Does this skill support pnpm?

Yes, it fully supports npm, yarn (both classic and berry versions), and pnpm package managers.

Does it perform security checks?

Yes, the skill performs security audits and can be configured to block upgrades if critical vulnerabilities are identified in the dependency tree.

How does it handle breaking changes?

It identifies major version jumps and uses MCP tools to search for and apply official migration guides for specific libraries like React or Tailwind CSS.

Can I configure which types of upgrades are performed?

Yes, you can configure the upgrade scope to target only major, minor, or patch versions via the configuration settings.

What happens if the build fails after an upgrade?

The skill includes a verification phase that runs builds and tests; if they fail, it can automatically roll back to the previous stable state.

NPM Dependency Upgrader

Name: NPM Dependency Upgrader
Author: levnikolaevich

bylevnikolaevich

•

部署与 DevOps

Upgrades Node.js dependencies across npm, yarn, and pnpm while automatically handling breaking changes and migrations.

关于

This skill automates the complex process of maintaining Node.js projects by intelligently upgrading dependencies while minimizing technical debt. It categorizes packages by priority, performs security audits, identifies major version changes, and utilizes MCP tools to fetch and apply official migration guides in real-time. By verifying the build and running tests after every update, it ensures project stability throughout the upgrade lifecycle and offers automated rollbacks if issues are detected.

主要功能

38 GitHub stars
Integrated migration guide searching using MCP tools for up-to-date documentation
Multi-manager support for npm, yarn (Classic/Berry), and pnpm
Automated security audits with configurable severity thresholds
Post-upgrade build verification and automated rollback on failure
Intelligent breaking change detection for major libraries like React, Vite, and ESLint

使用场景

Automating routine security patches and dependency maintenance across multiple repositories
Updating a legacy Node.js project to the latest framework and toolchain versions
Managing complex migrations for major library updates such as React 18 to 19 or ESLint flat config

关于

主要功能

38 GitHub stars
Integrated migration guide searching using MCP tools for up-to-date documentation
Multi-manager support for npm, yarn (Classic/Berry), and pnpm
Automated security audits with configurable severity thresholds
Post-upgrade build verification and automated rollback on failure
Intelligent breaking change detection for major libraries like React, Vite, and ESLint

使用场景

Automating routine security patches and dependency maintenance across multiple repositories
Updating a legacy Node.js project to the latest framework and toolchain versions
Managing complex migrations for major library updates such as React 18 to 19 or ESLint flat config