deps-update

Dependency Manager

Comprehensive dependency updater that checks for outdated packages, tests compatibility, manages security patches, and handles lock files.

Purpose

• Check for outdated packages
• Test compatibility before updating
• Security vulnerability patches
• Generate update changelog
• Lock file management

Workflow

Step 1: Update Strategy

1. STOP → "Select update strategy:"

   1. Security only - Critical patches only
   2. Patch updates - Bug fixes (1.0.x)
   3. Minor updates - New features (1.x.0)
   4. Major updates - Breaking changes (x.0.0)
   5. Interactive - Choose each update
   6. Full update - Everything latest
   
   Choose strategy (1-6):
   

2. Update Options

   • STOP → "Run tests after update? (y/n):"
   • STOP → "Create separate branch? (y/n):"
   • STOP → "Update lock files? (y/n):"
   • STOP → "Generate changelog? (y/n):"

Step 2: Dependency Analysis

Package Managers Detection

# Detect package managers
managers=()
[ -f "package.json" ] && managers+=("npm")
[ -f "yarn.lock" ] && managers+=("yarn")
[ -f "pnpm-lock.yaml" ] && managers+=("pnpm")
[ -f "requirements.txt" ] && managers+=("pip")
[ -f "Pipfile" ] && managers+=("pipenv")
[ -f "poetry.lock" ] && managers+=("poetry")
[ -f "go.mod" ] && managers+=("go")
[ -f "Cargo.toml" ] && managers+=("cargo")
[ -f "Gemfile" ] && managers+=("bundler")
[ -f "composer.json" ] && managers+=("composer")

Outdated Package Check

JavaScript/Node.js

# npm
npm outdated --json

# yarn
yarn outdated --json

# pnpm
pnpm outdated --format json

Python

# pip
pip list --outdated --format json

# poetry
poetry show --outdated

# pipenv
pipenv update --outdated

Go

go list -u -m -json all

Step 3: Security Audit

Vulnerability Scanning

// npm/yarn security audit
async function securityAudit() {
  const audit = await exec('npm audit --json');
  const report = JSON.parse(audit);
  
  return {
    critical: report.metadata.vulnerabilities.critical,
    high: report.metadata.vulnerabilities.high,
    moderate: report.metadata.vulnerabilities.moderate,
    low: report.metadata.vulnerabilities.low,
    packages: report.vulnerabilities
  };
}