NPM Package Changelog Analyzer
Analyzes NPM package changelogs and release notes using the NPM Registry API and GitHub Releases API. Detects breaking changes, security patches, and dependency conflicts across package upgrade paths.
npx skills add agentskillexchange/skills --skill npm-package-changelog-analyzer
The NPM Package Changelog Analyzer skill provides intelligent analysis of package update histories to assist with dependency management decisions. It queries the NPM Registry API to retrieve version metadata, dist-tags, and time-stamped release information for any published package.
What this skill actually does
The skill cross-references changelog entries with the GitHub Releases API to correlate version bumps with pull request links, commit SHAs, and contributor information. It uses semver for semantic version range analysis and detects breaking changes by parsing conventional commit messages and BREAKING CHANGE footers.
Advanced capabilities include transitive dependency conflict detection by building resolution trees similar to npm ls, security advisory correlation with the GitHub Advisory Database API and npm audit signatures, peer dependency compatibility validation, and license change detection across versions. The skill generates upgrade impact reports with risk scores and suggested update ordering for monorepo environments using Lerna or Turborepo.