package-version-safety

Assess Sui package upgrade risk by evaluating UpgradeCap ownership, governance policies, and version guards. You must verify that dependencies are pinned and type definitions remain stable across versions to prevent unauthorized upgrades and state corruption.

UpgradeCap ownership analysis identifies the holder's location and governance model, checking whether a single address or multisig controls it. This determines if unauthorized parties can execute package upgrades and compromise the system.

Ensure migration safety by applying version consistency checks across multiple package versions. This process evaluates shared object compatibility and verifies that migration logic preserves state integrity when upgrading from V1 to V2 scenarios.

Detect unauthorized upgrade policies by inventorying UpgradeCap settings and scanning for PACKAGE_UPGRADE signals. This identifies whether governance controls like multisig requirements are properly enforced before any package modifications occur.

Unpinned dependencies during a Sui package upgrade risk state corruption and type instability. Verifying stable type definitions and pinned dependencies ensures cross-version compatibility and prevents unauthorized upgrades from breaking shared objects.