Is a tool which helps you safely upgrade your NPM dependencies.
Running Bramble will look at each dependency in your package.json, and one by one will ask if you want to update that dependency (with the --prompt flag). If you let it, Bramble will then download the latest version of that dependency, optionally (with the --test flag) running your test suite to check for any breaking changes in the new version. Finally, Bramble will (with the --save flag) write the new version to your package.json.
He's also Ben's cat.
npm install -g bramble
npm install bramble --save
Usage: bramble [--save] [--prompt] [--test] [--dev]
Options:
-h, --help output usage information
-V, --version output the version number
-s, --save save the package.json on a successful install (and optional --test from your package.json
-t, --test bramble will run "npm test" (defined in your package.json) for you after successful install of any dependencies.
-p, --prompt prompt the user to install/skip and optionally test each dependency that needs updating
-d, --dev include flag to also update your devDependencies
FAQs
A tool which helps you safely upgrade your NPM dependencies.
The npm package bramble receives a total of 2 weekly downloads. As such, bramble popularity was classified as not popular.
We found that bramble demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Research
A malicious npm campaign is targeting Ethereum developers by impersonating Hardhat plugins and the Nomic Foundation, stealing sensitive data like private keys.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.