# Install npm-check-updates with Homebrew, Nix, pacman Find newer versions of dependencies than what your package.json allows. Version 22.2.9 via Homebrew; verified 2026-06-29. ## Install ```sh sudo av install brew:npm-check-updates ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install npm-check-updates ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#npm-check-updates ``` Evidence: nixpkgs package indexes: pkgs/by-name/np/npm-check-updates/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S npm-check-updates ``` Evidence: Arch Linux sync databases: npm-check-updates from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz ## Package facts - **Package key:** brew:npm-check-updates - **Package manager:** Homebrew - **Package manager page:** - **Version:** 22.2.9 - **Source summary:** Find newer versions of dependencies than what your package.json allows - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-29T21:17:57Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - ncu (cli) - npm-check-updates (cli) - ncu (alias) - npm-check-updates (alias) ## Dependencies - node ## Install behavior - Post-install hook: not defined - Bottle: available on all ## Freshness - Page generated: 2026-07-08 - Package-manager version: 22.2.9 - Package-manager updated: 2026-06-29 - Local data: ok - Upstream repository: https://github.com/raineorshine/npm-check-updates - info: No cached GitHub release or tag data was available. ## Project history and usage npm-check-updates, usually invoked as ncu, is a long-running Node.js CLI for finding newer dependency versions than the ranges recorded in package.json and optionally rewriting those ranges. Its GitHub repository and npm registry package were both created on 2013-09-07. ### Project history The project's core behavior has stayed focused: compare project dependency declarations with registry versions, preserve the user's version-range style where possible, and write the package file only when asked with -u/--upgrade. The README describes support for npm, yarn, pnpm, deno, and bun, plus CLI and module usage. By 2026 the project had a large option surface for dependency sections, registries, JSON output, workspaces, interactive upgrades, owner-change reporting, and doctor mode. The npm registry metadata consulted for this batch reported 532 published versions and latest version 22.2.9 published on 2026-06-28. ### Adoption history ncu is a mainstream utility in JavaScript dependency maintenance because it covers a workflow that npm outdated and npm update do not fully replace: reviewing and changing declared ranges in package.json before reinstalling. The GitHub metadata consulted for this batch reported over 10k stars, and the package is available through npm, Homebrew, Nix, and Arch. npm's public downloads API reported 3,121,600 downloads for npm-check-updates from 2026-05-30 through 2026-06-28 and 31,701,760 downloads from 2025-06-29 through 2026-06-28. Homebrew analytics reported 4,290 formula installs over its 365-day window. ### How it is used Package maintainers use ncu as a review step: run ncu to see available upgrades, inspect changelogs or use output formats such as repo/time/group, then run ncu -u followed by the package manager install command to update the lockfile. Its doctor mode is aimed at the more cautious path: iteratively install upgrades and run tests to isolate breaking updates. Its practical role is especially visible in projects that do not want an automated bot to make every dependency decision. It gives humans a terse dependency diff, lets them filter by dependency type or package name, and supports alternative package managers while still centering package.json. ### Why package nerds care npm-check-updates is one of the standard 'dependency hygiene' tools in the Node ecosystem: small enough to use by hand, scriptable enough for CI or release chores, and independent of any one package manager's built-in update semantics. ### Timeline - 2013-09-07: GitHub repository and npm package created. - 2026-06-28: npm registry metadata reports version 22.2.9 published. - 2026-05-30 to 2026-06-28: npm downloads API reports 3,121,600 downloads. ### Related projects - npm outdated - npm update - Renovate - Dependabot - yarn - pnpm - bun - deno ### Sources - - - - - - ## Security Notes No matching local secret-handling manifest was found for npm-check-updates. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .ncurc, .ncurc.json, .ncurc.yaml, .ncurc.yml, .ncurc.js, .ncurc.mjs, .ncurc.cjs, ~/.ncurc ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** npm-check-updates - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Nix - npm-check-updates: normalized package name match | nixpkgs package indexes: pkgs/by-name/np/npm-check-updates/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman - npm-check-updates - 22.2.3-1: normalized package name match | Arch Linux sync databases: npm-check-updates from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Find newer versions of dependencies than what your package.json allows | https://github.com/raineorshine/npm-check-updates ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Package publisher tools](https://www.automicvault.com/pkg/package-publishers/) - Belongs to a package publishing or registry command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [node](https://www.automicvault.com/pkg/brew/node/) - Runtime dependency declared by Homebrew. - [patch-package](https://www.automicvault.com/pkg/brew/patch-package/) - Shares av.db curated category or tags: cli, dependencies, developer-tools, nodejs, npm. - [corepack](https://www.automicvault.com/pkg/brew/corepack/) - Shares av.db curated category or tags: cli, developer-tools, nodejs, npm, package-management. - [ni](https://www.automicvault.com/pkg/brew/ni/) - Shares av.db curated category or tags: cli, developer-tools, nodejs, npm, package-management. - [nrm](https://www.automicvault.com/pkg/brew/nrm/) - Shares av.db curated category or tags: cli, developer-tools, nodejs, npm, package-management. - [pnpm](https://www.automicvault.com/pkg/brew/pnpm/) - Shares av.db curated category or tags: cli, dependencies, developer-tools, nodejs, package-management. - [cpm](https://www.automicvault.com/pkg/brew/cpm/) - Shares av.db curated category or tags: cli, dependencies, developer-tools, package-management. - [install-peerdeps](https://www.automicvault.com/pkg/brew/install-peerdeps/) - Shares av.db curated category or tags: cli, developer-tools, npm, package-management. - [orogene](https://www.automicvault.com/pkg/brew/orogene/) - Shares av.db curated category or tags: cli, developer-tools, nodejs, package-management. - [npm-check-updates](https://www.automicvault.com/pkg/npm/npm-check-updates/) - Same normalized package name appears in another local ecosystem. Shared terms: allows, check, dependencies, find, json. - [npm-check-updates](https://www.automicvault.com/pkg/npm/npm-check-updates/) - Same normalized package name in another local ecosystem. ## Combined YAML source View the package source record on GitHub. [combined/npm-check-updates.yml](https://github.com/automic-vault/db/blob/main/combined/npm-check-updates.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph