Assess a known dependency upgrade target (go/no-go)
check_dependency_upgradeUse when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | Exact registry package name. | |
| runtime | No | ||
| ecosystem | Yes | Package ecosystem. Only npm and pypi are supported. | |
| target_version | Yes | Exact candidate version. | |
| current_version | Yes | Exact installed version. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| billing | No | ||
| package | No | ||
| reasons | No | ||
| coverage | No | ||
| decision | No | ||
| evidence | No | ||
| cache_hit | No | ||
| ecosystem | No | ||
| freshness | No | ||
| confidence | No | ||
| risk_score | No | ||
| next_action | No | ||
| compatibility | No | ||
| latest_stable | No | ||
| version_facts | No | ||
| action_allowed | No | ||
| claim_evidence | No | ||
| repository_url | No | ||
| security_delta | No | ||
| target_version | No | ||
| current_version | No | ||
| analysis_version | No | ||
| breaking_changes | No | ||
| recommended_target | No |