npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

latestx

v1.0.7

Published

Universal dependency intelligence and upgrade CLI

Readme

latestx 🚀

latestx is a universal dependency intelligence and upgrade CLI that works across ecosystems, languages, and frameworks. It detects your project’s language and package manager, analyzes dependencies, evaluates upgrade paths, and safely updates packages with a strong emphasis on compatibility and developer control.

✨ Features

  • Universal Support: Works interchangeably on Node.js, Python, PHP, Rust, Go, Ruby, and Flutter workspaces.
  • Smart Detection: Automatically detects your exact setup (e.g., npm, pnpm, yarn, pip, poetry, cargo, composer) without needing configuration.
  • Interactive Check: View available updates color-coded by risk (Patch, Minor, Major) and interactively select which packages to update.
  • AI Compatibility Engine: Leverages Google Gemini 2.5 Flash to intelligently analyze your entire dependency graph and block upgrades that introduce peer-dependency conflicts or framework incompatibilities.
  • Native Installs: Seamlessly install new dependencies utilizing your project's specific package manager implicitly.

📦 Installation

Make sure you have Node.js installed, then install globally using npm (or pnpm/yarn):

npm install -g latestx

🚀 Usage

latestx init

Scans your workspace to detect the primary language and package manager. It extracts your project's metadata and creates a latestx.yaml file in the root directory to cache your environment configuration.

latestx init

latestx install <package-name>

Fetches the absolute latest version of a specific package from its remote registry and safely installs it using your workspace's native package manager (like pnpm, cargo, or composer).

latestx install next

latestx check

Checks your current dependencies against remote registries and displays an interactive, color-coded UI. Arrow keys let you navigate and Spacebar lets you select the dependencies you'd like to update.

latestx check

latestx update [--compatibility]

Updates selected or all outdated dependencies. Add the --compatibility flag to invoke the local AI Compatibility Engine.

latestx update --compatibility

Note: The --compatibility flag runs your dependency graph through Gemini AI to verify no updates will break peer dependencies or known framework constraints before executing actual system upgrades.

latestx ai --auth

By default, latestx comes with a built-in, locally-encrypted API key to enable AI features seamlessly. If you prefer to bring your own Gemini API key, use this command to securely encrypt and save your own key locally.

latestx ai --auth

🌐 Supported Ecosystems & Registries

| Language | Package Managers | Manifest Files | Registry Checked | |----------------|---------------------------|--------------------------------------|------------------| | JavaScript | npm, yarn, pnpm, bun | package.json | npmjs.com | | Python | pip, poetry | requirements.txt, pyproject.toml | PyPI | | Rust | cargo | Cargo.toml | crates.io | | PHP | composer | composer.json | Packagist* | | Go | go | go.mod | proxy.golang.org | | Ruby | bundler | Gemfile | RubyGems | | Flutter | flutter | pubspec.yaml | pub.dev* |

* Note: Some registry endpoints may have partial support depending on the version.

⚙️ Configuration (latestx.yaml)

After running latestx init, you'll see a generated configuration file:

version: 1
project:
  name: your-project-name
  detected_at: 2026-02-27T12:00:00.000Z
environment:
  primary_language: javascript
  primary_framework: nextjs
  manifest_path: package.json
preferences:
  allow_major_updates: false
  interactive_default: true
  enable_ai_compatibility: true

You can optionally commit this file to your repository to standardize update rules across your entire team.

📄 License

MIT