upgrade verdicts · npm

Upgrade verdicts

Should you install this update? One verdict per release — install, wait, skip, review or avoid — from advisories, malware reports, hotfixes, issue spikes and release notes, confirmed by developers who upgraded.

Waitopenai@7.42.0Published 7 h ago; most regressions surface within 72 h.2026-10-22
Wait@anthropic-ai/sdk@1.1.0Published 12 h ago; most regressions surface within 72 h.2026-10-21
Wait@anthropic-ai/sdk@1.0.0Published 18 h ago; most regressions surface within 72 h.2026-10-21
Waitopenai@7.41.0Published 19 h ago; most regressions surface within 72 h.2026-10-21
Waitastro@7.4.2Published 21 h ago; most regressions surface within 72 h.2026-10-21
Waitopenai@7.40.0Published 21 h ago; most regressions surface within 72 h.2026-10-21
Waitvite@8.3.5Published 28 h ago; most regressions surface within 72 h.2026-10-21
Waitvite@6.4.5Published 29 h ago; most regressions surface within 72 h.2026-10-21
Wait@anthropic-ai/sdk@0.137.0Published 36 h ago; most regressions surface within 72 h.2026-10-20
Wait@anthropic-ai/sdk@0.136.0Published 40 h ago; most regressions surface within 72 h.2026-10-20
Waitstorybook@10.6.3Published 49 h ago; most regressions surface within 72 h.2026-10-20
Waitastro@7.4.1Published 69 h ago; most regressions surface within 72 h.2026-10-19
Waitreact-router@8.5.0Published 69 h ago; most regressions surface within 72 h.2026-10-19
Review@nestjs/core@12.2.0Release notes list 8 breaking changes: fieldNestingDepth and fieldArrayIndexLimit now default t…2026-10-19
Safe to upgradeopenai@7.39.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-19
Safe to upgradeopenai@7.38.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.37.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.36.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-17
Safe to upgradeopenai@7.35.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-16
Reviewnuxt@4.6.2Release notes list 4 breaking changes: The internal API H(TTP) was renamed to HTTP, which may b…2026-10-16
Safe to upgradeeslint@10.13.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-16
Safe to upgradenext@16.4.2Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Safe to upgrade@anthropic-ai/sdk@0.135.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Reviewprisma@7.10.1Release notes list 1 breaking change: Prisma Migrate now errors when the shadow database URL is…2026-10-15
Review@prisma/client@7.10.1Release notes list 1 breaking change: Prisma Migrate now errors (P3025) if the shadow database …2026-10-15
Waitastro@7.4.013 issues mention 7.4.0 within 14 days of release (usual for this project: 5).2026-10-15
Safe to upgrade@supabase/supabase-js@2.118.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-15
Wait@sentry/node@11.8.015 issues mention 11.8.0 within 14 days of release (usual for this project: 3.5).2026-10-15
Review@angular/core@22.2.3Release notes list 2 breaking changes: Destroying an embedded view with animations now throws a…2026-10-14
Safe to upgrade@angular/core@20.3.34Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradeopenai@7.34.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Skipnext@16.4.1Followed by 16.4.2 within 27 h, faster than this project's usual cadence — likely a hotfix.2026-10-14
Safe to upgradenext@15.5.28Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Review@anthropic-ai/sdk@0.134.0New 0.x minor version after 0.133.0: expect breaking changes.2026-10-14
Safe to upgradereact@19.1.10Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradereact@19.2.9Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradereact@19.0.9Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradereact@19.3.1Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Safe to upgradecypress@16.2.0Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.2026-10-14
Wait@playwright/test@1.64.137 issues mention 1.64.1 within 14 days of release (usual for this project: 15.5).2026-10-14

How verdicts work · Tracked packages are refreshed every 30 minutes.

github action

Get verdicts in your pull requests

Every Dependabot or Renovate PR gets one comment: the verdict for each changed npm package, what the upgrade fixes, and one-click “worked / broke something” votes. No checkout of PR code, no secrets.

Add the GitHub Action Check a package.json

on:
  pull_request:
    paths: ["package-lock.json"]
permissions:
  contents: read
  pull-requests: write
jobs:
  verdicts:
    runs-on: ubuntu-latest
    steps:
      - uses: ChangesWatch/upgrade-verdict@v1

weekly digest

Changelogs for your stack, once a week

Pick the tools you use and get one email with what changed — release notes, deprecations and the verdicts above.

weekly digest

for developersDeprecations catalog API catalog.json (no API key required)Deprecation scan Action Latest changelog updates Product catalog