@gibme/depupdate

Easily update package dependencies with a single command.

depupdate automates the process of upgrading all dependency categories (dependencies, devDependencies, peerDependencies, and optionalDependencies) in a Node.js project, then runs audit checks and attempts to fix any discovered vulnerabilities automatically.

Requirements

• Node.js >= 22

Installation

npm install -g @gibme/depupdate

or

yarn global add @gibme/depupdate

Usage

Run depupdate from the root of any Node.js project (where package.json lives).

Update Dependencies (within semver range)

depupdate

Updates all dependencies to the latest version permitted by the version ranges in package.json. Automatically detects whether the project uses Yarn (yarn.lock) or npm (package-lock.json).

Update Dependencies (latest)

depupdate latest

Ignores existing version ranges and updates every dependency to the absolute latest version.

Setup Standard Dev Dependencies

depupdate setup

Installs a standard set of development dependencies:

• @types/node
• @typescript-eslint/eslint-plugin, @typescript-eslint/parser
• eslint, eslint-config-standard, eslint-plugin-import, eslint-plugin-n, eslint-plugin-node, eslint-plugin-promise
• tsx
• typedoc
• typescript

Combine with latest to install the latest versions:

depupdate setup latest

Automatic Audit Fixes

After updating dependencies, depupdate automatically:

1. Runs yarn audit or npm audit to check for known vulnerabilities
2. If vulnerabilities are found, attempts to fix them (using npm audit fix or yarn-audit-fix)
3. Repeats the audit/fix cycle a second time to catch any cascading resolution changes

License

MIT