Check npm package fitness
check_package_fitnessCross-validates npm package deprecation, yanked status, and maliciousness from multiple sources, then infers a safe migration target when available.
Instructions
Return a cross-validated fitness verdict for an npm package: is it deprecated / yanked / superseded / malicious, and if so what is the safe migration target. Unlike a plain 'is it deprecated' lookup, this reconciles the npm registry, deps.dev, OSV and GitHub into one confidence-scored answer, infers a safe replacement when one exists, and flags disagreement instead of guessing. Also detects non-existent / hallucinated package names.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | npm package name, e.g. 'request' or '@babel/core' | |
| version | No | Exact version, semver range, or dist-tag. Omit to check the current 'latest'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| exists | Yes | ||
| yanked | Yes | ||
| package | Yes | ||
| signals | Yes | ||
| warnings | Yes | ||
| agreement | Yes | ||
| ecosystem | Yes | ||
| malicious | Yes | ||
| advisories | Yes | ||
| confidence | Yes | ||
| deprecated | Yes | ||
| last_verified | Yes | ||
| superseded_by | Yes | ||
| queried_version | Yes | ||
| resolved_version | Yes | ||
| deprecated_reason | Yes | ||
| sources_consulted | Yes | ||
| safe_migration_target | Yes |