SmitheryListed

dep-diff-mcp

Translates a lockfile diff into a human-readable upgrade plan for npm, PyPI, and GitHub Actions. Point this MCP at a Dependabot PR, lockfile diff, or any pair of package versions and get back a ranked upgrade plan. For every dependency bump it returns semver classification, breaking changes extracted from GitHub release notes, CVEs fixed in the range (via OSV.dev), migration guide links, and a per-package recommendation. Bulk tool analyzes up to 50 package changes in parallel and ranks by risk level (security > caution > review > likely-safe > safe). Supports npm, PyPI, and GitHub Actions (pass the action reference as the name, e.g. actions/checkout).

First seen 2 Oct 2026. Evidence as of 5 Oct 2026.