MCP server that translates a lockfile diff (npm, PyPI) into a human-readable upgrade plan — semver class, breaking changes from GitHub release notes, CVEs fixed in range, migration guide links, and a per-package recommendation. Install via npx.