Changes.Watch~ upgrade verdicts ~
Free digest
Research1 in 10 popular npm releases needed a hotfix

upgrade verdicts · npm

Upgrade verdicts

Should you install this update? One verdict per release — install, wait, skip, review or avoid — from advisories, malware reports, hotfixes, issue spikes and release notes, confirmed by developers who upgraded.

  • Wait@supabase/supabase-js@2.119.0Published 6 h ago; most regressions surface within 72 h.2026-11-04
  • Wait@nestjs/core@12.3.3Published 9 h ago; most regressions surface within 72 h.2026-11-04
  • Waitopenai@7.50.0Published 16 h ago; most regressions surface within 72 h.2026-11-04
  • Waitopenai@7.49.0Published 22 h ago; most regressions surface within 72 h.2026-11-03
  • Waitnext@15.5.29Published 24 h ago; most regressions surface within 72 h.2026-11-03
  • Waitopenai@7.48.0Published 24 h ago; most regressions surface within 72 h.2026-11-03
  • Waitnext@16.4.5Published 24 h ago; most regressions surface within 72 h.2026-11-03
  • Wait@angular/core@21.2.26Published 44 h ago; most regressions surface within 72 h.2026-11-02
  • Wait@angular/core@20.3.35Published 45 h ago; most regressions surface within 72 h.2026-11-02
  • Waittailwindcss@4.3.4Published 45 h ago; most regressions surface within 72 h.2026-11-02
  • Waitnuxt@4.6.4Published 46 h ago; most regressions surface within 72 h.2026-11-02
  • Wait@anthropic-ai/sdk@1.4.0Published 48 h ago; most regressions surface within 72 h.2026-11-02
  • Waitastro@7.4.5Published 53 h ago; most regressions surface within 72 h.2026-11-02
  • Skipnext@16.4.4Followed by 16.4.5 within 31 h, faster than this project's usual cadence — likely a hotfix.2026-11-02
  • Waitfastify@5.12.8Published 56 h ago; most regressions surface within 72 h.2026-11-02
  • Safe to upgradeopenai@7.47.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-31
  • Safe to upgradeopenai@7.46.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-31
  • Safe to upgradeeslint@10.14.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-30
  • Safe to upgradestripe@23.1.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-29
  • Review@angular/core@22.2.4Release notes list 5 breaking changes: The compiler now defaults to eager change detection for …2026-10-29
  • Safe to upgradeastro@7.4.4Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-28
  • Safe to upgrade@sentry/node@10.78.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-28
  • Review@sentry/node@11.10.0Release notes list 3 breaking changes: `ignoreStaticAssets` now defaults to `true` for `bunServ…2026-10-28
  • Skipastro@7.4.3Followed by 7.4.4 within 5 h, faster than this project's usual cadence — likely a hotfix.2026-10-28
  • Waitcypress@16.2.111 issues mention 16.2.1 within 14 days of release (usual for this project: 5).2026-10-28
  • Safe to upgradereact-router@8.5.1Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-27
  • Safe to upgradereact-router@7.18.5Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-27
  • Reviewstorybook@10.6.5Release notes list 1 breaking change: Typescript compilation now excludes folders prefixed with…2026-10-27
  • Safe to upgradeopenai@7.45.1Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-27
  • Safe to upgrade@nestjs/core@12.3.2Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-27
  • Review@sentry/node@10.77.1Release notes list 1 breaking change: Limits @opentelemetry/api to <1.10.0 and OpenTelemetry SD…2026-10-27
  • Skip@nestjs/core@12.3.1Followed by 12.3.2 within 2 h, faster than this project's usual cadence — likely a hotfix.2026-10-27
  • Skip@nestjs/core@12.3.0Followed by 12.3.1 within 1 h, faster than this project's usual cadence — likely a hotfix.2026-10-27
  • Reviewnuxt@4.6.31 known advisory (worst: moderate), no fixed version found on this major.2026-10-27
  • Safe to upgradeopenai@7.45.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-26
  • Safe to upgradesvelte@5.57.3Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-26
  • Reviewopenai@7.44.0Release notes list 1 breaking change: Live Decision item events now use union types for the ite…2026-10-26
  • Skipstorybook@10.6.4Followed by 10.6.5 within 29 h, faster than this project's usual cadence — likely a hotfix.2026-10-26
  • Safe to upgrade@anthropic-ai/sdk@1.3.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-23
  • Safe to upgradenext@16.4.3Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-23

How verdicts work · Tracked packages are refreshed every 30 minutes.

github action

Get verdicts in your pull requests

Every Dependabot or Renovate PR gets one comment: the verdict for each changed npm package, what the upgrade fixes, and one-click “worked / broke something” votes. No checkout of PR code, no secrets.

Add the GitHub ActionCheck a package.json
on:
  pull_request:
    paths: ["package-lock.json"]
permissions:
  contents: read
  pull-requests: write
jobs:
  verdicts:
    runs-on: ubuntu-latest
    steps:
      - uses: ChangesWatch/upgrade-verdict@v1

weekly digest

Changelogs for your stack, once a week

Pick the tools you use and get one email with what changed — release notes, deprecations and the verdicts above.

weekly digest

for developersDeprecations catalog APIcatalog.json (no API key required)Deprecation scan ActionLatest changelog updatesProduct catalog