Feature Request: Update to the minimum version with no security vulnerabilities of a certain severity

Author: norcinoCreated Nov 5, 2024Updated Jun 10, 2025
Labelsenhancement

It would be nice to have an option like --min-secure "severity", to allow a safer and quicker upgrade if security issues are found within the dependencies.

For example if I specify --min-secure high, the tool should list the next available version to upgrade to, which is not affected by any issue with severity high or critical.

Source: raineorshine/npm-check-updates