{} package.json
13 "dependencies": {
14 "axios": "^0.21.1",3 major behind · 1.11.0 · 1,872d stale
15 "express": "^4.18.2",minor behind · 4.21.2 · 1 major behind · 5.1.0 · 1,201d stale
16 "jsonwebtoken": "^8.5.1",1 major behind · 9.0.2 · 1,594d stale
17 "lodash": "^4.17.21",
18 "moment": "^2.29.4",minor behind · 2.30.1 · 1,065d stale
19 "node-sass": "^6.0.1",3 major behind · 9.0.0 · 1,795d stale
20 "pg": "^8.11.3",minor behind · 8.16.3 · 340d stale
21 "react": "17.0.2",2 major behind · 19.1.1 · 1,933d stale
22 "react-dom": "17.0.2",2 major behind · 19.1.1 · 1,933d stale
23 "react-router-dom": "^5.3.4"2 major behind · 7.7.1 · 1,410d stale
24 },
Fix — react 17.0.2 → 19.1.1
Ranked by technical fit. Vibgrate has no default here.
Remediation
Renovatefit 92
Automated dependency PRs. Handles majors, lockfiles and grouped updates.
VG Codefit 72 · Vibgrate · local
Local agent in this editor. Grounded in the code map; you approve every edit.
OpenRewrite / Modernefit 71
Deterministic codemods. Strongest when the upgrade has many call sites.
GitHub Copilot coding agentfit 68
Agentic PR. Good on call-site rewrites, weaker on lockfile resolution.
vg fixfit 62 · Vibgrate · paid
Vibgrate's own upgrade planner. Runs in your terminal; you review every change.
Amazon Q Code Transformationfit 38
Strongest on the JVM. Limited coverage elsewhere.
Take the evidence elsewhere
Export SARIF
For any code-scanning surface that reads SARIF.
Export JSON
The raw scan artifact.
Export Markdown
For a PR comment or a ticket.