Verify a vulnerability-driven dependency upgrade
Confirm which advisories an upgrade fixes and whether the target introduces new risk before an agent edits the manifest.
UpgradeLens is a read-only MCP and REST service for npm and PyPI. It returns proceed, review_required, block, or unknown with evidence links and ordered migration actions.
Agent-ready request
curl -X POST https://upgradelens.mattpicone.workers.dev/v1/upgrade/review -H 'content-type: application/json' -d '{"ecosystem":"pypi","package":"requests","current_version":"2.31.0","target_version":"2.32.4","runtime":{"python":"3.12"},"detail":"compact"}'