 2026	Latest release is only 6 days old, inside the 14-day window	8.11.224 Sep 2026	major	0
Upgrade path major Installed7.30.1 from the lockfile Safe target8.11.224 Sep 2026public for 14+ days Latest8.12.319 Oct 2026only 6d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.30.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `7.30.1 → 8.11.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 7.30.1 Deprecated No
Needs action	npmdevDependencies · ^4.1.11Sign up to research for vitest	4.1.11lockfile	5.0.515 Oct 2026	Latest release is only 10 days old, inside the 14-day window	5.0.330 Sep 2026	major	0
Upgrade path major Installed4.1.11 from the lockfile Safe target5.0.330 Sep 2026public for 14+ days Latest5.0.515 Oct 2026only 10d old, inside the 14-day window A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.1.11. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.1.11 → 5.0.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^4.1.11 Deprecated No
Needs action	npmdependencies · 5.3.0Sign up to research for web-vitals	5.3.0lockfile	6.2.35 Oct 2026	Latest release is 20 days old, past the 14-day window	6.2.35 Oct 2026	major	0
Upgrade path major Installed5.3.0 from the lockfile Safe target · latest6.2.35 Oct 2026public for 14+ days A whole major behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.3.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.3.0 → 6.2.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 5.3.0 Deprecated No
Behind	github-actionstooling · 55cc8345863c7cc4c66a329aec7e433d2d1c52a9Sign up to research for actions/cache	55cc8345863c7cc4c66a329aec7e433d2d1c52a9declared	6.1.026 Jun 2026	Latest release is 121 days old, past the 14-day window	6.1.026 Jun 2026	unknown	0
Upgrade path unknown Installed55cc8345863c7cc4c66a329aec7e433d2d1c52a9 declared, no lockfile Safe target · latest6.1.026 Jun 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 55cc8345863c7cc4c66a329aec7e433d2d1c52a9. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `55cc8345863c7cc4c66a329aec7e433d2d1c52a9 → 6.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 55cc8345863c7cc4c66a329aec7e433d2d1c52a9 Deprecated No
Behind	github-actionstooling · 3d3c42e5aac5ba805825da76410c181273ba90b1Sign up to research for actions/checkout	3d3c42e5aac5ba805825da76410c181273ba90b1declared	7.0.120 Jul 2026	Latest release is 97 days old, past the 14-day window	7.0.120 Jul 2026	unknown	0
Upgrade path unknown Installed3d3c42e5aac5ba805825da76410c181273ba90b1 declared, no lockfile Safe target · latest7.0.120 Jul 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3d3c42e5aac5ba805825da76410c181273ba90b1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3d3c42e5aac5ba805825da76410c181273ba90b1 → 7.0.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 3d3c42e5aac5ba805825da76410c181273ba90b1 Deprecated No
Behind	github-actionstooling · a1d282b36b6f3519aa1f3fc636f609c47dddb294Sign up to research for actions/dependency-review-action	a1d282b36b6f3519aa1f3fc636f609c47dddb294declared	5.0.08 May 2026	Latest release is 170 days old, past the 14-day window	5.0.08 May 2026	unknown	0
Upgrade path unknown Installeda1d282b36b6f3519aa1f3fc636f609c47dddb294 declared, no lockfile Safe target · latest5.0.08 May 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for a1d282b36b6f3519aa1f3fc636f609c47dddb294. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `a1d282b36b6f3519aa1f3fc636f609c47dddb294 → 5.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared a1d282b36b6f3519aa1f3fc636f609c47dddb294 Deprecated No
Behind	github-actionstooling · 9000827ccba6bdab643e8b6fd33ac0654aef8333Sign up to research for actions/download-artifact	9000827ccba6bdab643e8b6fd33ac0654aef8333declared	8.0.27 Oct 2026	Latest release is 18 days old, past the 14-day window	8.0.27 Oct 2026	unknown	0
Upgrade path unknown Installed9000827ccba6bdab643e8b6fd33ac0654aef8333 declared, no lockfile Safe target · latest8.0.27 Oct 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9000827ccba6bdab643e8b6fd33ac0654aef8333. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `9000827ccba6bdab643e8b6fd33ac0654aef8333 → 8.0.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 9000827ccba6bdab643e8b6fd33ac0654aef8333 Deprecated No
Behind	github-actionstooling · 3a2844b7e9c422d3c10d287c895573f7108da1b3Sign up to research for actions/github-script	3a2844b7e9c422d3c10d287c895573f7108da1b3declared	9.0.09 Apr 2026	Latest release is 199 days old, past the 14-day window	9.0.09 Apr 2026	unknown	0
Upgrade path unknown Installed3a2844b7e9c422d3c10d287c895573f7108da1b3 declared, no lockfile Safe target · latest9.0.09 Apr 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3a2844b7e9c422d3c10d287c895573f7108da1b3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3a2844b7e9c422d3c10d287c895573f7108da1b3 → 9.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 3a2844b7e9c422d3c10d287c895573f7108da1b3 Deprecated No
Behind	github-actionstooling · b7ad1dad31e06c5925ef5d2fc7ad053ef454303eSign up to research for actions/setup-go	b7ad1dad31e06c5925ef5d2fc7ad053ef454303edeclared	7.0.016 Jul 2026	Latest release is 102 days old, past the 14-day window	7.0.016 Jul 2026	unknown	0
Upgrade path unknown Installedb7ad1dad31e06c5925ef5d2fc7ad053ef454303e declared, no lockfile Safe target · latest7.0.016 Jul 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for b7ad1dad31e06c5925ef5d2fc7ad053ef454303e. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `b7ad1dad31e06c5925ef5d2fc7ad053ef454303e → 7.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared b7ad1dad31e06c5925ef5d2fc7ad053ef454303e Deprecated No
Behind	github-actionstooling · 949feb2413d6458794dcd2491c4babbbce0c15c1Sign up to research for actions/setup-node	949feb2413d6458794dcd2491c4babbbce0c15c1declared	7.1.08 Oct 2026	Latest release is 18 days old, past the 14-day window	7.1.08 Oct 2026	unknown	0
Upgrade path unknown Installed949feb2413d6458794dcd2491c4babbbce0c15c1 declared, no lockfile Safe target · latest7.1.08 Oct 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 949feb2413d6458794dcd2491c4babbbce0c15c1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `949feb2413d6458794dcd2491c4babbbce0c15c1 → 7.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 949feb2413d6458794dcd2491c4babbbce0c15c1 Deprecated No
Behind	github-actionstooling · cf430e030ddbb5b0abf93d22962f4752f3646cd9Sign up to research for actions/upload-artifact	cf430e030ddbb5b0abf93d22962f4752f3646cd9declared	7.0.27 Oct 2026	Latest release is 18 days old, past the 14-day window	7.0.27 Oct 2026	unknown	0
Upgrade path unknown Installedcf430e030ddbb5b0abf93d22962f4752f3646cd9 declared, no lockfile Safe target · latest7.0.27 Oct 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for cf430e030ddbb5b0abf93d22962f4752f3646cd9. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `cf430e030ddbb5b0abf93d22962f4752f3646cd9 → 7.0.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared cf430e030ddbb5b0abf93d22962f4752f3646cd9 Deprecated No
Behind	github-actionstooling · dbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79fSign up to research for archestra-ai/.github	dbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79fdeclared	1.6.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installeddbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79f declared, no lockfile Safe target- no release has cleared the window yet Latest1.6.023 Oct 2026only 2d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for dbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79f. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `dbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79f → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared dbdfbd49f3c54c0d4da3cb6b85fbcb9f4e60b79f Deprecated No
Behind	github-actionstooling · 9c1bcf2430c7701d68f18f6d263b5d302bea414dSign up to research for archestra-ai/code-review-action	9c1bcf2430c7701d68f18f6d263b5d302bea414ddeclared	0.3.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed9c1bcf2430c7701d68f18f6d263b5d302bea414d declared, no lockfile Safe target- no release has cleared the window yet Latest0.3.023 Oct 2026only 2d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9c1bcf2430c7701d68f18f6d263b5d302bea414d. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `9c1bcf2430c7701d68f18f6d263b5d302bea414d → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 9c1bcf2430c7701d68f18f6d263b5d302bea414d Deprecated No
Behind	github-actionstooling · 5359ae22f265fd2dfdb7744a0cc6614c5c3abde6Sign up to research for daun/playwright-report-summary	5359ae22f265fd2dfdb7744a0cc6614c5c3abde6declared	4.1.14 Oct 2026	Latest release is 21 days old, past the 14-day window	4.1.14 Oct 2026	unknown	0
Upgrade path unknown Installed5359ae22f265fd2dfdb7744a0cc6614c5c3abde6 declared, no lockfile Safe target · latest4.1.14 Oct 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5359ae22f265fd2dfdb7744a0cc6614c5c3abde6. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5359ae22f265fd2dfdb7744a0cc6614c5c3abde6 → 4.1.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 5359ae22f265fd2dfdb7744a0cc6614c5c3abde6 Deprecated No
Behind	github-actionstooling · 45996ed1f6d02564a971a2fa1b5860e934307cf7Sign up to research for googleapis/release-please-action	45996ed1f6d02564a971a2fa1b5860e934307cf7declared	5.0.022 Apr 2026	Latest release is 186 days old, past the 14-day window	5.0.022 Apr 2026	unknown	0
Upgrade path unknown Installed45996ed1f6d02564a971a2fa1b5860e934307cf7 declared, no lockfile Safe target · latest5.0.022 Apr 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 45996ed1f6d02564a971a2fa1b5860e934307cf7. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `45996ed1f6d02564a971a2fa1b5860e934307cf7 → 5.0.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 45996ed1f6d02564a971a2fa1b5860e934307cf7 Deprecated No
Behind	github-actionstooling · 70c40e5b6522c854a55334124545261cae3d4c73Sign up to research for grafana/shared-workflows	70c40e5b6522c854a55334124545261cae3d4c73declared	zizmor-collection-paths/v0.3.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed70c40e5b6522c854a55334124545261cae3d4c73 declared, no lockfile Safe target- no release has cleared the window yet Latestzizmor-collection-paths/v0.3.020 Oct 2026only 5d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 70c40e5b6522c854a55334124545261cae3d4c73. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `70c40e5b6522c854a55334124545261cae3d4c73 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 70c40e5b6522c854a55334124545261cae3d4c73 Deprecated No
Behind	github-actionstooling · ea17c68df8912ef543352723c149a84f56e3d413Sign up to research for pnpm/action-setup	ea17c68df8912ef543352723c149a84f56e3d413declared	6.1.05 Sep 2026	Latest release is 50 days old, past the 14-day window	6.1.05 Sep 2026	unknown	0
Upgrade path unknown Installedea17c68df8912ef543352723c149a84f56e3d413 declared, no lockfile Safe target · latest6.1.05 Sep 2026public for 14+ days Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for ea17c68df8912ef543352723c149a84f56e3d413. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `ea17c68df8912ef543352723c149a84f56e3d413 → 6.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared ea17c68df8912ef543352723c149a84f56e3d413 Deprecated No
Behind	github-actionstooling · 8cca0918f8471c33515202b73f56ab27f2bed283Sign up to research for taiki-e/install-action	8cca0918f8471c33515202b73f56ab27f2bed283declared	2.87.3123 Oct 2026	Latest release is only 2 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed8cca0918f8471c33515202b73f56ab27f2bed283 declared, no lockfile Safe target- no release has cleared the window yet Latest2.87.3123 Oct 2026only 2d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8cca0918f8471c33515202b73f56ab27f2bed283. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8cca0918f8471c33515202b73f56ab27f2bed283 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem github-actions Section tooling Declared 8cca0918f8471c33515202b73f56ab27f2bed283 Deprecated No
Behind	npmdependencies · 1.1.0Sign up to research for @a2a-js/sdk	1.1.0lockfile	1.3.029 Sep 2026	Latest release is 26 days old, past the 14-day window	1.3.029 Sep 2026	minor	0
Upgrade path minor Installed1.1.0 from the lockfile Safe target · latest1.3.029 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.0 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.1.0 Deprecated No
Behind	npmdependencies · ^0.78.0Sign up to research for @anthropic-ai/sdk	0.78.0lockfile	1.3.023 Oct 2026	Latest release is only 2 days old, inside the 14-day window	0.133.09 Oct 2026	minor	0
Upgrade path minor Installed0.78.0 from the lockfile Safe target0.133.09 Oct 2026public for 14+ days Latest1.3.023 Oct 2026only 2d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.78.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.78.0 → 0.133.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.78.0 Deprecated No
Behind	npmdependencies · ^3.1003.0Sign up to research for @aws-sdk/client-bedrock-runtime	3.1009.0lockfile	3.1156.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	3.1149.09 Oct 2026	minor	0
Upgrade path minor Installed3.1009.0 from the lockfile Safe target3.1149.09 Oct 2026public for 14+ days Latest3.1156.022 Oct 2026only 3d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.1009.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.1009.0 → 3.1149.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.1003.0 Deprecated No
Behind	npmdependencies · ^3.1003.0Sign up to research for @aws-sdk/client-s3	3.1070.0lockfile	3.1156.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	3.1149.09 Oct 2026	minor	0
Upgrade path minor Installed3.1070.0 from the lockfile Safe target3.1149.09 Oct 2026public for 14+ days Latest3.1156.022 Oct 2026only 3d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.1070.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.1070.0 → 3.1149.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.1003.0 Deprecated No
Behind	npmdependencies · ^3.1003.0Sign up to research for @aws-sdk/credential-providers	3.1009.0lockfile	3.1156.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	3.1149.09 Oct 2026	minor	0
Upgrade path minor Installed3.1009.0 from the lockfile Safe target3.1149.09 Oct 2026public for 14+ days Latest3.1156.022 Oct 2026only 3d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.1009.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.1009.0 → 3.1149.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.1003.0 Deprecated No
Behind	npmdependencies · ^4.13.0Sign up to research for @azure/identity	4.13.0lockfile	4.14.013 Oct 2026	Latest release is only 12 days old, inside the 14-day window	4.13.314 Sep 2026	patch	0
Upgrade path patch Installed4.13.0 from the lockfile Safe target4.13.314 Sep 2026public for 14+ days Latest4.14.013 Oct 2026only 12d old, inside the 14-day window A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.13.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.13.0 → 4.13.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.13.0 Deprecated No
Behind	npmdependencies · ^1.6.11Sign up to research for @better-auth/api-key	1.6.11lockfile	1.7.1325 Oct 2026	Latest release is only 0 days old, inside the 14-day window	1.7.730 Sep 2026	minor	0
Upgrade path minor Installed1.6.11 from the lockfile Safe target1.7.730 Sep 2026public for 14+ days Latest1.7.1325 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.6.11. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.6.11 → 1.7.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.6.11 Deprecated No
Behind	npmdependencies · catalog:Sign up to research for @better-auth/core	1.6.22lockfile	1.7.1325 Oct 2026	Latest release is only 0 days old, inside the 14-day window	1.7.730 Sep 2026	minor	0
Upgrade path minor Installed1.6.22 from the lockfile Safe target1.7.730 Sep 2026public for 14+ days Latest1.7.1325 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.6.22. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.6.22 → 1.7.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared catalog: Deprecated No
Behind	npmdependencies · catalog:Sign up to research for @better-auth/sso	1.6.22lockfile	1.7.1325 Oct 2026	Latest release is only 0 days old, inside the 14-day window	1.7.730 Sep 2026	minor	0
Upgrade path minor Installed1.6.22 from the lockfile Safe target1.7.730 Sep 2026public for 14+ days Latest1.7.1325 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.6.22. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.6.22 → 1.7.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared catalog: Deprecated No
Behind	npmdevDependencies · 2.4.6Sign up to research for @biomejs/biome	2.4.6lockfile	2.6.324 Oct 2026	Latest release is only 1 days old, inside the 14-day window	2.5.1530 Sep 2026	minor	0
Upgrade path minor Installed2.4.6 from the lockfile Safe target2.5.1530 Sep 2026public for 14+ days Latest2.6.324 Oct 2026only 1d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.4.6. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.4.6 → 2.5.15` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared 2.4.6 Deprecated No
Behind	npmdependencies · ^2.8.1Sign up to research for @cantoo/pdf-lib	2.8.1lockfile	2.11.115 Sep 2026	Latest release is 40 days old, past the 14-day window	2.11.115 Sep 2026	minor	0
Upgrade path minor Installed2.8.1 from the lockfile Safe target · latest2.11.115 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.8.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.8.1 → 2.11.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.8.1 Deprecated No
Behind	npmdependencies · ^0.0.7Sign up to research for @chonkiejs/core	0.0.7lockfile	0.0.123 Oct 2026	Latest release is 22 days old, past the 14-day window	0.0.123 Oct 2026	patch	0
Upgrade path patch Installed0.0.7 from the lockfile Safe target · latest0.0.123 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.0.7. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.0.7 → 0.0.12` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.0.7 Deprecated No
Behind	npmdevDependencies · ^0.3.16Sign up to research for @electric-sql/pglite	0.3.16lockfile	0.5.1121 Oct 2026	Latest release is only 4 days old, inside the 14-day window	0.5.826 Aug 2026	minor	0
Upgrade path minor Installed0.3.16 from the lockfile Safe target0.5.826 Aug 2026public for 14+ days Latest0.5.1121 Oct 2026only 4d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.3.16. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.3.16 → 0.5.8` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^0.3.16 Deprecated No
Behind	npmdependencies · ^11.1.0Sign up to research for @fastify/cors	11.2.0lockfile	11.3.18 Oct 2026	Latest release is 17 days old, past the 14-day window	11.3.18 Oct 2026	minor	0
Upgrade path minor Installed11.2.0 from the lockfile Safe target · latest11.3.18 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 11.2.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `11.2.0 → 11.3.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^11.1.0 Deprecated No
Behind	npmdependencies · ^11.4.4Sign up to research for @fastify/http-proxy	11.4.4lockfile	11.6.519 Oct 2026	Latest release is only 6 days old, inside the 14-day window	11.6.44 Oct 2026	minor	0
Upgrade path minor Installed11.4.4 from the lockfile Safe target11.6.44 Oct 2026public for 14+ days Latest11.6.519 Oct 2026only 6d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 11.4.4. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `11.4.4 → 11.6.4` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^11.4.4 Deprecated No
Behind	npmdependencies · ^0.17.1Sign up to research for @fastify/otel	0.17.1lockfile	0.21.425 Oct 2026	Latest release is only 0 days old, inside the 14-day window	0.21.28 Oct 2026	minor	0
Upgrade path minor Installed0.17.1 from the lockfile Safe target0.21.28 Oct 2026public for 14+ days Latest0.21.425 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.17.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.17.1 → 0.21.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.17.1 Deprecated No
Behind	npmdependencies · ^9.7.0Sign up to research for @fastify/swagger	9.7.0lockfile	9.9.29 Oct 2026	Latest release is 16 days old, past the 14-day window	9.9.29 Oct 2026	minor	0
Upgrade path minor Installed9.7.0 from the lockfile Safe target · latest9.9.29 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9.7.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `9.7.0 → 9.9.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^9.7.0 Deprecated No
Behind	npmdependencies · ^0.0.48Sign up to research for @ferrucc-io/emoji-picker	0.0.48lockfile	0.1.217 Aug 2026	Latest release is 69 days old, past the 14-day window	0.1.217 Aug 2026	minor	0
Upgrade path minor Installed0.0.48 from the lockfile Safe target · latest0.1.217 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.0.48. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.0.48 → 0.1.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.0.48 Deprecated No
Behind	npmdevDependencies · ^0.97.3Sign up to research for @hey-api/openapi-ts	0.97.3lockfile	0.99.022 Jun 2026	Latest release is 126 days old, past the 14-day window	0.99.022 Jun 2026	minor	0
Upgrade path minor Installed0.97.3 from the lockfile Safe target · latest0.99.022 Jun 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.97.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.97.3 → 0.99.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^0.97.3 Deprecated No
Behind	npmdependencies · ^5.2.2Sign up to research for @hookform/resolvers	5.2.2lockfile	6.0.019 Oct 2026	Latest release is only 7 days old, inside the 14-day window	5.9.117 Aug 2026	minor	0
Upgrade path minor Installed5.2.2 from the lockfile Safe target5.9.117 Aug 2026public for 14+ days Latest6.0.019 Oct 2026only 7d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.2.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.2.2 → 5.9.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.2.2 Deprecated No
Behind	npmdependencies · 1.0.0-preview.100Sign up to research for @microsoft/kiota-authentication-azure	1.0.0-preview.100lockfile	1.0.0-preview.11121 Oct 2026	Latest release is only 4 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed1.0.0-preview.100 from the lockfile Safe target- no release has cleared the window yet Latest1.0.0-preview.11121 Oct 2026only 4d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.0-preview.100. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.0-preview.100 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.0.0-preview.100 Deprecated No
Behind	npmdependencies · 1.0.0-preview.80Sign up to research for @microsoft/msgraph-sdk	1.0.0-preview.80lockfile	1.0.0-preview.9222 Oct 2026	Latest release is only 3 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed1.0.0-preview.80 from the lockfile Safe target- no release has cleared the window yet Latest1.0.0-preview.9222 Oct 2026only 3d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.0-preview.80. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.0-preview.80 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.0.0-preview.80 Deprecated No
Behind	npmdependencies · 1.0.0-preview.80Sign up to research for @microsoft/msgraph-sdk-chats	1.0.0-preview.80lockfile	1.0.0-preview.9222 Oct 2026	Latest release is only 3 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed1.0.0-preview.80 from the lockfile Safe target- no release has cleared the window yet Latest1.0.0-preview.9222 Oct 2026only 3d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.0-preview.80. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.0-preview.80 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.0.0-preview.80 Deprecated No
Behind	npmdependencies · 1.0.0-preview.80Sign up to research for @microsoft/msgraph-sdk-teams	1.0.0-preview.80lockfile	1.0.0-preview.9222 Oct 2026	Latest release is only 3 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed1.0.0-preview.80 from the lockfile Safe target- no release has cleared the window yet Latest1.0.0-preview.9222 Oct 2026only 3d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.0-preview.80. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.0-preview.80 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.0.0-preview.80 Deprecated No
Behind	npmdependencies · 1.0.0-preview.80Sign up to research for @microsoft/msgraph-sdk-users	1.0.0-preview.80lockfile	1.0.0-preview.9222 Oct 2026	Latest release is only 3 days old, inside the 14-day window	-	unknown	0
Upgrade path unknown Installed1.0.0-preview.80 from the lockfile Safe target- no release has cleared the window yet Latest1.0.0-preview.9222 Oct 2026only 3d old, inside the 14-day window Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.0-preview.80. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.0.0-preview.80 → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.0.0-preview.80 Deprecated No
Behind	npmdependencies · 2.0.14Sign up to research for @microsoft/teams.api	2.0.14lockfile	2.1.116 Oct 2026	Latest release is only 9 days old, inside the 14-day window	2.1.016 Sep 2026	minor	0
Upgrade path minor Installed2.0.14 from the lockfile Safe target2.1.016 Sep 2026public for 14+ days Latest2.1.116 Oct 2026only 9d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.14. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.14 → 2.1.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 2.0.14 Deprecated No
Behind	npmdevDependencies · ^3.4.0Sign up to research for @napi-rs/cli	3.6.2lockfile	3.10.921 Oct 2026	Latest release is only 4 days old, inside the 14-day window	3.10.86 Oct 2026	minor	0
Upgrade path minor Installed3.6.2 from the lockfile Safe target3.10.86 Oct 2026public for 14+ days Latest3.10.921 Oct 2026only 4d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.6.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.6.2 → 3.10.8` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^3.4.0 Deprecated No
Behind	npmdependencies · ^5.16.0Sign up to research for @notionhq/client	5.16.0lockfile	5.28.022 Oct 2026	Latest release is only 3 days old, inside the 14-day window	5.27.029 Sep 2026	minor	0
Upgrade path minor Installed5.16.0 from the lockfile Safe target5.27.029 Sep 2026public for 14+ days Latest5.28.022 Oct 2026only 3d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.16.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.16.0 → 5.27.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.16.0 Deprecated No
Behind	npmdependencies · ^1.9.0Sign up to research for @opentelemetry/api	1.9.0lockfile	1.10.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	1.9.125 Mar 2026	patch	0
Upgrade path patch Installed1.9.0 from the lockfile Safe target1.9.125 Mar 2026public for 14+ days Latest1.10.020 Oct 2026only 5d old, inside the 14-day window A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.9.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.9.0 → 1.9.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.9.0 Deprecated No
Behind	npmdependencies · ^1.40.0Sign up to research for @opentelemetry/semantic-conventions	1.40.0lockfile	1.43.09 Jul 2026	Latest release is 108 days old, past the 14-day window	1.43.09 Jul 2026	minor	0
Upgrade path minor Installed1.40.0 from the lockfile Safe target · latest1.43.09 Jul 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.40.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.40.0 → 1.43.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.40.0 Deprecated No
Behind	npmdevDependencies · ^1.58.2Sign up to research for @playwright/test	1.58.2lockfile	1.64.114 Oct 2026	Latest release is only 11 days old, inside the 14-day window	1.64.07 Oct 2026	minor	0
Upgrade path minor Installed1.58.2 from the lockfile Safe target1.64.07 Oct 2026public for 14+ days Latest1.64.114 Oct 2026only 11d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.58.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.58.2 → 1.64.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^1.58.2 Deprecated No
Behind	npmdependencies · ^1.2.12Sign up to research for @radix-ui/react-accordion	1.2.12lockfile	1.3.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.3.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.12 from the lockfile Safe target1.3.012 Oct 2026public for 14+ days Latest1.3.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.12. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.12 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.12 Deprecated No
Behind	npmdependencies · ^1.1.10Sign up to research for @radix-ui/react-avatar	1.1.11lockfile	1.3.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.3.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.11 from the lockfile Safe target1.3.012 Oct 2026public for 14+ days Latest1.3.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.11. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.11 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.10 Deprecated No
Behind	npmdependencies · ^1.3.3Sign up to research for @radix-ui/react-checkbox	1.3.3lockfile	1.4.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.4.012 Oct 2026	minor	0
Upgrade path minor Installed1.3.3 from the lockfile Safe target1.4.012 Oct 2026public for 14+ days Latest1.4.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.3.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.3.3 → 1.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.3.3 Deprecated No
Behind	npmdependencies · ^1.1.12Sign up to research for @radix-ui/react-collapsible	1.1.12lockfile	1.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.12 from the lockfile Safe target1.2.012 Oct 2026public for 14+ days Latest1.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.12. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.12 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.12 Deprecated No
Behind	npmdependencies · ^1.1.15Sign up to research for @radix-ui/react-dialog	1.1.15lockfile	1.3.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.3.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.15 from the lockfile Safe target1.3.012 Oct 2026public for 14+ days Latest1.3.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.15. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.15 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.15 Deprecated No
Behind	npmdependencies · ^2.1.16Sign up to research for @radix-ui/react-dropdown-menu	2.1.16lockfile	2.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	2.2.012 Oct 2026	minor	0
Upgrade path minor Installed2.1.16 from the lockfile Safe target2.2.012 Oct 2026public for 14+ days Latest2.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.1.16. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.1.16 → 2.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.1.16 Deprecated No
Behind	npmdependencies · ^1.1.15Sign up to research for @radix-ui/react-hover-card	1.1.15lockfile	1.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.15 from the lockfile Safe target1.2.012 Oct 2026public for 14+ days Latest1.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.15. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.15 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.15 Deprecated No
Behind	npmdependencies · ^2.1.7Sign up to research for @radix-ui/react-label	2.1.8lockfile	2.1.1712 Oct 2026	Latest release is 14 days old, past the 14-day window	2.1.1712 Oct 2026	patch	0
Upgrade path patch Installed2.1.8 from the lockfile Safe target · latest2.1.1712 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.1.8. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.1.8 → 2.1.17` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.1.7 Deprecated No
Behind	npmdependencies · ^1.1.15Sign up to research for @radix-ui/react-popover	1.1.15lockfile	1.3.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.3.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.15 from the lockfile Safe target1.3.012 Oct 2026public for 14+ days Latest1.3.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.15. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.15 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.15 Deprecated No
Behind	npmdependencies · ^1.1.7Sign up to research for @radix-ui/react-progress	1.1.8lockfile	1.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.8 from the lockfile Safe target1.2.012 Oct 2026public for 14+ days Latest1.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.8. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.8 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.7 Deprecated No
Behind	npmdependencies · ^1.3.8Sign up to research for @radix-ui/react-radio-group	1.3.8lockfile	1.5.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.5.012 Oct 2026	minor	0
Upgrade path minor Installed1.3.8 from the lockfile Safe target1.5.012 Oct 2026public for 14+ days Latest1.5.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.3.8. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.3.8 → 1.5.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.3.8 Deprecated No
Behind	npmdependencies · ^1.2.10Sign up to research for @radix-ui/react-scroll-area	1.2.10lockfile	1.4.012 Oct 2026	Latest release is 14 days old, past the 14-day window	1.4.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.10 from the lockfile Safe target · latest1.4.012 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.10. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.10 → 1.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.10 Deprecated No
Behind	npmdependencies · ^2.2.6Sign up to research for @radix-ui/react-select	2.2.6lockfile	2.4.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	2.4.012 Oct 2026	minor	0
Upgrade path minor Installed2.2.6 from the lockfile Safe target2.4.012 Oct 2026public for 14+ days Latest2.4.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.2.6. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.2.6 → 2.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.2.6 Deprecated No
Behind	npmdependencies · ^1.1.7Sign up to research for @radix-ui/react-separator	1.1.8lockfile	1.2.012 Oct 2026	Latest release is 14 days old, past the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.8 from the lockfile Safe target · latest1.2.012 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.8. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.8 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.7 Deprecated No
Behind	npmdependencies · ^1.2.4Sign up to research for @radix-ui/react-slot	1.2.4lockfile	1.5.012 Oct 2026	Latest release is 14 days old, past the 14-day window	1.5.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.4 from the lockfile Safe target · latest1.5.012 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.4. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.4 → 1.5.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.4 Deprecated No
Behind	npmdependencies · ^1.2.6Sign up to research for @radix-ui/react-switch	1.2.6lockfile	1.4.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.4.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.6 from the lockfile Safe target1.4.012 Oct 2026public for 14+ days Latest1.4.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.6. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.6 → 1.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.6 Deprecated No
Behind	npmdependencies · ^1.1.13Sign up to research for @radix-ui/react-tabs	1.1.13lockfile	1.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.13 from the lockfile Safe target1.2.012 Oct 2026public for 14+ days Latest1.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.13. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.13 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.13 Deprecated No
Behind	npmdependencies · ^1.1.10Sign up to research for @radix-ui/react-toggle	1.1.10lockfile	1.2.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.2.012 Oct 2026	minor	0
Upgrade path minor Installed1.1.10 from the lockfile Safe target1.2.012 Oct 2026public for 14+ days Latest1.2.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.10. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.10 → 1.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.10 Deprecated No
Behind	npmdependencies · ^1.2.8Sign up to research for @radix-ui/react-tooltip	1.2.8lockfile	1.4.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.4.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.8 from the lockfile Safe target1.4.012 Oct 2026public for 14+ days Latest1.4.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.8. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.8 → 1.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.8 Deprecated No
Behind	npmdependencies · ^1.2.2Sign up to research for @radix-ui/react-use-controllable-state	1.2.2lockfile	1.3.012 Oct 2026	Latest release is 14 days old, past the 14-day window	1.3.012 Oct 2026	minor	0
Upgrade path minor Installed1.2.2 from the lockfile Safe target · latest1.3.012 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.2.2 → 1.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.2.2 Deprecated No
Behind	npmdevDependencies · ^3.3.0Sign up to research for @sentry/cli	3.3.3lockfile	3.8.222 Oct 2026	Latest release is only 3 days old, inside the 14-day window	3.8.016 Sep 2026	minor	0
Upgrade path minor Installed3.3.3 from the lockfile Safe target3.8.016 Sep 2026public for 14+ days Latest3.8.222 Oct 2026only 3d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.3.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.3.3 → 3.8.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^3.3.0 Deprecated No
Behind	npmdependencies · ^4.2.11Sign up to research for @smithy/eventstream-codec	4.2.12lockfile	4.5.215 Aug 2026	Latest release is 71 days old, past the 14-day window	4.5.215 Aug 2026	minor	0
Upgrade path minor Installed4.2.12 from the lockfile Safe target · latest4.5.215 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.2.12. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.2.12 → 4.5.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.2.11 Deprecated No
Behind	npmdependencies · ^5.3.11Sign up to research for @smithy/signature-v4	5.3.12lockfile	5.7.425 Sep 2026	Latest release is 30 days old, past the 14-day window	5.7.425 Sep 2026	minor	0
Upgrade path minor Installed5.3.12 from the lockfile Safe target · latest5.7.425 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.3.12. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.3.12 → 5.7.4` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.3.11 Deprecated No
Behind	npmdependencies · ^4.2.2Sign up to research for @smithy/util-utf8	4.2.2lockfile	4.5.215 Aug 2026	Latest release is 71 days old, past the 14-day window	4.5.215 Aug 2026	minor	0
Upgrade path minor Installed4.2.2 from the lockfile Safe target · latest4.5.215 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.2.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.2.2 → 4.5.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.2.2 Deprecated No
Behind	npmdevDependencies · ^4Sign up to research for @tailwindcss/postcss	4.2.1lockfile	4.3.316 Jul 2026	Latest release is 101 days old, past the 14-day window	4.3.316 Jul 2026	minor	0
Upgrade path minor Installed4.2.1 from the lockfile Safe target · latest4.3.316 Jul 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.2.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.2.1 → 4.3.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^4 Deprecated No
Behind	npmdependencies · ^5.90.21Sign up to research for @tanstack/react-query	5.90.21lockfile	5.104.519 Oct 2026	Latest release is only 6 days old, inside the 14-day window	5.104.211 Oct 2026	minor	0
Upgrade path minor Installed5.90.21 from the lockfile Safe target5.104.211 Oct 2026public for 14+ days Latest5.104.519 Oct 2026only 6d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.90.21. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.90.21 → 5.104.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.90.21 Deprecated No
Behind	npmdevDependencies · ^10.4.1Sign up to research for @testing-library/dom	10.4.1lockfile	10.4.213 Sep 2026	Latest release is 42 days old, past the 14-day window	10.4.213 Sep 2026	patch	0
Upgrade path patch Installed10.4.1 from the lockfile Safe target · latest10.4.213 Sep 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.4.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.4.1 → 10.4.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^10.4.1 Deprecated No
Behind	npmdevDependencies · ^16.3.0Sign up to research for @testing-library/react	16.3.2lockfile	16.3.327 Aug 2026	Latest release is 59 days old, past the 14-day window	16.3.327 Aug 2026	patch	0
Upgrade path patch Installed16.3.2 from the lockfile Safe target · latest16.3.327 Aug 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 16.3.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `16.3.2 → 16.3.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^16.3.0 Deprecated No
Behind	npmdevDependencies · ^14.6.1Sign up to research for @testing-library/user-event	14.6.1lockfile	14.6.813 Oct 2026	Latest release is only 13 days old, inside the 14-day window	14.6.72 Sep 2026	patch	0
Upgrade path patch Installed14.6.1 from the lockfile Safe target14.6.72 Sep 2026public for 14+ days Latest14.6.813 Oct 2026only 13d old, inside the 14-day window A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 14.6.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `14.6.1 → 14.6.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^14.6.1 Deprecated No
Behind	npmdevDependencies · ^8.18.0Sign up to research for @types/pg	8.18.0lockfile	8.23.117 Aug 2026	Latest release is 69 days old, past the 14-day window	8.23.117 Aug 2026	minor	0
Upgrade path minor Installed8.18.0 from the lockfile Safe target · latest8.23.117 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.18.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.18.0 → 8.23.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^8.18.0 Deprecated No
Behind	npmdevDependencies · ^19Sign up to research for @types/react	19.2.14lockfile	19.3.09 Sep 2026	Latest release is 46 days old, past the 14-day window	19.3.09 Sep 2026	minor	0
Upgrade path minor Installed19.2.14 from the lockfile Safe target · latest19.3.09 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 19.2.14. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `19.2.14 → 19.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^19 Deprecated No
Behind	npmdevDependencies · ^19Sign up to research for @types/react-dom	19.2.3lockfile	19.3.09 Sep 2026	Latest release is 46 days old, past the 14-day window	19.3.09 Sep 2026	minor	0
Upgrade path minor Installed19.2.3 from the lockfile Safe target · latest19.3.09 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 19.2.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `19.2.3 → 19.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^19 Deprecated No
Behind	npmdevDependencies · ^7.7.1Sign up to research for @types/semver	7.7.1lockfile	7.8.02 Aug 2026	Latest release is 84 days old, past the 14-day window	7.8.02 Aug 2026	minor	0
Upgrade path minor Installed7.7.1 from the lockfile Safe target · latest7.8.02 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.7.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `7.7.1 → 7.8.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^7.7.1 Deprecated No
Behind	npmdevDependencies · ^8.18.1Sign up to research for @types/ws	8.18.1lockfile	8.18.229 Sep 2026	Latest release is 26 days old, past the 14-day window	8.18.229 Sep 2026	patch	0
Upgrade path patch Installed8.18.1 from the lockfile Safe target · latest8.18.229 Sep 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.18.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.18.1 → 8.18.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^8.18.1 Deprecated No
Behind	npmdependencies · 3.1.11Sign up to research for asana	3.1.11lockfile	3.3.02 Oct 2026	Latest release is 23 days old, past the 14-day window	3.3.02 Oct 2026	minor	0
Upgrade path minor Installed3.1.11 from the lockfile Safe target · latest3.3.02 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.1.11. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.1.11 → 3.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 3.1.11 Deprecated No
Behind	npmdependencies · catalog:Sign up to research for better-auth	1.6.22lockfile	1.7.1325 Oct 2026	Latest release is only 0 days old, inside the 14-day window	1.7.730 Sep 2026	minor	0
Upgrade path minor Installed1.6.22 from the lockfile Safe target1.7.730 Sep 2026public for 14+ days Latest1.7.1325 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.6.22. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.6.22 → 1.7.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared catalog: Deprecated No
Behind	npmdependencies · ^3.13.0Sign up to research for cronstrue	3.13.0lockfile	3.38.021 Oct 2026	Latest release is only 4 days old, inside the 14-day window	3.31.08 Oct 2026	minor	0
Upgrade path minor Installed3.13.0 from the lockfile Safe target3.31.08 Oct 2026public for 14+ days Latest3.38.021 Oct 2026only 4d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.13.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.13.0 → 3.31.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.13.0 Deprecated No
Behind	npmdependencies · ^4.1.0Sign up to research for date-fns	4.1.0lockfile	4.4.029 May 2026	Latest release is 149 days old, past the 14-day window	4.4.029 May 2026	minor	0
Upgrade path minor Installed4.1.0 from the lockfile Safe target · latest4.4.029 May 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.1.0 → 4.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^4.1.0 Deprecated No
Behind	npmdevDependencies · 18.3.1Sign up to research for dependency-cruiser	18.3.1lockfile	18.7.019 Oct 2026	Latest release is only 6 days old, inside the 14-day window	18.6.011 Oct 2026	minor	0
Upgrade path minor Installed18.3.1 from the lockfile Safe target18.6.011 Oct 2026public for 14+ days Latest18.7.019 Oct 2026only 6d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 18.3.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `18.3.1 → 18.6.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared 18.3.1 Deprecated No
Behind	npmdependencies · ^0.31.9Sign up to research for drizzle-kit	0.31.9lockfile	0.31.1121 Sep 2026	Latest release is 34 days old, past the 14-day window	0.31.1121 Sep 2026	patch	0
Upgrade path patch Installed0.31.9 from the lockfile Safe target · latest0.31.1121 Sep 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.31.9. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.31.9 → 0.31.11` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.31.9 Deprecated No
Behind	npmdependencies · ^0.45.2Sign up to research for drizzle-orm	0.45.2lockfile	0.45.48 Oct 2026	Latest release is 17 days old, past the 14-day window	0.45.48 Oct 2026	patch	0
Upgrade path patch Installed0.45.2 from the lockfile Safe target · latest0.45.48 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.45.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.45.2 → 0.45.4` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.45.2 Deprecated No
Behind	npmdependencies · ^10.34.0Sign up to research for dropbox	10.34.0lockfile	10.47.023 Sep 2026	Latest release is 33 days old, past the 14-day window	10.47.023 Sep 2026	minor	0
Upgrade path minor Installed10.34.0 from the lockfile Safe target · latest10.47.023 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.34.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.34.0 → 10.47.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.34.0 Deprecated No
Behind	npmdependencies · ^0.11.1Sign up to research for elkjs	0.11.1lockfile	0.12.017 Jul 2026	Latest release is 100 days old, past the 14-day window	0.12.017 Jul 2026	minor	0
Upgrade path minor Installed0.11.1 from the lockfile Safe target · latest0.12.017 Jul 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.11.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.11.1 → 0.12.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.11.1 Deprecated No
Behind	npmdevDependencies · ^0.28.1Sign up to research for esbuild	0.28.1lockfile	0.28.28 Aug 2026	Latest release is 78 days old, past the 14-day window	0.28.28 Aug 2026	patch	0
Upgrade path patch Installed0.28.1 from the lockfile Safe target · latest0.28.28 Aug 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.28.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.28.1 → 0.28.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^0.28.1 Deprecated No
Behind	npmdependencies · ^5.2.1Sign up to research for express	5.2.1lockfile	5.3.09 Oct 2026	Latest release is 16 days old, past the 14-day window	5.3.09 Oct 2026	minor	0
Upgrade path minor Installed5.2.1 from the lockfile Safe target · latest5.3.09 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.2.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.2.1 → 5.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.2.1 Deprecated No
Behind	npmdevDependencies · ^11.11.1Sign up to research for highlight.js	11.11.1lockfile	11.12.012 Aug 2026	Latest release is 75 days old, past the 14-day window	11.12.012 Aug 2026	minor	0
Upgrade path minor Installed11.11.1 from the lockfile Safe target · latest11.12.012 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 11.11.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `11.11.1 → 11.12.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^11.11.1 Deprecated No
Behind	npmdependencies · 3.0.0Sign up to research for import-in-the-middle	3.0.0lockfile	3.5.230 Sep 2026	Latest release is 25 days old, past the 14-day window	3.5.230 Sep 2026	minor	0
Upgrade path minor Installed3.0.0 from the lockfile Safe target · latest3.5.230 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.0.0 → 3.5.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 3.0.0 Deprecated No
Behind	npmdependencies · ^2.3.0Sign up to research for ipaddr.js	2.3.0lockfile	2.5.04 Aug 2026	Latest release is 82 days old, past the 14-day window	2.5.04 Aug 2026	minor	0
Upgrade path minor Installed2.3.0 from the lockfile Safe target · latest2.5.04 Aug 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.3.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.3.0 → 2.5.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.3.0 Deprecated No
Behind	npmdependencies · ^6.2.0Sign up to research for jose	6.2.1lockfile	6.2.1320 Oct 2026	Latest release is only 6 days old, inside the 14-day window	6.2.125 Sep 2026	patch	0
Upgrade path patch Installed6.2.1 from the lockfile Safe target6.2.125 Sep 2026public for 14+ days Latest6.2.1320 Oct 2026only 6d old, inside the 14-day window A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.2.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.2.1 → 6.2.12` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^6.2.0 Deprecated No
Behind	npmdependencies · ^3.10.28Sign up to research for jsforce	3.10.28lockfile	3.12.016 Oct 2026	Latest release is only 9 days old, inside the 14-day window	3.10.298 Oct 2026	patch	0
Upgrade path patch Installed3.10.28 from the lockfile Safe target3.10.298 Oct 2026public for 14+ days Latest3.12.016 Oct 2026only 9d old, inside the 14-day window A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.10.28. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.10.28 → 3.10.29` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.10.28 Deprecated No
Behind	npmdependencies · ^3.10.1Sign up to research for jszip	3.10.1lockfile	3.10.28 Sep 2026	Latest release is 47 days old, past the 14-day window	3.10.28 Sep 2026	patch	0
Upgrade path patch Installed3.10.1 from the lockfile Safe target · latest3.10.28 Sep 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.10.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.10.1 → 3.10.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.10.1 Deprecated No
Behind	npmdependencies · ^1.12.0Sign up to research for mammoth	1.12.0lockfile	1.13.026 Sep 2026	Latest release is 29 days old, past the 14-day window	1.13.026 Sep 2026	minor	0
Upgrade path minor Installed1.12.0 from the lockfile Safe target · latest1.13.026 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.12.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.12.0 → 1.13.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.12.0 Deprecated No
Behind	npmdependencies · ^0.11.0Sign up to research for node-vault	0.11.0lockfile	0.13.011 Oct 2026	Latest release is 14 days old, past the 14-day window	0.13.011 Oct 2026	minor	0
Upgrade path minor Installed0.11.0 from the lockfile Safe target · latest0.13.011 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.11.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.11.0 → 0.13.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^0.11.0 Deprecated No
Behind	npmdependencies · 2026.7.1-2Sign up to research for openclaw	2026.7.1-2lockfile	2026.10.724 Oct 2026	Latest release is only 1 days old, inside the 14-day window	2026.10.212 Oct 2026	minor	0
Upgrade path minor Installed2026.7.1-2 from the lockfile Safe target2026.10.212 Oct 2026public for 14+ days Latest2026.10.724 Oct 2026only 1d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2026.7.1-2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2026.7.1-2 → 2026.10.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 2026.7.1-2 Deprecated No
Behind	npmdependencies · ^8.20.0Sign up to research for pg	8.20.0lockfile	8.23.130 Sep 2026	Latest release is 25 days old, past the 14-day window	8.23.130 Sep 2026	minor	0
Upgrade path minor Installed8.20.0 from the lockfile Safe target · latest8.23.130 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.20.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.20.0 → 8.23.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^8.20.0 Deprecated No
Behind	npmdependencies · ^10.3.1Sign up to research for pino	10.3.1lockfile	10.4.02 Oct 2026	Latest release is 23 days old, past the 14-day window	10.4.02 Oct 2026	minor	0
Upgrade path minor Installed10.3.1 from the lockfile Safe target · latest10.4.02 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.3.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `10.3.1 → 10.4.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^10.3.1 Deprecated No
Behind	npmdependencies · ^13.1.3Sign up to research for pino-pretty	13.1.3lockfile	13.2.04 Oct 2026	Latest release is 21 days old, past the 14-day window	13.2.04 Oct 2026	minor	0
Upgrade path minor Installed13.1.3 from the lockfile Safe target · latest13.2.04 Oct 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 13.1.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `13.1.3 → 13.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^13.1.3 Deprecated No
Behind	npmdependencies · 1.58.2Sign up to research for playwright-core	1.58.2lockfile	1.64.114 Oct 2026	Latest release is only 11 days old, inside the 14-day window	1.64.07 Oct 2026	minor	0
Upgrade path minor Installed1.58.2 from the lockfile Safe target1.64.07 Oct 2026public for 14+ days Latest1.64.114 Oct 2026only 11d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.58.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.58.2 → 1.64.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.58.2 Deprecated No
Behind	npmdependencies · ^1.399.2Sign up to research for posthog-js	1.399.2lockfile	1.438.2123 Oct 2026	Latest release is only 2 days old, inside the 14-day window	1.438.79 Oct 2026	minor	0
Upgrade path minor Installed1.399.2 from the lockfile Safe target1.438.79 Oct 2026public for 14+ days Latest1.438.2123 Oct 2026only 2d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.399.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.399.2 → 1.438.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.399.2 Deprecated No
Behind	npmdependencies · ^5.41.0Sign up to research for posthog-node	5.41.0lockfile	5.57.225 Oct 2026	Latest release is only 0 days old, inside the 14-day window	5.55.211 Oct 2026	minor	0
Upgrade path minor Installed5.41.0 from the lockfile Safe target5.55.211 Oct 2026public for 14+ days Latest5.57.225 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.41.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.41.0 → 5.55.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^5.41.0 Deprecated No
Behind	npmdependencies · ^1.4.3Sign up to research for radix-ui	1.4.3lockfile	1.8.112 Oct 2026	Latest release is only 13 days old, inside the 14-day window	1.8.012 Oct 2026	minor	0
Upgrade path minor Installed1.4.3 from the lockfile Safe target1.8.012 Oct 2026public for 14+ days Latest1.8.112 Oct 2026only 13d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.4.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.4.3 → 1.8.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.4.3 Deprecated No
Behind	npmdependencies · 19.2.4Sign up to research for react	19.2.4lockfile	19.3.114 Oct 2026	Latest release is only 11 days old, inside the 14-day window	19.3.09 Sep 2026	minor	0
Upgrade path minor Installed19.2.4 from the lockfile Safe target19.3.09 Sep 2026public for 14+ days Latest19.3.114 Oct 2026only 11d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 19.2.4. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `19.2.4 → 19.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 19.2.4 Deprecated No
Behind	npmdependencies · 19.2.4Sign up to research for react-dom	19.2.4lockfile	19.3.114 Oct 2026	Latest release is only 11 days old, inside the 14-day window	19.3.09 Sep 2026	minor	0
Upgrade path minor Installed19.2.4 from the lockfile Safe target19.3.09 Sep 2026public for 14+ days Latest19.3.114 Oct 2026only 11d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 19.2.4. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `19.2.4 → 19.3.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 19.2.4 Deprecated No
Behind	npmdependencies · ^6.1.1Sign up to research for react-error-boundary	6.1.1lockfile	6.1.620 Sep 2026	Latest release is 35 days old, past the 14-day window	6.1.620 Sep 2026	patch	0
Upgrade path patch Installed6.1.1 from the lockfile Safe target · latest6.1.620 Sep 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.1.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `6.1.1 → 6.1.6` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^6.1.1 Deprecated No
Behind	npmdependencies · ^7.71.2Sign up to research for react-hook-form	7.71.2lockfile	8.0.0-beta.523 Oct 2026	Latest release is only 2 days old, inside the 14-day window	7.90.011 Oct 2026	minor	0
Upgrade path minor Installed7.71.2 from the lockfile Safe target7.90.011 Oct 2026public for 14+ days Latest8.0.0-beta.523 Oct 2026only 2d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.71.2. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `7.71.2 → 7.90.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^7.71.2 Deprecated No
Behind	npmdependencies · ^2.0.18Sign up to research for react-qr-code	2.0.18lockfile	2.2.09 Jun 2026	Latest release is 138 days old, past the 14-day window	2.2.09 Jun 2026	minor	0
Upgrade path minor Installed2.0.18 from the lockfile Safe target · latest2.2.09 Jun 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.18. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.18 → 2.2.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.0.18 Deprecated No
Behind	npmdependencies · ^16.1.1Sign up to research for react-syntax-highlighter	16.1.1lockfile	16.1.28 Oct 2026	Latest release is 17 days old, past the 14-day window	16.1.28 Oct 2026	patch	0
Upgrade path patch Installed16.1.1 from the lockfile Safe target · latest16.1.28 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 16.1.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `16.1.1 → 16.1.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^16.1.1 Deprecated No
Behind	npmdependencies · 3.8.0Sign up to research for recharts	3.8.0lockfile	3.10.125 Jul 2026	Latest release is 92 days old, past the 14-day window	3.10.125 Jul 2026	minor	0
Upgrade path minor Installed3.8.0 from the lockfile Safe target · latest3.10.125 Jul 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.8.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.8.0 → 3.10.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 3.8.0 Deprecated No
Behind	npmdependencies · 5.1.0Sign up to research for safe-regex2	5.1.0lockfile	5.1.210 Oct 2026	Latest release is 15 days old, past the 14-day window	5.1.210 Oct 2026	patch	0
Upgrade path patch Installed5.1.0 from the lockfile Safe target · latest5.1.210 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.1.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `5.1.0 → 5.1.2` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 5.1.0 Deprecated No
Behind	npmdevDependencies · ^7.7.4Sign up to research for semver	7.7.4lockfile	7.8.519 Jun 2026	Latest release is 128 days old, past the 14-day window	7.8.519 Jun 2026	minor	0
Upgrade path minor Installed7.7.4 from the lockfile Safe target · latest7.8.519 Jun 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.7.4. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `7.7.4 → 7.8.5` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^7.7.4 Deprecated No
Behind	npmdependencies · ^16.11.0Sign up to research for simple-icons	16.11.0lockfile	16.36.025 Oct 2026	Latest release is only 0 days old, inside the 14-day window	16.35.011 Oct 2026	minor	0
Upgrade path minor Installed16.11.0 from the lockfile Safe target16.35.011 Oct 2026public for 14+ days Latest16.36.025 Oct 2026only 0d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 16.11.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `16.11.0 → 16.35.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^16.11.0 Deprecated No
Behind	npmdependencies · 1.9.0Sign up to research for smol-toml	1.9.0lockfile	1.9.19 Oct 2026	Latest release is 16 days old, past the 14-day window	1.9.19 Oct 2026	patch	0
Upgrade path patch Installed1.9.0 from the lockfile Safe target · latest1.9.19 Oct 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.9.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.9.0 → 1.9.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared 1.9.0 Deprecated No
Behind	npmdependencies · ^2.0.7Sign up to research for sonner	2.0.7lockfile	2.0.89 Aug 2026	Latest release is 77 days old, past the 14-day window	2.0.89 Aug 2026	patch	0
Upgrade path patch Installed2.0.7 from the lockfile Safe target · latest2.0.89 Aug 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.0.7. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.0.7 → 2.0.8` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.0.7 Deprecated No
Behind	npmdependencies · ^2.4.0Sign up to research for streamdown	2.4.0lockfile	2.7.119 Oct 2026	Latest release is only 6 days old, inside the 14-day window	2.7.030 Sep 2026	minor	0
Upgrade path minor Installed2.4.0 from the lockfile Safe target2.7.030 Sep 2026public for 14+ days Latest2.7.119 Oct 2026only 6d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.4.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.4.0 → 2.7.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^2.4.0 Deprecated No
Behind	npmdependencies · ^3.5.0Sign up to research for tailwind-merge	3.5.0lockfile	3.7.012 Sep 2026	Latest release is 43 days old, past the 14-day window	3.7.012 Sep 2026	minor	0
Upgrade path minor Installed3.5.0 from the lockfile Safe target · latest3.7.012 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.5.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `3.5.0 → 3.7.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^3.5.0 Deprecated No
Behind	npmdevDependencies · ^4Sign up to research for tailwindcss	4.2.1lockfile	4.3.316 Jul 2026	Latest release is 101 days old, past the 14-day window	4.3.316 Jul 2026	minor	0
Upgrade path minor Installed4.2.1 from the lockfile Safe target · latest4.3.316 Jul 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.2.1. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.2.1 → 4.3.3` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^4 Deprecated No
Behind	npmdevDependencies · ^0.21.0Sign up to research for tsdown	0.21.3lockfile	0.23.223 Oct 2026	Latest release is only 2 days old, inside the 14-day window	0.23.110 Oct 2026	minor	0
Upgrade path minor Installed0.21.3 from the lockfile Safe target0.23.110 Oct 2026public for 14+ days Latest0.23.223 Oct 2026only 2d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.21.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `0.21.3 → 0.23.1` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^0.21.0 Deprecated No
Behind	npmdevDependencies · ^4.21.0Sign up to research for tsx	4.21.0lockfile	4.23.1520 Sep 2026	Latest release is 35 days old, past the 14-day window	4.23.1520 Sep 2026	minor	0
Upgrade path minor Installed4.21.0 from the lockfile Safe target · latest4.23.1520 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.21.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `4.21.0 → 4.23.15` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^4.21.0 Deprecated No
Behind	npmdevDependencies · ^2.9.14Sign up to research for turbo	2.9.14lockfile	2.11.1020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	2.11.72 Oct 2026	minor	0
Upgrade path minor Installed2.9.14 from the lockfile Safe target2.11.72 Oct 2026public for 14+ days Latest2.11.1020 Oct 2026only 5d old, inside the 14-day window A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.9.14. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `2.9.14 → 2.11.7` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared ^2.9.14 Deprecated No
Behind	npmdevDependencies · catalog:Sign up to research for typescript-7	typescript@7.0.1-rclockfile	-	Release age unknown	-	unknown	0
Upgrade path unknown Installedtypescript@7.0.1-rc from the lockfile Safe target- no release has cleared the window yet Could not tell how far behind this is. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for typescript@7.0.1-rc. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `typescript@7.0.1-rc → target` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section devDependencies Declared catalog: Deprecated No Registry lookup registry 404
Behind	npmdependencies · ^1.1.3Sign up to research for use-stick-to-bottom	1.1.3lockfile	1.1.64 Jun 2026	Latest release is 143 days old, past the 14-day window	1.1.64 Jun 2026	patch	0
Upgrade path patch Installed1.1.3 from the lockfile Safe target · latest1.1.64 Jun 2026public for 14+ days A patch behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.3. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `1.1.3 → 1.1.6` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^1.1.3 Deprecated No
Behind	npmdependencies · ^8.20.1Sign up to research for ws	8.21.0lockfile	8.22.026 Sep 2026	Latest release is 29 days old, past the 14-day window	8.22.026 Sep 2026	minor	0
Upgrade path minor Installed8.21.0 from the lockfile Safe target · latest8.22.026 Sep 2026public for 14+ days A minor release behind the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.21.0. Checked against OSV. Research not included on this scan Breaking changes, the work involved and the new features between `8.21.0 → 8.22.0` are researched for the top 3 tickets on a free scan. Create a free account to pick which tickets get researched. Sign up to research this upgrade Already have an account? Sign in Ecosystem npm Section dependencies Declared ^8.20.1 Deprecated No
Current	npmdependencies · ^0.0.4	0.0.4lockfile	0.0.45 Jul 2023	Latest release is 1209 days old, past the 14-day window	0.0.45 Jul 2023	current	0
Upgrade path current Installed0.0.4 from the lockfile Safe target · latest0.0.45 Jul 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.0.4. Checked against OSV. Nothing to research: @anthropic-ai/tokenizer is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.0.4 Deprecated No
Current	npmdependencies · ^5.2.0	5.2.0lockfile	5.2.016 Oct 2023	Latest release is 1105 days old, past the 14-day window	5.2.016 Oct 2023	current	0
Upgrade path current Installed5.2.0 from the lockfile Safe target · latest5.2.016 Oct 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 5.2.0. Checked against OSV. Nothing to research: @aws-crypto/sha256-js is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^5.2.0 Deprecated No
Current	npmdependencies · 3.18.2	3.18.2lockfile	3.18.229 Sep 2026	Latest release is 26 days old, past the 14-day window	3.18.229 Sep 2026	current	0
Upgrade path current Installed3.18.2 from the lockfile Safe target · latest3.18.229 Sep 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.18.2. Checked against OSV. Nothing to research: @crawlee/cheerio is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 3.18.2 Deprecated No
Current	npmdependencies · ^6.3.1	6.3.1lockfile	6.3.15 Dec 2024	Latest release is 689 days old, past the 14-day window	6.3.15 Dec 2024	current	0
Upgrade path current Installed6.3.1 from the lockfile Safe target · latest6.3.15 Dec 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.3.1. Checked against OSV. Nothing to research: @dnd-kit/core is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^6.3.1 Deprecated No
Current	npmdependencies · ^10.0.0	10.0.0lockfile	10.0.04 Dec 2024	Latest release is 690 days old, past the 14-day window	10.0.04 Dec 2024	current	0
Upgrade path current Installed10.0.0 from the lockfile Safe target · latest10.0.04 Dec 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.0.0. Checked against OSV. Nothing to research: @dnd-kit/sortable is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^10.0.0 Deprecated No
Current	npmdependencies · ^3.2.2	3.2.2lockfile	3.2.26 Nov 2023	Latest release is 1084 days old, past the 14-day window	3.2.26 Nov 2023	current	0
Upgrade path current Installed3.2.2 from the lockfile Safe target · latest3.2.26 Nov 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.2.2. Checked against OSV. Nothing to research: @dnd-kit/utilities is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^3.2.2 Deprecated No
Current	npmdependencies · 3.2.3	3.2.3lockfile	3.2.422 Oct 2026	Latest release is only 4 days old, inside the 14-day window	3.2.310 Oct 2026	current	0
Upgrade path current Installed3.2.3 from the lockfile Safe target3.2.310 Oct 2026public for 14+ days Latest3.2.422 Oct 2026only 4d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.2.3. Checked against OSV. Nothing to research: @fastify/busboy is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 3.2.3 Deprecated No
Current	npmdependencies · ^43.8.0	43.8.0lockfile	43.8.01 Nov 2025	Latest release is 359 days old, past the 14-day window	43.8.01 Nov 2025	current	0
Upgrade path current Installed43.8.0 from the lockfile Safe target · latest43.8.01 Nov 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 43.8.0. Checked against OSV. Nothing to research: @gitbeaker/rest is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^43.8.0 Deprecated No
Current	npmdependencies · ^2.1.0	2.1.0lockfile	2.1.05 Oct 2025	Latest release is 385 days old, past the 14-day window	2.1.05 Oct 2025	current	0
Upgrade path current Installed2.1.0 from the lockfile Safe target · latest2.1.05 Oct 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.1.0. Checked against OSV. Nothing to research: @kubiks/otel-drizzle is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^2.1.0 Deprecated No
Current	npmdependencies · 1.9.1	1.9.1lockfile	1.9.129 Sep 2026	Latest release is 26 days old, past the 14-day window	1.9.129 Sep 2026	current	0
Upgrade path current Installed1.9.1 from the lockfile Safe target · latest1.9.129 Sep 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.9.1. Checked against OSV. Nothing to research: @microsoft/agents-activity is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 1.9.1 Deprecated No
Current	npmdependencies · 1.9.1	1.9.1lockfile	1.9.129 Sep 2026	Latest release is 26 days old, past the 14-day window	1.9.129 Sep 2026	current	0
Upgrade path current Installed1.9.1 from the lockfile Safe target · latest1.9.129 Sep 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.9.1. Checked against OSV. Nothing to research: @microsoft/agents-hosting is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 1.9.1 Deprecated No
Current	npmdependencies · ^3.0.7	3.0.7lockfile	3.0.719 Sep 2023	Latest release is 1132 days old, past the 14-day window	3.0.719 Sep 2023	current	0
Upgrade path current Installed3.0.7 from the lockfile Safe target · latest3.0.719 Sep 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.7. Checked against OSV. Nothing to research: @microsoft/microsoft-graph-client is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^3.0.7 Deprecated No
Current	npmdevDependencies · ^2.43.1	2.43.1lockfile	2.43.13 Oct 2025	Latest release is 387 days old, past the 14-day window	2.43.13 Oct 2025	current	0
Upgrade path current Installed2.43.1 from the lockfile Safe target · latest2.43.13 Oct 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.43.1. Checked against OSV. Nothing to research: @microsoft/microsoft-graph-types is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^2.43.1 Deprecated No
Current	npmdependencies · ^1.32.1	1.32.1lockfile	1.32.223 Oct 2026	Latest release is only 2 days old, inside the 14-day window	1.32.15 Oct 2026	current	0
Upgrade path current Installed1.32.1 from the lockfile Safe target1.32.15 Oct 2026public for 14+ days Latest1.32.223 Oct 2026only 2d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.32.1. Checked against OSV. Nothing to research: @modelcontextprotocol/sdk is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.32.1 Deprecated No
Current	npmdependencies · ^4.7.0	4.7.0lockfile	4.7.013 Feb 2025	Latest release is 619 days old, past the 14-day window	4.7.013 Feb 2025	current	0
Upgrade path current Installed4.7.0 from the lockfile Safe target · latest4.7.013 Feb 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.7.0. Checked against OSV. Nothing to research: @monaco-editor/react is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.7.0 Deprecated No
Current	npmdependencies · ^1.7.0	1.7.0lockfile	1.7.016 Dec 2025	Latest release is 313 days old, past the 14-day window	1.7.016 Dec 2025	current	0
Upgrade path current Installed1.7.0 from the lockfile Safe target · latest1.7.016 Dec 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.7.0. Checked against OSV. Nothing to research: @ngrok/ngrok is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.7.0 Deprecated No
Current	npmdependencies · ^22.0.1	22.0.1lockfile	22.0.131 Oct 2025	Latest release is 359 days old, past the 14-day window	22.0.131 Oct 2025	current	0
Upgrade path current Installed22.0.1 from the lockfile Safe target · latest22.0.131 Oct 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 22.0.1. Checked against OSV. Nothing to research: @octokit/rest is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^22.0.1 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	0.223.06 Oct 2026	Latest release is 19 days old, past the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target · latest0.223.06 Oct 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/api-logs is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdependencies · ^0.81.0	0.81.0lockfile	0.82.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.81.06 Oct 2026	current	0
Upgrade path current Installed0.81.0 from the lockfile Safe target0.81.06 Oct 2026public for 14+ days Latest0.82.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.81.0. Checked against OSV. Nothing to research: @opentelemetry/auto-instrumentations-node is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.81.0 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	0.300.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target0.223.06 Oct 2026public for 14+ days Latest0.300.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/exporter-logs-otlp-http is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	0.300.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target0.223.06 Oct 2026public for 14+ days Latest0.300.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/exporter-trace-otlp-http is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	0.300.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target0.223.06 Oct 2026public for 14+ days Latest0.300.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/otlp-exporter-base is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdependencies · ^2.12.0	2.12.0lockfile	3.0.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	2.12.06 Oct 2026	current	0
Upgrade path current Installed2.12.0 from the lockfile Safe target2.12.06 Oct 2026public for 14+ days Latest3.0.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.12.0. Checked against OSV. Nothing to research: @opentelemetry/resources is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^2.12.0 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	3.0.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target0.223.06 Oct 2026public for 14+ days Latest3.0.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/sdk-logs is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdependencies · ^0.223.0	0.223.0lockfile	0.300.020 Oct 2026	Latest release is only 5 days old, inside the 14-day window	0.223.06 Oct 2026	current	0
Upgrade path current Installed0.223.0 from the lockfile Safe target0.223.06 Oct 2026public for 14+ days Latest0.300.020 Oct 2026only 5d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.223.0. Checked against OSV. Nothing to research: @opentelemetry/sdk-node is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.223.0 Deprecated No
Current	npmdevDependencies · 3.0.7	3.0.7lockfile	3.0.77 Nov 2023	Latest release is 1083 days old, past the 14-day window	3.0.77 Nov 2023	current	0
Upgrade path current Installed3.0.7 from the lockfile Safe target · latest3.0.77 Nov 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.7. Checked against OSV. Nothing to research: @types/d3-dsv is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared 3.0.7 Deprecated No
Current	npmdevDependencies · ^4.0.9	4.0.9lockfile	4.0.97 Nov 2023	Latest release is 1083 days old, past the 14-day window	4.0.97 Nov 2023	current	0
Upgrade path current Installed4.0.9 from the lockfile Safe target · latest4.0.97 Nov 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.9. Checked against OSV. Nothing to research: @types/js-yaml is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^4.0.9 Deprecated No
Current	npmdevDependencies · ^4.17.12	4.17.12lockfile	4.17.1221 Nov 2023	Latest release is 1069 days old, past the 14-day window	4.17.1221 Nov 2023	current	0
Upgrade path current Installed4.17.12 from the lockfile Safe target · latest4.17.1221 Nov 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.17.12. Checked against OSV. Nothing to research: @types/lodash-es is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^4.17.12 Deprecated No
Current	npmdependencies · ^1.1.5	1.1.5lockfile	1.1.52 Apr 2025	Latest release is 572 days old, past the 14-day window	1.1.52 Apr 2025	current	0
Upgrade path current Installed1.1.5 from the lockfile Safe target · latest1.1.52 Apr 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.5. Checked against OSV. Nothing to research: @types/pdf-parse is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.1.5 Deprecated No
Current	npmdevDependencies · ^15.5.13	15.5.13lockfile	15.5.133 May 2024	Latest release is 905 days old, past the 14-day window	15.5.133 May 2024	current	0
Upgrade path current Installed15.5.13 from the lockfile Safe target · latest15.5.133 May 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 15.5.13. Checked against OSV. Nothing to research: @types/react-syntax-highlighter is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^15.5.13 Deprecated No
Current	npmdevDependencies · ^0.7.39	0.7.39lockfile	0.7.397 Nov 2023	Latest release is 1083 days old, past the 14-day window	0.7.397 Nov 2023	current	0
Upgrade path current Installed0.7.39 from the lockfile Safe target · latest0.7.397 Nov 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.7.39. Checked against OSV. Nothing to research: @types/ua-parser-js is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^0.7.39 Deprecated No
Current	npmdependencies · ^2.4.1	2.4.1lockfile	2.4.123 Oct 2023	Latest release is 1098 days old, past the 14-day window	2.4.123 Oct 2023	current	0
Upgrade path current Installed2.4.1 from the lockfile Safe target · latest2.4.123 Oct 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.4.1. Checked against OSV. Nothing to research: @uidotdev/usehooks is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^2.4.1 Deprecated No
Current	npmdependencies · ^0.11.0	0.11.0lockfile	0.11.022 Dec 2025	Latest release is 307 days old, past the 14-day window	0.11.022 Dec 2025	current	0
Upgrade path current Installed0.11.0 from the lockfile Safe target · latest0.11.022 Dec 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.11.0. Checked against OSV. Nothing to research: @xterm/addon-fit is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.11.0 Deprecated No
Current	npmdependencies · ^6.0.0	6.0.0lockfile	6.0.022 Dec 2025	Latest release is 307 days old, past the 14-day window	6.0.022 Dec 2025	current	0
Upgrade path current Installed6.0.0 from the lockfile Safe target · latest6.0.022 Dec 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.0.0. Checked against OSV. Nothing to research: @xterm/xterm is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^6.0.0 Deprecated No
Current	npmdependencies · ^1.0.20	1.0.20lockfile	1.0.2028 Aug 2024	Latest release is 788 days old, past the 14-day window	1.0.2028 Aug 2024	current	0
Upgrade path current Installed1.0.20 from the lockfile Safe target · latest1.0.2028 Aug 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.20. Checked against OSV. Nothing to research: aws4fetch is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.0.20 Deprecated No
Current	npmdependencies · ^1.2.0	1.2.0lockfile	1.2.023 Jan 2026	Latest release is 275 days old, past the 14-day window	1.2.023 Jan 2026	current	0
Upgrade path current Installed1.2.0 from the lockfile Safe target · latest1.2.023 Jan 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.2.0. Checked against OSV. Nothing to research: cheerio is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.2.0 Deprecated No
Current	npmdependencies · ^0.7.1	0.7.1lockfile	0.7.126 Nov 2024	Latest release is 698 days old, past the 14-day window	0.7.126 Nov 2024	current	0
Upgrade path current Installed0.7.1 from the lockfile Safe target · latest0.7.126 Nov 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.7.1. Checked against OSV. Nothing to research: class-variance-authority is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.7.1 Deprecated No
Current	npmdependencies · ^2.1.1	2.1.1lockfile	2.1.123 Apr 2024	Latest release is 916 days old, past the 14-day window	2.1.123 Apr 2024	current	0
Upgrade path current Installed2.1.1 from the lockfile Safe target · latest2.1.123 Apr 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 2.1.1. Checked against OSV. Nothing to research: clsx is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^2.1.1 Deprecated No
Current	npmdependencies · ^1.1.1	1.1.1lockfile	1.1.114 Mar 2025	Latest release is 590 days old, past the 14-day window	1.1.114 Mar 2025	current	0
Upgrade path current Installed1.1.1 from the lockfile Safe target · latest1.1.114 Mar 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.1.1. Checked against OSV. Nothing to research: cmdk is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.1.1 Deprecated No
Current	npmdependencies · ^10.0.1	10.0.1lockfile	10.0.11 Feb 2026	Latest release is 266 days old, past the 14-day window	10.0.11 Feb 2026	current	0
Upgrade path current Installed10.0.1 from the lockfile Safe target · latest10.0.11 Feb 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.0.1. Checked against OSV. Nothing to research: croner is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^10.0.1 Deprecated No
Current	npmdependencies · 3.0.1	3.0.1lockfile	3.0.15 Jun 2021	Latest release is 1968 days old, past the 14-day window	3.0.15 Jun 2021	current	0
Upgrade path current Installed3.0.1 from the lockfile Safe target · latest3.0.15 Jun 2021public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.0.1. Checked against OSV. Nothing to research: d3-dsv is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 3.0.1 Deprecated No
Current	npmdependencies · ^3.4.17	3.4.17lockfile	3.4.1712 Oct 2026	Latest release is only 13 days old, inside the 14-day window	3.4.1623 Sep 2026	current	0
Upgrade path current Installed3.4.17 from the lockfile Safe target3.4.1623 Sep 2026public for 14+ days Latest3.4.1712 Oct 2026only 13d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.4.17. Checked against OSV. Nothing to research: dompurify is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^3.4.17 Deprecated No
Current	npmdependencies · ^0.8.3	0.8.3lockfile	0.8.36 Aug 2025	Latest release is 445 days old, past the 14-day window	0.8.36 Aug 2025	current	0
Upgrade path current Installed0.8.3 from the lockfile Safe target · latest0.8.36 Aug 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.8.3. Checked against OSV. Nothing to research: drizzle-zod is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.8.3 Deprecated No
Current	npmdependencies · ^8.6.0	8.6.0lockfile	8.6.04 Apr 2025	Latest release is 569 days old, past the 14-day window	8.6.04 Apr 2025	current	0
Upgrade path current Installed8.6.0 from the lockfile Safe target · latest8.6.04 Apr 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.6.0. Checked against OSV. Nothing to research: embla-carousel-react is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^8.6.0 Deprecated No
Current	npmdependencies · ^4.7.10	4.7.10lockfile	4.7.105 Oct 2026	Latest release is 20 days old, past the 14-day window	4.7.105 Oct 2026	current	0
Upgrade path current Installed4.7.10 from the lockfile Safe target · latest4.7.105 Oct 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.7.10. Checked against OSV. Nothing to research: handlebars is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.7.10 Deprecated No
Current	npmdevDependencies · ^9.1.7	9.1.7lockfile	9.1.718 Nov 2024	Latest release is 706 days old, past the 14-day window	9.1.718 Nov 2024	current	0
Upgrade path current Installed9.1.7 from the lockfile Safe target · latest9.1.718 Nov 2024public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 9.1.7. Checked against OSV. Nothing to research: husky is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^9.1.7 Deprecated No
Current	npmdependencies · ^4.0.0	4.0.0lockfile	4.0.027 Oct 2023	Latest release is 1094 days old, past the 14-day window	4.0.027 Oct 2023	current	0
Upgrade path current Installed4.0.0 from the lockfile Safe target · latest4.0.027 Oct 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.0. Checked against OSV. Nothing to research: jwt-decode is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.0.0 Deprecated No
Current	npmdependencies · ^4.18.1	4.18.1lockfile	4.18.11 Apr 2026	Latest release is 207 days old, past the 14-day window	4.18.11 Apr 2026	current	0
Upgrade path current Installed4.18.1 from the lockfile Safe target · latest4.18.11 Apr 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.18.1. Checked against OSV. Nothing to research: lodash-es is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.18.1 Deprecated No
Current	npmdependencies · 16.4.1	16.4.1lockfile	16.4.323 Oct 2026	Latest release is only 2 days old, inside the 14-day window	16.4.06 Oct 2026	current	0
Upgrade path current Installed16.4.1 from the lockfile Safe target16.4.06 Oct 2026public for 14+ days Latest16.4.323 Oct 2026only 2d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 16.4.1. Checked against OSV. Nothing to research: next is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 16.4.1 Deprecated No
Current	npmdependencies · ^3.3.0	3.3.0lockfile	3.3.029 Mar 2025	Latest release is 575 days old, past the 14-day window	3.3.029 Mar 2025	current	0
Upgrade path current Installed3.3.0 from the lockfile Safe target · latest3.3.029 Mar 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.3.0. Checked against OSV. Nothing to research: next-runtime-env is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^3.3.0 Deprecated No
Current	npmdependencies · ^0.4.6	0.4.6lockfile	0.4.611 Mar 2025	Latest release is 593 days old, past the 14-day window	0.4.611 Mar 2025	current	0
Upgrade path current Installed0.4.6 from the lockfile Safe target · latest0.4.611 Mar 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.4.6. Checked against OSV. Nothing to research: next-themes is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.4.6 Deprecated No
Current	npmdependencies · ^3.2.1	3.2.1lockfile	3.2.13 Jun 2026	Latest release is 144 days old, past the 14-day window	3.2.13 Jun 2026	current	0
Upgrade path current Installed3.2.1 from the lockfile Safe target · latest3.2.13 Jun 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 3.2.1. Checked against OSV. Nothing to research: node-diff3 is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^3.2.1 Deprecated No
Current	npmdependencies · ^7.3.0	7.3.0lockfile	7.3.010 Oct 2025	Latest release is 380 days old, past the 14-day window	7.3.010 Oct 2025	current	0
Upgrade path current Installed7.3.0 from the lockfile Safe target · latest7.3.010 Oct 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.3.0. Checked against OSV. Nothing to research: quick-lru is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^7.3.0 Deprecated No
Current	npmdependencies · ^10.1.0	10.1.0lockfile	10.1.07 Mar 2025	Latest release is 597 days old, past the 14-day window	10.1.07 Mar 2025	current	0
Upgrade path current Installed10.1.0 from the lockfile Safe target · latest10.1.07 Mar 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 10.1.0. Checked against OSV. Nothing to research: react-markdown is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^10.1.0 Deprecated No
Current	npmdependencies · ^0.2.10	0.2.10lockfile	0.2.1027 Mar 2026	Latest release is 213 days old, past the 14-day window	0.2.1027 Mar 2026	current	0
Upgrade path current Installed0.2.10 from the lockfile Safe target · latest0.2.1027 Mar 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.2.10. Checked against OSV. Nothing to research: react18-json-view is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^0.2.10 Deprecated No
Current	npmdependencies · ^7.0.0	7.0.2lockfile	7.0.23 Feb 2025	Latest release is 629 days old, past the 14-day window	7.0.23 Feb 2025	current	0
Upgrade path current Installed7.0.2 from the lockfile Safe target · latest7.0.23 Feb 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.0.2. Checked against OSV. Nothing to research: rehype-highlight is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^7.0.0 Deprecated No
Current	npmdependencies · ^7.0.0	7.0.0lockfile	7.0.026 Aug 2023	Latest release is 1156 days old, past the 14-day window	7.0.026 Aug 2023	current	0
Upgrade path current Installed7.0.0 from the lockfile Safe target · latest7.0.026 Aug 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 7.0.0. Checked against OSV. Nothing to research: rehype-raw is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^7.0.0 Deprecated No
Current	npmdependencies · ^6.0.0	6.0.0lockfile	6.0.026 Aug 2023	Latest release is 1156 days old, past the 14-day window	6.0.026 Aug 2023	current	0
Upgrade path current Installed6.0.0 from the lockfile Safe target · latest6.0.026 Aug 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.0.0. Checked against OSV. Nothing to research: rehype-sanitize is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^6.0.0 Deprecated No
Current	npmdependencies · ^4.0.0	4.0.0lockfile	4.0.022 Sep 2023	Latest release is 1129 days old, past the 14-day window	4.0.022 Sep 2023	current	0
Upgrade path current Installed4.0.0 from the lockfile Safe target · latest4.0.022 Sep 2023public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.0. Checked against OSV. Nothing to research: remark-breaks is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.0.0 Deprecated No
Current	npmdependencies · ^4.0.0	4.0.1lockfile	4.0.110 Feb 2025	Latest release is 622 days old, past the 14-day window	4.0.110 Feb 2025	current	0
Upgrade path current Installed4.0.1 from the lockfile Safe target · latest4.0.110 Feb 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.0.1. Checked against OSV. Nothing to research: remark-gfm is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^4.0.0 Deprecated No
Current	npmdependencies · 8.0.1	8.0.1lockfile	8.0.120 Oct 2025	Latest release is 370 days old, past the 14-day window	8.0.120 Oct 2025	current	0
Upgrade path current Installed8.0.1 from the lockfile Safe target · latest8.0.120 Oct 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 8.0.1. Checked against OSV. Nothing to research: require-in-the-middle is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 8.0.1 Deprecated No
Current	npmdependencies · 0.35.5	0.35.5lockfile	0.35.527 Sep 2026	Latest release is 28 days old, past the 14-day window	0.35.527 Sep 2026	current	0
Upgrade path current Installed0.35.5 from the lockfile Safe target · latest0.35.527 Sep 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 0.35.5. Checked against OSV. Nothing to research: sharp is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared 0.35.5 Deprecated No
Current	npmdependencies · ^1.0.22	1.0.22lockfile	1.0.229 Aug 2025	Latest release is 443 days old, past the 14-day window	1.0.229 Aug 2025	current	0
Upgrade path current Installed1.0.22 from the lockfile Safe target · latest1.0.229 Aug 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.0.22. Checked against OSV. Nothing to research: tiktoken is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared ^1.0.22 Deprecated No
Current	npmdevDependencies · ^1.4.0	1.4.0lockfile	1.4.024 Sep 2025	Latest release is 397 days old, past the 14-day window	1.4.024 Sep 2025	current	0
Upgrade path current Installed1.4.0 from the lockfile Safe target · latest1.4.024 Sep 2025public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 1.4.0. Checked against OSV. Nothing to research: tw-animate-css is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^1.4.0 Deprecated No
Current	npmdevDependencies · ^6.1.1	6.1.1lockfile	6.1.111 Feb 2026	Latest release is 256 days old, past the 14-day window	6.1.111 Feb 2026	current	0
Upgrade path current Installed6.1.1 from the lockfile Safe target · latest6.1.111 Feb 2026public for 14+ days Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 6.1.1. Checked against OSV. Nothing to research: vite-tsconfig-paths is at its safe target with no known advisories. Ecosystem npm Section devDependencies Declared ^6.1.1 Deprecated No
Current	npmdependencies · catalog:	4.6.7lockfile	4.6.712 Oct 2026	Latest release is only 13 days old, inside the 14-day window	4.6.611 Oct 2026	current	0
Upgrade path current Installed4.6.7 from the lockfile Safe target4.6.611 Oct 2026public for 14+ days Latest4.6.712 Oct 2026only 13d old, inside the 14-day window Already at the safe target. The safe target is the newest stable release public for at least 14 days. Advisories 0 No known advisories for 4.6.7. Checked against OSV. Nothing to research: zod is at its safe target with no known advisories. Ecosystem npm Section dependencies Declared catalog: Deprecated No

Show top10

03 · Tickets

184 tickets, in the order to do them

Each one is a complete brief your coding agent can execute. A ticket only turns green when a rescan proves the lockfile moved.

What is in a ticket

P0tooling
TDB-0001L1 tooling
Tooling: upgrade pnpm 11.9.0 → 12.12.1
pnpm11.9.012.12.1
Upgrade the pnpm tooling pin in archestra-ai/archestra 11.9.0 → 12.12.1. Tooling goes first: every other lane waits for this lane.
- The manifest pins pnpm at exactly 12.12.1 — no ^, ~ or range.
- The lockfile is regenerated with the project's package manager, resolves pnpm to the target, and nothing newer than the target slipped in.
- A clean install from the lockfile succeeds: pnpm install --frozen-lockfile, npm ci, yarn install --immutable or bun install --frozen-lockfile (whichever matches the lockfile).
- Tests, lint, typecheck and build all pass, and your report contains their real output.
- No API that the release notes mark as removed remains in the code.
- A rescan of your branch shows no advisories for this package.
- No test was deleted, skipped or loosened; every changed test is listed in changed_tests with a reason.
P1cve
TDB-0008L2 @better-auth
Fix 1 advisory in @better-auth/oauth-provider: 1.6.22 → 1.7.7
@better-auth/oauth-provider1.6.221.7.7
@better-auth/oauth-provider 1.6.22 in archestra-ai/archestra has 1 known advisory (1 moderate). Upgrade 1.6.22 → 1.7.7 so the installed version is no longer affected.
- The manifest pins @better-auth/oauth-provider at exactly 1.7.7 — no ^, ~ or range.
- The lockfile is regenerated with the project's package manager, resolves @better-auth/oauth-provider to the target, and nothing newer than the target slipped in.
- A clean install from the lockfile succeeds: pnpm install --frozen-lockfile, npm ci, yarn install --immutable or bun install --frozen-lockfile (whichever matches the lockfile).
- Tests, lint, typecheck and build all pass, and your report contains their real output.
- No API that the release notes mark as removed remains in the code.
- A rescan of your branch shows no advisories for this package.
- No test was deleted, skipped or loosened; every changed test is listed in changed_tests with a reason.
after TDB-0007
P1major
TDB-0012L3 @opentelemetry
Upgrade @opentelemetry/sdk-trace-base 2.12.0 → unresolved
@opentelemetry/sdk-trace-base2.12.0unresolved
@opentelemetry/sdk-trace-base in archestra-ai/archestra is marked deprecated by its maintainers. Move to unresolved if that release is not deprecated; otherwise replace the package with the maintained successor named in its deprecation notice.
- The manifest pins @opentelemetry/sdk-trace-base at exactly unresolved — no ^, ~ or range.
- The lockfile is regenerated with the project's package manager, resolves @opentelemetry/sdk-trace-base to the target, and nothing newer than the target slipped in.
- A clean install from the lockfile succeeds: pnpm install --frozen-lockfile, npm ci, yarn install --immutable or bun install --frozen-lockfile (whichever matches the lockfile).
- Tests, lint, typecheck and build all pass, and your report contains their real output.
- No API that the release notes mark as removed remains in the code.
- The package is no longer deprecated at the pinned version, or it has been replaced by its maintained successor.
- No test was deleted, skipped or loosened; every changed test is listed in changed_tests with a reason.
after TDB-0007

181 more tickets in this queue

See all 184 tickets

Free, no card needed

04 · Questions

About archestra-ai/archestra's dependencies

Does archestra-ai/archestra have known vulnerabilities?

Yes. The latest scan found 5 known advisories across 3 packages, 3 rated critical or high. Advisories come from OSV and are matched against the installed versions in the lockfile.

How outdated are archestra-ai/archestra’s dependencies?

166 of its packages are behind the safe target (the newest stable release that has been public for at least 14 days). 58 packages are a whole major version behind. The tech-debt free score is 0/100. 100 means no dependency debt; below zero means the debt outweighs the whole scale.

Which package ecosystems does archestra-ai/archestra use?

npm and github-actions (256 packages in the manifests and lockfiles pinwise read).

When was archestra-ai/archestra last scanned?

26 Oct 2026. Public repo pages are re-scanned about once a week, and anyone can request a fresh scan from the free scanner.

05 · Share

Share this report

Public repos only. This page is permanent and re-scanned about once a week.

README badge

Shows the live score and links back here.

README.md

[![pinwise.dev debt-free score](https://pinwise.dev/badge/01M5VH90CDFB2RRMPPPHXZ9MV6.svg)](https://pinwise.dev/scan/github/archestra-ai/archestra)

For maintainers

Is this your repo?

Claim archestra-ai/archestra to turn this report into a working plan, or decide whether this public page stays up.

Watch itWeekly re-scans and a nudge when a fix lands or a CVE appears.
TicketsEvery finding as a ready-to-ship ticket your coding agent can close.
Private scansScan branches and private repos inside your workspace.
BadgeA live debt-free score badge for your README.

Only the repo's owner can claim or change this page. We verify through your GitHub login, a connected workspace or the GitHub App installation, never a form.

Search visibility and removal

Pinwise scans public repositories from their manifests and lockfiles only. If you own archestra-ai/archestra, you can keep this page out of search engines or remove it. Private scans inside the app are not affected.

Tech-debt free score

How we got −18

Summary

@ai-sdk/amazon-bedrock 4.0.159 → 5.0.113

@ai-sdk/anthropic 3.0.128 → 4.0.78

@ai-sdk/cerebras 2.0.39 → 3.0.67

@ai-sdk/cohere 3.0.25 → 4.0.59

@ai-sdk/google 3.0.43 → 4.0.93

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan

Research not included on this scan