🚨 Shai-Hulud Strikes Again:834 Packages Compromised.Technical Analysis →
Socket
Book a DemoInstallSign in
Socket

depset

Package Overview
Dependencies
Maintainers
1
Versions
4
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

depset

Synchronize dependencies in package.json

latest
Source
npmnpm
Version
0.1.1
Version published
Maintainers
1
Created
Source

depset

A command-line tool to synchronize package dependencies in your package.json to their latest versions, a specific target version, or versions matching a pattern.

Invocation

Run depset using your preferred package manager:

  • npx:
    npx depset@latest [args...]
    
  • pnpm:
    pnpm dlx depset@latest [args...]
    
  • yarn:
    yarn dlx depset@latest [args...]
    
  • bun:
    bunx depset@latest [args...]
    

Usage

depset [package-specifier] [target-version] [options]

Arguments

  • [package-specifier] (Optional)
    The package name or pattern to target. If omitted (and --yes is not used), you will be prompted.

    • Exact Name: e.g., lodash, @babel/core
    • Scope: e.g., @myorg (targets packages like @myorg/component-a, @myorg/utils)
    • Prefix: e.g., eslint-* (targets packages like eslint-plugin-react, eslint-config-next)
  • [target-version] (Optional)
    The maximum version to synchronize to (e.g., "1", "1.2", "1.2.3"). If omitted (and neither --latest nor --yes are used), you will be prompted. If --latest is used, this is ignored.

Options

Usage: depset [options] [package-specifier] [target-version]

Synchronize package dependencies to their latest or a specific version.

Arguments:
  package-specifier   Package name or pattern (e.g., "@scope/foo*", "my-package", "@myorg").
                      Prompts if not provided (unless -y is used).
  target-version      Target version (e.g., "1.2.3"). Prompts if not provided (unless -L or -y is used).
                      Defaults to latest if left blank in prompt or if -L is used.

Options:
  -L, --latest        Use the latest version, skip version prompt. (default: false)
  -i, --install       Automatically run install after updating package.json. (default: false)
  -y, --yes           Skip all confirmation prompts. (default: false)
  -c, --cwd <path>    Set the current working directory. (default: current directory)
  -s, --silent        Silence all output except for errors. (default: false)
  -v, --version       Display the version number.
  -h, --help          Display help for command.

Examples

  • Sync lodash to its latest version (prompts for version if not specified with --latest):

    npx depset@latest lodash
    
  • Sync all packages in the @babel scope to their absolute latest versions, and install, skipping all prompts:

    npx depset@latest @babel --latest --install --yes
    
  • Sync packages starting with eslint- up to version 8.50.0:

    npx depset@latest "eslint-*" 8.50.0
    

    (You will be prompted to confirm changes and installation unless -y is used)

  • Run interactively, prompting for all inputs:

    npx depset@latest
    

Keywords

dependencies

FAQs

Package last updated on 09 May 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts