← All tools

dependency-upgrade-go-no-go

Compare current and target npm versions and return GO/WARN/BLOCK plus UPGRADE/DEFER/BLOCK guidance, bounded semver risk, OSV security implications, recommended tests, and explicit NOT_PROVEN runtime, peer, migration, and ecosystem compatibility boundaries.

Price

$0.16 USDC equivalent

Endpoint

POST /v1/dependency-upgrade-go-no-go

Network

Base mainnet · eip155:8453

Asset

USDC

MCP tool

dependency-upgrade-go-no-go

External payability

PASS · 2026-10-08T19:55:01.298Z

When an agent should use it

• should I upgrade this npm dependency
• dependency version upgrade go no go
• compare npm versions before upgrading package json
• is this package upgrade safe

Input schema

{
  "type": "object",
  "properties": {
    "package": {
      "type": "string",
      "minLength": 1,
      "maxLength": 214
    },
    "current_version": {
      "type": "string",
      "minLength": 1,
      "maxLength": 64
    },
    "target_version": {
      "type": "string",
      "minLength": 1,
      "maxLength": 64
    },
    "runtime": {
      "type": "string",
      "maxLength": 128
    },
    "framework": {
      "type": "string",
      "maxLength": 128
    },
    "constraints": {
      "type": "array",
      "maxItems": 32,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    }
  },
  "required": [
    "package",
    "current_version",
    "target_version"
  ],
  "additionalProperties": false
}

Example request

{
  "package": "hono",
  "current_version": "4.13.2",
  "target_version": "4.13.3",
  "runtime": "cloudflare-workers",
  "framework": "hono"
}

Example output

{
  "verdict": "GO",
  "upgrade_verdict": "UPGRADE",
  "score": 0.84,
  "breaking_changes": {
    "state": "NOT_PROVEN",
    "version_change": "PATCH"
  },
  "runtime_compatibility": {
    "state": "NOT_PROVEN"
  },
  "peer_dependency_conflicts": {
    "state": "NOT_PROVEN"
  },
  "security_implications": {
    "state": "SUPPORTED",
    "current_osv_records": 0,
    "target_osv_records": 0
  },
  "recommended_tests": [
    "Install/resolve the target dependency in the actual caller lockfile."
  ]
}

x402 flow

POST /v1/dependency-upgrade-go-no-go
→ HTTP 402 + PAYMENT-REQUIRED
→ buyer authorizes locally
→ retry same request with PAYMENT-SIGNATURE
→ one governed execution + machine-readable JSON

Discovery: OpenAPI · x402 · llms.txt

A valid 402/payability probe is operational evidence, not proof of independent demand, future settlement, or semantic correctness.