pkg.sopackage field notes

brew / Rang 2078

npm-check-updates mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für npm-check-updates in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install npm-check-updates

provider-native install command

Überblick

Paketzusammenfassung

Find newer versions of dependencies than what your package.json allows

Befehle und Aliase

  • ncu
  • npm-check-updates

Verlauf

Projektgeschichte und Nutzung

npm-check-updates, usually invoked as ncu, is a long-running Node.js CLI for finding newer dependency versions than the ranges recorded in package.json and optionally rewriting those ranges. Its GitHub repository and npm registry package were both created on 2013-09-07.

Projektgeschichte

The project's core behavior has stayed focused: compare project dependency declarations with registry versions, preserve the user's version-range style where possible, and write the package file only when asked with -u/--upgrade. The README describes support for npm, yarn, pnpm, deno, and bun, plus CLI and module usage.

By 2026 the project had a large option surface for dependency sections, registries, JSON output, workspaces, interactive upgrades, owner-change reporting, and doctor mode. The npm registry metadata consulted for this batch reported 532 published versions and latest version 22.2.9 published on 2026-06-28.

Adoptionsgeschichte

ncu is a mainstream utility in JavaScript dependency maintenance because it covers a workflow that npm outdated and npm update do not fully replace: reviewing and changing declared ranges in package.json before reinstalling. The GitHub metadata consulted for this batch reported over 10k stars, and the package is available through npm, Homebrew, Nix, and Arch.

npm's public downloads API reported 3,121,600 downloads for npm-check-updates from 2026-05-30 through 2026-06-28 and 31,701,760 downloads from 2025-06-29 through 2026-06-28. Homebrew analytics reported 4,290 formula installs over its 365-day window.

Wie es verwendet wird

Package maintainers use ncu as a review step: run ncu to see available upgrades, inspect changelogs or use output formats such as repo/time/group, then run ncu -u followed by the package manager install command to update the lockfile. Its doctor mode is aimed at the more cautious path: iteratively install upgrades and run tests to isolate breaking updates.

Its practical role is especially visible in projects that do not want an automated bot to make every dependency decision. It gives humans a terse dependency diff, lets them filter by dependency type or package name, and supports alternative package managers while still centering package.json.

Warum Paket-Nerds sich dafür interessieren

npm-check-updates is one of the standard 'dependency hygiene' tools in the Node ecosystem: small enough to use by hand, scriptable enough for CI or release chores, and independent of any one package manager's built-in update semantics.

Zeitleiste

  • 2013-09-07: GitHub repository and npm package created.
  • 2026-06-28: npm registry metadata reports version 22.2.9 published.
  • 2026-05-30 to 2026-06-28: npm downloads API reports 3,121,600 downloads.

Related projects

  • npm outdated
  • npm update
  • Renovate
  • Dependabot
  • yarn
  • pnpm
  • bun
  • deno

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für npm-check-updates wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • Es wurden keine Homebrew-Bottle-Metadaten erfasst.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.ncurc.ncurc.json.ncurc.yaml.ncurc.yml.ncurc.js.ncurc.mjs.ncurc.cjs~/.ncurc

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
ncuExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.
npm-check-updatesExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03
Manager-Version23.0.0
Manager aktualisiert2026-07-28
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:npm-check-updates
Version23.0.0
PaketmanagerHomebrew
Homepagehttps://github.com/raineorshine/npm-check-updates
Zuletzt aktualisiert2026-07-28T02:34:02Z
Pulseupdated
Bottlenicht erfasst
Dienstkeiner deklariert

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation