# npm-check
> Check for outdated, incorrect, and unused dependencies.
Latest version **6.0.1** (published 2022-07-16) · MIT license · 0 weekly downloads
## Install
```sh
npm install npm-check
pnpm add npm-check
yarn add npm-check
bun add npm-check
```
Provides the command `npm-check`.
## Health
**Score 25/100 (F)** — status: abandoned.
Positive: has types; no vulnerabilities; high quality score.
Warnings: low downloads; no esm support.
Negative: abandoned; low maintenance score.
## Facts
| | |
|---|---|
| Version | 6.0.1 |
| Published | 2022-07-16 |
| First published | 2014-06-09 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | >=10.9.0 |
| Dependencies | 27 |
| Unpacked size | 91.9 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Author | Dylan Greene |
| Maintainers | linusu, dylang |
| Keywords | npm, outdated, dependencies, unused, changelog, check, updates, api, interactive, cli, safe, updating, updater, installer, devDependencies |
## Links
- npm: https://www.npmjs.com/package/npm-check
- Repository: https://github.com/dylang/npm-check
- Issues: https://github.com/dylang/npm-check/issues
- npm.io page: https://npm.io/package/npm-check
## Dependencies (27)
- [co](https://npm.io/package/co.md) ^4.6.0
- [ora](https://npm.io/package/ora.md) ^5.3.0
- [meow](https://npm.io/package/meow.md) ^9.0.0
- [chalk](https://npm.io/package/chalk.md) ^4.1.0
- [execa](https://npm.io/package/execa.md) ^5.0.0
- [is-ci](https://npm.io/package/is-ci.md) ^2.0.0
- [xtend](https://npm.io/package/xtend.md) ^4.0.2
- [giturl](https://npm.io/package/giturl.md) ^1.0.0
- [globby](https://npm.io/package/globby.md) ^11.0.2
- [lodash](https://npm.io/package/lodash.md) ^4.17.20
- [semver](https://npm.io/package/semver.md) ^7.3.4
- [throat](https://npm.io/package/throat.md) ^6.0.1
- [pkg-dir](https://npm.io/package/pkg-dir.md) ^5.0.0
- [depcheck](https://npm.io/package/depcheck.md) ^1.3.1
- [inquirer](https://npm.io/package/inquirer.md) ^7.3.3
- [minimatch](https://npm.io/package/minimatch.md) ^3.0.2
- [node-emoji](https://npm.io/package/node-emoji.md) ^1.10.0
- [strip-ansi](https://npm.io/package/strip-ansi.md) ^6.0.0
- [text-table](https://npm.io/package/text-table.md) ^0.2.0
- [path-exists](https://npm.io/package/path-exists.md) ^4.0.0
- [semver-diff](https://npm.io/package/semver-diff.md) ^3.1.1
- [package-json](https://npm.io/package/package-json.md) ^6.5.0
- [preferred-pm](https://npm.io/package/preferred-pm.md) ^3.0.3
- [global-modules](https://npm.io/package/global-modules.md) ^2.0.0
- [callsite-record](https://npm.io/package/callsite-record.md) ^4.1.3
- [update-notifier](https://npm.io/package/update-notifier.md) ^5.1.0
- [rc-config-loader](https://npm.io/package/rc-config-loader.md) ^4.0.0
## Alternatives
- [@salesforce/cli](https://npm.io/package/@salesforce/cli.md) — 389.7K weekly downloads
- [@mintlify/cli](https://npm.io/package/@mintlify/cli.md) — 208.9K weekly downloads
- [@grafana/e2e-selectors](https://npm.io/package/@grafana/e2e-selectors.md) — 128.7K weekly downloads
- [mintlify](https://npm.io/package/mintlify.md) — 112.0K weekly downloads
- [@intlayer/cli](https://npm.io/package/@intlayer/cli.md) — 22.8K weekly downloads
## Recent versions
- 6.0.1 (latest) — 2022-07-16
- 5.9.2 — 2020-02-28
- 5.9.1 — 2020-02-28
- 5.9.0 — 2018-09-18
- 5.8.0 — 2018-08-06
- 5.7.1 — 2018-05-13
- 5.7.0 — 2018-04-17
- 5.6.0 — 2018-03-22
- 5.5.2 — 2017-11-06
- 5.5.1 — 2017-11-01
- 5.5.0 — 2017-10-31
- 5.4.5 — 2017-07-15
- 5.4.4 — 2017-05-11
- 5.4.3 — 2017-05-11
- 5.4.2 — 2017-05-11
- … 40 more at https://npm.io/package/npm-check/versions
## README
npm-check
=========
[](https://travis-ci.org/dylang/npm-check)
[](http://badge.fury.io/js/npm-check)
[]()
> Check for outdated, incorrect, and unused dependencies.
### Features
* Tells you what's out of date.
* Provides a link to the package's documentation so you can decide if you want the update.
* Kindly informs you if a dependency is not being used in your code.
* Works on your globally installed packages too, via `-g`.
* **Interactive Update** for less typing and fewer typos, via `-u`.
* Supports public and private [@scoped/packages](https://docs.npmjs.com/getting-started/scoped-packages).
* Supports ES6-style [`import from`](http://exploringjs.com/es6/ch_modules.html) syntax.
* Upgrades your modules using your installed version of npm, including the new `npm@3`, so dependencies go where you expect them.
* Works with any public npm registry, [private registries](https://www.npmjs.com/enterprise), and alternate registries like [Sinopia](https://github.com/rlidwka/sinopia).
* Does not query registries for packages with `private: true` in their package.json.
* Emoji in a command-line app, because command-line apps can be fun too.
* Works with `npm@2` and `npm@3`, as well as newer alternative installers like `ied` and `pnpm`.
### Requirements
* Node >= 10.9.0
### On the command line
This is the easiest way to use `npm-check`.
### Install
```bash
$ npm install -g npm-check
```
### Use
```bash
$ npm-check
```
The result should look like the screenshot, or something nice when your packages are all up-to-date and in use.
When updates are required it will return a non-zero response code that you can use in your CI tools.
### Options
```
Usage
$ npm-check
Path
Where to check. Defaults to current directory. Use -g for checking global modules.
Options
-u, --update Interactive update.
-y, --update-all Uninteractive update. Apply all updates without prompting.
-g, --global Look at global modules.
-s, --skip-unused Skip check for unused packages.
-p, --production Skip devDependencies.
-d, --dev-only Look at devDependencies only (skip dependencies).
-i, --ignore Ignore dependencies based on succeeding glob.
-E, --save-exact Save exact version (x.y.z) instead of caret (^x.y.z) in package.json.
--specials List of depcheck specials to include in check for unused dependencies.
--no-color Force or disable color output.
--no-emoji Remove emoji support. No emoji in default in CI environments.
--debug Show debug output. Throw in a gist when creating issues on github.
Examples
$ npm-check # See what can be updated, what isn't being used.
$ npm-check ../foo # Check another path.
$ npm-check -gu # Update globally installed modules by picking which ones to upgrade.
```
#### `-u, --update`
Show an interactive UI for choosing which modules to update.
Automatically updates versions referenced in the `package.json`.
_Based on recommendations from the `npm` team, `npm-check` only updates using `npm install`, not `npm update`.
To avoid using more than one version of `npm` in one directory, `npm-check` will automatically install updated modules
using the version of `npm` installed globally._
##### Update using [ied](https://github.com/alexanderGugel/ied) or [pnpm](https://github.com/rstacruz/pnpm)
Set environment variable `NPM_CHECK_INSTALLER` to the name of the installer you wish to use.
```bash
NPM_CHECK_INSTALLER=pnpm npm-check -u
## pnpm install --save-dev foo@version --color=always
```
You can also use this for dry-run testing:
```bash
NPM_CHECK_INSTALLER=echo npm-check -u
```
#### `-y, --update-all`
Updates your dependencies like `--update`, just without any prompt. This is especially useful if you want to automate your dependency updates with `npm-check`.
#### `-g, --global`
Check the versions of your globally installed packages.
If the value of `process.env.NODE_PATH` is set, it will override the default path of global node_modules returned by package [`global-modules`](https://www.npmjs.com/package/global-modules).
_Tip: Use `npm-check -u -g` to do a safe interactive update of global modules, including npm itself._
#### `-s, --skip-unused`
By default `npm-check` will let you know if any of your modules are not being used by looking at `require` statements
in your code.
This option will skip that check.
This is enabled by default when using `global` or `update`.
#### `-p, --production`
By default `npm-check` will look at packages listed as `dependencies` and `devDependencies`.
This option will let it ignore outdated and unused checks for packages listed as `devDependencies`.
#### `-d, --dev-only`
Ignore `dependencies` and only check `devDependencies`.
This option will let it ignore outdated and unused checks for packages listed as `dependencies`.
#### `-i, --ignore`
Ignore dependencies that match specified glob.
`$ npm-check -i babel-*` will ignore all dependencies starting with 'babel-'.
#### `-E, --save-exact`
Install packages using `--save-exact`, meaning exact versions will be saved in package.json.
Applies to both `dependencies` and `devDependencies`.
#### `--specials`
Check special (e.g. config) files when looking for unused dependencies.
`$ npm-check --specials=bin,webpack` will look in the `scripts` section of package.json and in webpack config.
See [https://github.com/depcheck/depcheck#special](https://github.com/depcheck/depcheck#special) for more information.
#### `--color, --no-color`
Enable or disable color support.
By default `npm-check` uses colors if they are available.
#### `--emoji, --no-emoji`
Enable or disable emoji support. Useful for terminals that don't support them. Automatically disabled in CI servers.
#### `--spinner, --no-spinner`
Enable or disable the spinner. Useful for terminals that don't support them. Automatically disabled in CI servers.
### API
The API is here in case you want to wrap this with your CI toolset.
```js
const npmCheck = require('npm-check');
npmCheck(options)
.then(currentState => console.log(currentState.get('packages')));
```
#### `update`
* Interactive update.
* default is `false`
#### `global`
* Check global modules.
* default is `false`
* `cwd` is automatically set with this option.
#### `skipUnused`
* Skip checking for unused packages.
* default is `false`
#### `ignoreDev`
* Ignore `devDependencies`.
* This is called `--production` on the command line to match `npm`.
* default is `false`
#### `devOnly`
* Ignore `dependencies` and only check `devDependencies`.
* default is `false`
#### `ignore`
* Ignore dependencies that match specified glob.
* default is `[]`
#### `saveExact`
* Update package.json with exact version `x.y.z` instead of semver range `^x.y.z`.
* default is `false`
#### `debug`
* Show debug output. Throw in a gist when creating issues on github.
* default is `false`
#### `cwd`
* Override where `npm-check` checks.
* default is `process.cwd()`
#### `specials`
* List of [`depcheck`](https://github.com/depcheck/depcheck) special parsers to include.
* default is `''`
#### `currentState`
The result of the promise is a `currentState` object, look in [state.js](lib/state/state.js) to see how it works.
You will probably want `currentState.get('packages')` to get an array of packages and the state of each of them.
Each item in the array will look like the following:
```js
{
moduleName: 'lodash', // name of the module.
homepage: 'https://lodash.com/', // url to the home page.
regError: undefined, // error communicating with the registry
pkgError: undefined, // error reading the package.json
latest: '4.7.0', // latest according to the registry.
installed: '4.6.1', // version installed
isInstalled: true, // Is it installed?
notInstalled: false, // Is it installed?
packageWanted: '4.7.0', // Requested version from the package.json.
packageJson: '^4.6.1', // Version or range requested in the parent package.json.
devDependency: false, // Is this a devDependency?
usedInScripts: undefined, // Array of `scripts` in package.json that use this module.
mismatch: false, // Does the version installed not match the range in package.json?
semverValid: '4.6.1', // Is the installed version valid semver?
easyUpgrade: true, // Will running just `npm install` upgrade the module?
bump: 'minor', // What kind of bump is required to get the latest, such as patch, minor, major.
unused: false // Is this module used in the code?
},
```
You will also see this if you use `--debug` on the command line.
### RC File Support
Additional options can be sent to the depcheck process. See [depcheck API](https://github.com/depcheck/depcheck#api). Create a .npmcheckrc{.json,.yml,.js} file and set the depcheck options under depcheck property.
For example, to skip packages for unused check, but still want them in the outdated check (so can't use the --ignore option):
```
# .npmcheckrc
depcheck:
ignoreMatches: ["replace-in-file","snyk","sonarqube-scanner"]
```
### Inspiration
* [npm outdated](https://docs.npmjs.com/cli/v7/commands/npm-outdated) - awkward output, requires --depth=0 to be grokable.
* [david](https://github.com/alanshaw/david) - does not work with private registries.
* [update-notifier](https://github.com/yeoman/update-notifier) - for single modules, not everything in package.json.
* [depcheck](https://github.com/depcheck/depcheck) - only part of the puzzle. npm-check uses depcheck.
### About the Author
Hi! Thanks for checking out this project! My name is **Dylan Greene**. When not overwhelmed with my two young kids I enjoy contributing
to the open source community. I'm also a tech lead at [Opower](https://opower.com/). [](https://github.com/dylang) [](https://twitter.com/dylang)
Here's some of my other Node projects:
| Name | Description | npm Downloads |
|---|---|---|
| [`grunt‑notify`](https://github.com/dylang/grunt-notify) | Automatic desktop notifications for Grunt errors and warnings. Supports OS X, Windows, Linux. | [](https://www.npmjs.org/package/grunt-notify) |
| [`shortid`](https://github.com/dylang/shortid) | Amazingly short non-sequential url-friendly unique id generator. | [](https://www.npmjs.org/package/shortid) |
| [`space‑hogs`](https://github.com/dylang/space-hogs) | Discover surprisingly large directories from the command line. | [](https://www.npmjs.org/package/space-hogs) |
| [`rss`](https://github.com/dylang/node-rss) | RSS feed generator. Add RSS feeds to any project. Supports enclosures and GeoRSS. | [](https://www.npmjs.org/package/rss) |
| [`grunt‑prompt`](https://github.com/dylang/grunt-prompt) | Interactive prompt for your Grunt config using console checkboxes, text input with filtering, password fields. | [](https://www.npmjs.org/package/grunt-prompt) |
| [`xml`](https://github.com/dylang/node-xml) | Fast and simple xml generator. Supports attributes, CDATA, etc. Includes tests and examples. | [](https://www.npmjs.org/package/xml) |
| [`changelog`](https://github.com/dylang/changelog) | Command line tool (and Node module) that generates a changelog in color output, markdown, or json for modules in npmjs.org's registry as well as any public github.com repo. | [](https://www.npmjs.org/package/changelog) |
| [`grunt‑attention`](https://github.com/dylang/grunt-attention) | Display attention-grabbing messages in the terminal | [](https://www.npmjs.org/package/grunt-attention) |
| [`observatory`](https://github.com/dylang/observatory) | Beautiful UI for showing tasks running on the command line. | [](https://www.npmjs.org/package/observatory) |
| [`anthology`](https://github.com/dylang/anthology) | Module information and stats for any @npmjs user | [](https://www.npmjs.org/package/anthology) |
| [`grunt‑cat`](https://github.com/dylang/grunt-cat) | Echo a file to the terminal. Works with text, figlets, ascii art, and full-color ansi. | [](https://www.npmjs.org/package/grunt-cat) |
_This list was generated using [anthology](https://github.com/dylang/anthology)._
### License
Copyright (c) 2016 Dylan Greene, contributors.
Released under the [MIT license](https://tldrlegal.com/license/mit-license).
Screenshots are [CC BY-SA](https://creativecommons.org/licenses/by-sa/4.0/) (Attribution-ShareAlike).
---
_Source: https://npm.io/package/npm-check · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._