Automic VaultAutomic Vault

brew

npm-check-updates mit Homebrew, Nix, pacman installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für npm-check-updates in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install npm-check-updates

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#npm-check-updates

nixpkgs package indexes · pkgs/by-name/np/npm-check-updates/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S npm-check-updates

Arch Linux sync databases · npm-check-updates · Quelle: geo.mirror.pkgbuild.com

Überblick

Paketzusammenfassung

Find newer versions of dependencies than what your package.json allows

Befehle und Aliase

  • ncu
  • npm-check-updates

Verlauf

Projektgeschichte und Nutzung

npm-check-updates, usually invoked as ncu, is a long-running Node.js CLI for finding newer dependency versions than the ranges recorded in package.json and optionally rewriting those ranges. Its GitHub repository and npm registry package were both created on 2013-09-07.

Projektgeschichte

The project's core behavior has stayed focused: compare project dependency declarations with registry versions, preserve the user's version-range style where possible, and write the package file only when asked with -u/--upgrade. The README describes support for npm, yarn, pnpm, deno, and bun, plus CLI and module usage.

By 2026 the project had a large option surface for dependency sections, registries, JSON output, workspaces, interactive upgrades, owner-change reporting, and doctor mode. The npm registry metadata consulted for this batch reported 532 published versions and latest version 22.2.9 published on 2026-06-28.

Adoptionsgeschichte

ncu is a mainstream utility in JavaScript dependency maintenance because it covers a workflow that npm outdated and npm update do not fully replace: reviewing and changing declared ranges in package.json before reinstalling. The GitHub metadata consulted for this batch reported over 10k stars, and the package is available through npm, Homebrew, Nix, and Arch.

npm's public downloads API reported 3,121,600 downloads for npm-check-updates from 2026-05-30 through 2026-06-28 and 31,701,760 downloads from 2025-06-29 through 2026-06-28. Homebrew analytics reported 4,290 formula installs over its 365-day window.

Wie es verwendet wird

Package maintainers use ncu as a review step: run ncu to see available upgrades, inspect changelogs or use output formats such as repo/time/group, then run ncu -u followed by the package manager install command to update the lockfile. Its doctor mode is aimed at the more cautious path: iteratively install upgrades and run tests to isolate breaking updates.

Its practical role is especially visible in projects that do not want an automated bot to make every dependency decision. It gives humans a terse dependency diff, lets them filter by dependency type or package name, and supports alternative package managers while still centering package.json.

Warum Paket-Nerds sich dafür interessieren

npm-check-updates is one of the standard 'dependency hygiene' tools in the Node ecosystem: small enough to use by hand, scriptable enough for CI or release chores, and independent of any one package manager's built-in update semantics.

Zeitleiste

  • 2013-09-07: GitHub repository and npm package created.
  • 2026-06-28: npm registry metadata reports version 22.2.9 published.
  • 2026-05-30 to 2026-06-28: npm downloads API reports 3,121,600 downloads.

Related projects

  • npm outdated
  • npm update
  • Renovate
  • Dependabot
  • yarn
  • pnpm
  • bun
  • deno

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für npm-check-updates wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 1 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.ncurc.ncurc.json.ncurc.yaml.ncurc.yml.ncurc.js.ncurc.mjs.ncurc.cjs~/.ncurc

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
ncucliglobales Executable
npm-check-updatescliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version22.2.9
Manager aktualisiert2026-06-29
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://github.com/raineorshine/npm-check-updates

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:npm-check-updates
Version22.2.9
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/npm-check-updates
Homepagehttps://github.com/raineorshine/npm-check-updates
Repositoryhttps://github.com/raineorshine/npm-check-updates
Upstream-Dokumentationhttps://github.com/raineorshine/npm-check-updates#readme
LizenzApache-2.0
Quellarchivhttps://registry.npmjs.org/npm-check-updates/-/npm-check-updates-22.2.9.tgz
Zuletzt aktualisiert2026-06-29T21:17:57Z
Pulseupdated
Abhängigkeitennode
Bottleverfügbar (auf all)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namenpm-check-updates
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

npm-check-updates

nix profile install nixpkgs#npm-check-updates
  • normalized package name match
  • Abgeglichen nach: npm Check Updates
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/np/npm-check-updates/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

npm-check-updates 22.2.3-1

Find newer versions of dependencies than what your package.json allows

https://github.com/raineorshine/npm-check-updates

sudo pacman -S npm-check-updates
  • License: Apache-2.0
  • Architecture: any
  • 1 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: npm Check Updates
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: npm-check-updates from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment