
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
package-comp-check
Advanced tools
A CLI tool that finds the latest compatible version of any npm package for your project's current React version.
A CLI utility to check which version of a package is compatible with the React version in your project.
@mui/material, @testing-library/react)npm install -g package-comp-check
package-comp-check <package-name>
--help Show help information--version Show version number--debug Show debug information for troubleshooting# Regular package
package-comp-check zustand
# Scoped package
package-comp-check @mui/material
# TypeScript types
package-comp-check @types/react
# With debug information
package-comp-check @emotion/react --debug
This tool fully supports scoped packages (packages starting with @). When using scoped packages:
@scope/package-name"@mui/material"If you encounter issues with scoped packages, try these troubleshooting steps:
Use quotes around the package name:
package-comp-check "@mui/material"
Check for typos in the scope or package name:
# ❌ Incorrect
package-comp-check @mui
# ✅ Correct
package-comp-check @mui/material
Use debug mode to see what's being processed:
package-comp-check @mui/material --debug
Verify the package exists on npm:
Visit https://www.npmjs.com/package/@scope/package-name to confirm the package exists.
package.json to find the React versionpeerDependenciesThis project is built with TypeScript and includes modern development tooling.
git clone https://github.com/abhidiwakar/package-comp-check.git
cd package-comp-check
npm install
# Build once
npm run build
# Build and watch for changes
npm run build:watch
npm test
# Build and test the CLI locally
npm run build
node dist/index.js <package-name>
This package uses GitHub Actions for automated CI/CD:
Continuous Integration: Runs on every push and pull request
Automated Publishing: Publishes to npm when a GitHub release is created
NPM_TOKEN secret to be set in GitHub repository settingsnpm run prepublishOnly # Cleans and builds
npm publish
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate and ensure TypeScript compilation passes.
MIT
FAQs
A CLI tool that finds the latest compatible version of any npm package for your project's current React version.
The npm package package-comp-check receives a total of 0 weekly downloads. As such, package-comp-check popularity was classified as not popular.
We found that package-comp-check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.