# DepDelta

> Every change between two versions of an open-source package: breaking changes, security fixes, deprecations, migrations and the public API diff, gathered from the maintainers' release notes, changelogs and advisories.

Ecosystems: npm (`npm`), PyPI (`pypi`), Maven (`maven`), Composer (`composer`), Cargo (`cargo`), RubyGems (`rubygems`), pub.dev (`pub`), NuGet (`nuget`), Go (`go`).

## Comparisons as Markdown

Every comparison has an upgrade brief written for an AI assistant: the verdict, every change with its migration code, affected symbols and the maintainer's own words, the public API diff, withdrawn versions and install scripts.

Address: `https://depdelta.com/brief/{ecosystem}/{package}/{from}...{to}.md`. Package names keep their own form (`@scope/name`, `group:artifact`, Go module paths).

- https://depdelta.com/brief/npm/eslint/8.57.0...9.0.0.md
- https://depdelta.com/brief/maven/androidx.core:core-ktx/1.12.0...1.13.0.md
- https://depdelta.com/brief/go/github.com/gin-gonic/gin/v1.9.1...v1.10.0.md

A range DepDelta hasn't read yet says so at the top; open the comparison page in a browser to finish it, then fetch the brief again.

## MCP server

DepDelta is also an MCP server, so an agent can ask it directly from any chat or session. How to connect: https://depdelta.com/connect.

## Pages

- [About DepDelta](https://depdelta.com/about): what it reads, where from, and how changes are classified
- [Docs](https://depdelta.com/docs): how to use every part of DepDelta, from comparisons to CI and MCP
- [GitHub app](https://depdelta.com/github-app): a review of every dependency pull request
- [Other CI](https://depdelta.com/ci): the same review from a pipeline on Gerrit, GitLab, Forgejo, Gitea, Bitbucket or Azure DevOps
- [AI agents](https://depdelta.com/connect): connect Claude, ChatGPT, Cursor, VS Code or Codex over MCP
- [Check a project](https://depdelta.com/report): every outdated dependency in a manifest or lockfile