upgrade verdicts · npm

Upgrade verdicts

Should you install this update? One verdict per release — install, wait, skip, review or avoid — from advisories, malware reports, hotfixes, issue spikes and release notes, confirmed by developers who upgraded.

Wait@anthropic-ai/sdk@1.3.0Published 52 h ago; most regressions surface within 72 h.2026-10-23
Waitnext@16.4.3Published 63 h ago; most regressions surface within 72 h.2026-10-23
Wait@anthropic-ai/sdk@1.2.0Published 63 h ago; most regressions surface within 72 h.2026-10-23
Wait@nestjs/core@11.2.8Published 64 h ago; most regressions surface within 72 h.2026-10-23
Wait@sentry/node@11.9.0Published 65 h ago; most regressions surface within 72 h.2026-10-23
Reviewopenai@7.43.0Release notes list 2 breaking changes: Decisions request inputs now accept new message roles an…2026-10-22
Safe to upgradestripe@23.0.1Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-22
Safe to upgradeopenai@7.42.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-22
Safe to upgrade@anthropic-ai/sdk@1.1.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-21
Review@anthropic-ai/sdk@1.0.0New major version after 0.137.0: expect breaking changes.2026-10-21
Safe to upgradeopenai@7.41.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-21
Waitastro@7.4.213 issues mention 7.4.2 within 14 days of release (usual for this project: 5).2026-10-21
Safe to upgradeopenai@7.40.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-21
Safe to upgradevite@8.3.5Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-21
Safe to upgradevite@6.4.5Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-21
Safe to upgrade@anthropic-ai/sdk@0.137.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-20
Safe to upgrade@anthropic-ai/sdk@0.136.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-20
Safe to upgradestorybook@10.6.3Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-20
Safe to upgradeastro@7.4.1Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-19
Waitreact-router@8.5.011 issues mention 8.5.0 within 14 days of release (usual for this project: 3.5).2026-10-19
Review@nestjs/core@12.2.0Release notes list 8 breaking changes: fieldNestingDepth and fieldArrayIndexLimit now default t…2026-10-19
Safe to upgradeopenai@7.39.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-19
Safe to upgradeopenai@7.38.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.37.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.36.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.35.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-16
Reviewnuxt@4.6.21 known advisory (worst: moderate), no fixed version found on this major.2026-10-16
Safe to upgradeeslint@10.13.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-16
Safe to upgradenext@16.4.2Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Safe to upgrade@anthropic-ai/sdk@0.135.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Reviewprisma@7.10.1Release notes list 1 breaking change: Prisma Migrate now errors when the shadow database URL is…2026-10-15
Review@prisma/client@7.10.1Release notes list 1 breaking change: Prisma Migrate now errors (P3025) if the shadow database …2026-10-15
Waitastro@7.4.014 issues mention 7.4.0 within 14 days of release (usual for this project: 5).2026-10-15
Safe to upgrade@supabase/supabase-js@2.118.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Wait@sentry/node@11.8.016 issues mention 11.8.0 within 14 days of release (usual for this project: 3.5).2026-10-15
Review@angular/core@22.2.3Release notes list 2 breaking changes: Destroying an embedded view with animations now throws a…2026-10-14
Safe to upgrade@angular/core@20.3.34Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradeopenai@7.34.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Skipnext@16.4.1Followed by 16.4.2 within 27 h, faster than this project's usual cadence — likely a hotfix.2026-10-14
Safe to upgradenext@15.5.28Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14

How verdicts work · Tracked packages are refreshed every 30 minutes.

github action

Get verdicts in your pull requests

Every Dependabot or Renovate PR gets one comment: the verdict for each changed npm package, what the upgrade fixes, and one-click “worked / broke something” votes. No checkout of PR code, no secrets.

Add the GitHub Action Check a package.json

on:
  pull_request:
    paths: ["package-lock.json"]
permissions:
  contents: read
  pull-requests: write
jobs:
  verdicts:
    runs-on: ubuntu-latest
    steps:
      - uses: ChangesWatch/upgrade-verdict@v1

weekly digest

Changelogs for your stack, once a week

Pick the tools you use and get one email with what changed — release notes, deprecations and the verdicts above.

weekly digest

for developersDeprecations catalog API catalog.json (no API key required)Deprecation scan Action Latest changelog updates Product catalog