rubric v1.0.0 · next run 18:00 UTC

voyagi/bumpwarden-demo-app · HEAD · last run 06:00 UTC in 22.1s

10 bumps, scored on one scale you can read.

The score is arithmetic from a published rubric, not an opinion. The model reads the release notes and explains what breaks in your code. It never moves the number and it never merges.

Last run finished 2026-10-15 06:00:31 UTC in 22.1s.

This run, placed on the rubric

Every pending bump on the same 0 to 100 axis, so the shape of the run is visible before you read a single row.

30
61
cookie-parser
morgan
morgan
body-parser
node-fetch
express
chalk
chalk
express
glob
glob7.2.3 → 13.0.6Glob upgrade to v13 removes the root option and changes the synchronous API
Hold issue #21scored 87 of 100,Held
express4.17.1 → 5.3.0Upgrade Express to v5.3.0 (Major Version Update)
Hold issue #30scored 74 of 100,Held
chalk4.1.2 → 6.0.1Chalk upgrade to v6.0.1 removes keyword color space and moves to ESM
Hold issue #29scored 71 of 100,Held
chalk4.1.2 → 6.0.0Chalk v6.0.0 requires Node.js 22, drops CommonJS support, and removes several color space helpers including keyword
Hold issue #22scored 71 of 100,Held
express4.17.1 → 5.2.1Express upgraded to 5.2.1 with no active breaking changes in this repository
Hold issue #23scored 62 of 100,Held
node-fetch2.6.7 → 3.3.2Upgrade node-fetch to v3.3.2: timeout and size options dropped
Issue #24scored 58 of 100,Caution
body-parser1.20.2 → 2.3.0Major version upgrade to 2.3.0 with breaking changes to defaults, deprecated APIs, and Node.js support
Issue #25scored 50 of 100,Caution
morgan1.10.0 → 1.12.0Minor updates including NO_COLOR support, objectMode streams, and a new :pid token
Pull request #26scored 22 of 100,Clear
morgan1.10.0 → 1.12.1Update morgan to 1.12.1 to resolve CVE-2026-87859 and add the :pid token
Pull request #28scored 16 of 100,Clear
cookie-parser1.4.6 → 1.4.7Update cookie-parser to 1.4.7
Pull request #27scored 8 of 100,Clear

What could not be read

glob release notes: not-found: no release notes for 13.0.6 under either tag spelling