io.github.mattpicone/upgradelens

Est-ce que io.github.mattpicone/upgradelens est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.mattpicone/upgradelens » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• check_dependency_upgrade≈ 1381 tokens

  Use when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry.

  Paramètres, retour & exemple (5)

  Paramètres

  • package · string · requis
    Exact registry package name.
  • runtime · object · optionnel
  • ecosystem · string · requis · npm | pypi
    Package ecosystem. Only npm and pypi are supported.
  • target_version · string · requis
    Exact candidate version.
  • current_version · string · requis
    Exact installed version.

  Exemple d'appel

  {"name": "check_dependency_upgrade", "arguments": {"package": "texte", "ecosystem": "npm", "target_version": "texte", "current_version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"billing": {}, "package": "texte", "reasons": [], "coverage": {}, "decision": "proceed", "evidence": [], "cache_hit": true, "ecosystem": "npm", "freshness": "texte", "confidence": 1, "risk_score": 1, "next_action": "texte"}}

• find_safe_upgrade_target≈ 1379 tokens

  Use only when an existing npm or PyPI dependency has an exact current version but no chosen target. Ranks candidates; candidates are not declared safe and require check_dependency_upgrade or plan_dependency_upgrade. Do not use when a target is stated, for a new install, or as authorization to edit files. Read-only and safe to retry.

  Paramètres, retour & exemple (5)

  Paramètres

  • package · string · requis
    Exact registry package name.
  • ecosystem · string · requis · npm | pypi
    Package ecosystem. Only npm and pypi are supported.
  • max_major_jump · integer · optionnel
    Optional major-version jump cap. 0 = stay in the same major.
  • current_version · string · requis
    Exact installed version.
  • allow_prerelease · boolean · optionnel

  Exemple d'appel

  {"name": "find_safe_upgrade_target", "arguments": {"package": "texte", "ecosystem": "npm", "current_version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"billing": {}, "package": "texte", "coverage": {}, "evidence": [], "ecosystem": "npm", "freshness": "texte", "candidates": [], "confidence": 1, "next_action": "texte", "latest_stable": "texte", "action_allowed": true, "current_version": "texte"}}

• plan_dependency_upgrade≈ 1436 tokens

  Use when a coding agent needs a migration checklist, refactor actions, ordered review actions, changelog links, or test steps for exact current and target npm/PyPI versions. Use check_dependency_upgrade instead for a go/no-go without steps. Do not use to choose a target, install a package, or provide a general tutorial. Read-only and safe to retry.

  Paramètres, retour & exemple (5)

  Paramètres

  • package · string · requis
    Exact registry package name.
  • runtime · object · optionnel
  • ecosystem · string · requis · npm | pypi
    Package ecosystem. Only npm and pypi are supported.
  • target_version · string · requis
    Exact candidate version.
  • current_version · string · requis
    Exact installed version.

  Exemple d'appel

  {"name": "plan_dependency_upgrade", "arguments": {"package": "texte", "ecosystem": "npm", "target_version": "texte", "current_version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"billing": {}, "package": "texte", "reasons": [], "coverage": {}, "decision": "proceed", "evidence": [], "cache_hit": true, "ecosystem": "npm", "freshness": "texte", "confidence": 1, "risk_score": 1, "next_action": "texte"}}

• review_dependency_upgrade≈ 1574 tokens

  Use when an agent reviews a Dependabot, Renovate, npm, or PyPI version change before merge. One cited result combines security delta, runtime compatibility, breaking changes, go/no-go risk, and ordered migration actions for exact current and target versions. Do not use for new installs, unknown versions, general documentation, or other ecosystems. Read-only and safe to retry.

  Paramètres, retour & exemple (6)

  Paramètres

  • detail · string · optionnel · compact | full
    compact is optimized for agent decisions; full includes the complete legacy plan payload.
  • package · string · requis
    Exact registry package name.
  • runtime · object · optionnel
  • ecosystem · string · requis · npm | pypi
    Package ecosystem. Only npm and pypi are supported.
  • target_version · string · requis
    Exact candidate version.
  • current_version · string · requis
    Exact installed version.

  Exemple d'appel

  {"name": "review_dependency_upgrade", "arguments": {"package": "texte", "ecosystem": "npm", "target_version": "texte", "current_version": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"detail": "compact", "billing": {}, "package": "texte", "reasons": [], "coverage": {}, "decision": "proceed", "evidence": [], "headline": "texte", "cache_hit": true, "citations": [], "ecosystem": "npm", "freshness": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://upgradelens.mattpicone.workers.dev/mcp