Check your lockfile
What do you actually need to upgrade?
Drop in a lockfile. It’s read in your browser and never uploaded; only package names and versions are checked, against every known Advisory. You get the shortest list of upgrades that clears the most.
Or paste it
Watch this lockfile
We’ll tell you when a new Advisory matches it: one digest when something changes, and right away only for a malicious package or something actively exploited. We save the package list, encrypted, never the file.
Sign in
Continue with GitHub
or get a link by email
Check your email
If can sign in, a link is on its way. It works once, for 15 minutes. Open it on this device.
Nothing after a few minutes? Check your spam folder, or .