Public repository scan

See deprecation risk before installing the Action.

Paste a public GitHub repository URL. We inspect only its package manifest and a JSON lockfile, then compare exact installed versions with verified Changes.Watch migration notices.

Public files only · no OAuth · no source files stored · bounded GitHub API requests

Paste a public URL

No token, OAuth grant, or private repository access.

Compare exact versions

We use a lockfile when available and avoid guessing from ranges.

Choose the next step

Open the official evidence, read the migration recipe, or install CI.