pnpm Dependency Upgrade Audit

Scope

Perform a read-only investigation by default. Do not run pnpm update, pnpm install, corepack use, or edit manifests and lockfiles unless the user separately authorizes implementation. Use pnpm for package-manager commands; do not substitute npm or yarn.

Produce an evidence-based report that distinguishes:

• candidates suitable for a focused upgrade batch;
• candidates requiring targeted tests or migration work;
• candidates that should be deferred because of release-age, engine, peer, or toolchain constraints.

Workflow

1. Discover the workspace and constraints

Inspect: