Dep Diff

Translate a lockfile diff into a human-readable upgrade plan with breaking changes and CVE data for npm and PyPI.

Dep Diff reads package version diffs (from Dependabot PRs or manual comparisons) and generates upgrade plans with semver classification, breaking changes extracted from GitHub release notes, CVE security advisories, migration guides, and per-package risk rankings. Supports npm and PyPI. Requires GitHub API access for release note and CVE data retrieval.