io.github.DigiCatalyst-Systems/dep-diff-mcp

pkg:npm:@digicatalyst/dep-diff-mcp

Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI.

transport:: remote + stdio
credential class:: self-provisionable
repo:: https://github.com/DigiCatalyst-Systems/dep-diff-mcp

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

analyze_package_change
Given one package and two versions (from -> to), returns a structured upgrade analysis: semver classification, GitHub release notes summary, detected breaking changes, security advisories fixed in the range, migration guide links, and a clear recommendation. Use when the user asks about a specific package upgrade ('what changed between react 18 and 19', 'is it safe to bump axios from 0.27 to 1.0', 'what does upgrading lodash 4.17.20 to 4.17.21 fix'). Supports npm and pypi. For analyzing many packages at once or a Dependabot batch, use analyze_packages_bulk instead.
shallow
analyze_packages_bulk
Analyzes a list of package upgrades in parallel and returns a unified risk report with packages ranked by recommendation level (security > caution > review > likely-safe > safe). Use when the user provides many dependency changes from a Dependabot PR, npm outdated output, lockfile diff, or batch upgrade. Returns: total count, breakdown by semver class, total security fixes found, packages with breaking changes, and per-package details. Limit 50 packages per call (chunk larger lists).
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/b4b42df9-8353-4136-9bd4-c10c1465b07a/badge.svg)](https://vouch.tools/servers/b4b42df9-8353-4136-9bd4-c10c1465b07a)