# Tech Radar

> MUST use when user asks 'what's new?', 'any updates?', 'latest versions?', 'breaking changes?', 'should we upgrade?', 'what changed in X?', or when starting a new project. Detects dependencies dynamically from `package.json` / `requirements.txt` / `go.mod` / `composer.json` first, then reports per-package: latest version (vs. installed), breaking changes since installed version, security advisori…

- **Type:** Skill
- **Install:** `agentstack add skill-faizkhairi-claude-code-blueprint-tech-radar`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [faizkhairi](https://agentstack.voostack.com/s/faizkhairi)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [faizkhairi](https://github.com/faizkhairi)
- **Source:** https://github.com/faizkhairi/claude-code-blueprint/tree/main/skills/tech-radar
- **Website:** https://github.com/faizkhairi/claude-code-blueprint#readme

## Install

```sh
agentstack add skill-faizkhairi-claude-code-blueprint-tech-radar
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Tech Radar — Stack Update Scanner

Checks for latest versions, breaking changes, deprecations, and security advisories across the user's core stack.

## Core Stack to Monitor

| Category | Packages |
|----------|----------|
| **Frontend** | nuxt, vue, next, react, tailwindcss, formkit, pinia |
| **Backend** | @nestjs/core, express, fastify |
| **Database** | prisma, @prisma/client, knex, better-auth |
| **Testing** | vitest, @vue/test-utils, @testing-library/react |
| **Mobile** | expo, react-native, nativewind |
| **AI** | ai (vercel ai-sdk), @ai-sdk/openai, @ai-sdk/anthropic |
| **CLI** | commander, chalk, ora, inquirer |
| **Build** | typescript, tsup, turbo, vite |
| **Cloud** | @aws-sdk/client-s3, @aws-sdk/client-ec2 |

## Execution Steps

1. **Parse arguments**: If user specified a package/framework, focus on that. Otherwise scan full stack.

2. **Check latest versions** using WebSearch:
   - Search: `"{package} latest version {current_year}"`
   - Compare against currently installed version (check `package.json` in active project)
   - Flag major version bumps (potential breaking changes)

3. **Check for breaking changes**:
   - For major version bumps: search `"{package} v{new_major} migration guide"`
   - Summarize key breaking changes that affect our patterns
   - Cross-reference against known patterns in MEMORY.md

4. **Check security advisories**:
   - Search: `"{package} CVE {current_year}"` or `"{package} security advisory"`
   - Flag any HIGH or CRITICAL severity issues

5. **Check deprecations**:
   - Search: `"{package} deprecated features {current_year}"`
   - Note any APIs we currently use that are deprecated

## Output Format

```
## Tech Radar Report — {date}

### Upgrades Available
| Package | Current | Latest | Breaking? | Priority |
|---------|---------|--------|-----------|----------|
| nuxt    | 4.0.0   | 4.1.0  | No        | Low      |
| prisma  | 6.2.0   | 7.0.0  | YES       | High     |

### Breaking Changes (Action Required)
- **prisma 7.0**: No `url` in datasource block, driver adapter required [details]

### Security Advisories
- (none found / list any CVEs)

### Deprecation Warnings
- (none / list deprecated APIs we use)

### Recommendation
[1-2 sentences: upgrade now / wait / specific actions needed]
```

## Smart Filtering

- Only report packages actually used in the active project (check package.json)
- Skip patch/minor version bumps unless they contain security fixes
- Prioritize: Security > Breaking Changes > Major Upgrades > Minor Upgrades
- If checking all projects: deduplicate (report each package once with all affected projects)

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [faizkhairi](https://github.com/faizkhairi)
- **Source:** [faizkhairi/claude-code-blueprint](https://github.com/faizkhairi/claude-code-blueprint)
- **License:** MIT
- **Homepage:** https://github.com/faizkhairi/claude-code-blueprint#readme

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-faizkhairi-claude-code-blueprint-tech-radar
- Seller: https://agentstack.voostack.com/s/faizkhairi
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.