
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@equinor/echo-update
Advanced tools

This is a simple tool for updating echo npm packages, or optionally all npm packages.
Major.Minor.Patch
Log/Output
OPTIONS
-a, --all Will update all packages, not just echo-packages
-d, --dev Will skip update for devDependencies
-e, --peer Will skip update for peerDependencies
-f, --filter=filter Will only update packages matching the filter, example: --filter=*react*
-i, --skipFixed Will skip dialogue and update for new fixed-version
-m, --skipMajor Will skip dialogue and update for new major-version
-o, --optional Will skip update for optionalDependencies
-p, --path=path The path (directory) containing package.json
EXAMPLES
echo-update | update echo packages
echo-update --all | update all packages
echo-update --filter=*jest* | update all packages that includes jest
echo-update -f=jest | only update the jest package
echo-update -a --path="./folder" | only update the jest package
echo-update -a --skipFixed --skipMajor | update all minor- & patch-versions, skip dialogue for major- & fixed-versions
For global use install package globally and use echo-update in your command line.
$ npm install @equinor/echo-update -g
For global use, navigate to the folder with the package.json and use the following commands.
To update all echo packages, run:
$ echo-update
For any special cases where one need a specific version one can use one of the following commands. For version select use.
$ echo-update -v
For selecting 'beta' and 'next' version.
$ echo-update -c
For updating all packages (not just echo), run:
$ echo-update -a
For running it on a different path/directory, run:
$ echo-update --path="../EchoCli/"
For local use in a specific project.
$ npm install @equinor/echo-update -D
Add scripts to your package.json.
{
"scripts": {
// Other scripts...
"echo-update": "echo-update",
"echo-update-version": "echo-update -v",
"echo-update-next": "echo-update -c",
"echo-update-all": "echo-update -a"
}
}
If you install package as dependency then add commands the following to your script section in the package.json
To update the echo packages, run:
$ npm run echo-update
To update all packages, run:
$ npm run echo-update-all
First time usage, run following command first:
$ npm install
$ npm run build
$ yalc publish
You can run the script locally with node after a build. Example where it updates all packages for EchoCli using the specified path:
cd non-monorepo-libs/echo-update
npm run build
node ./lib/index.js --path="./" -a <-- Echo-update
node ./lib/index.js --path="../echo-cli/" -a <-- Echo-Cli
node ./lib/index.js --path="../../" -a <-- Echopedia
node ./lib/index.js --path="./sampleFile/" -a <-- Sample file for testing
Remember to add scripts to package.json as described earlier in local section.
In echo-update:
$ npm run build
$ yalc publish
In your other repository where you want to test this (run both these each time you want to test a different echo-update option):
$ yalc add @equinor/echo-update
$ npm run echo-update-all
You need to run all these commands if you do a change and want to test again.
FAQs
Echo dependency updater
We found that @equinor/echo-update demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 19 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.