
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
npm-check-extras
Advanced tools
CLI app to check for outdated and unused dependencies, and run update/delete action over selected ones
CLI app to check for outdated and unused dependencies, and run update/delete action over selected ones
$ npm install --global npm-check-extras



$ npm-check-extras --help
CLI app to check for outdated and unused dependencies, and run update/delete action over selected ones
Usage
$ npm-check-extras
Options
--check-packages Check packages immediately
--production Skip devDependencies
--dev-only Look at devDependencies only (skip dependencies)
--global Look at global modules
--store-history Store info about packages actions history to a file (.npm-check-history.json)
--time-travel Revert changes in package.json from stored history
--skip-unused Skip check for unused packages
--only-stats Display only stats for updated/deleted packages and exit (it is applicable when you use --store-history option)
--names Show package names when --only-stats option is being used
--date Show stats only for specific date when --only-stats option is being used
Examples
$ npm-check-extras
$ npm-check-extras --check-packages
$ npm-check-extras --production
$ npm-check-extras --prod
$ npm-check-extras --check-packages --dev-only
$ npm-check-extras --check --dev-only
$ npm-check-extras --check --dev-only --store-history
$ npm-check-extras --global
$ npm-check-extras --check --global
$ npm-check-extras -c -d
$ npm-check-extras --time-travel
$ npm-check-extras --skup-unused
$ npm-check-extras --only-stats
$ npm-check-extras --report
$ npm-check-extras --report --names
$ npm-check-extras --report --names --date 2024-11-27
Checking project's dependencies.

Checking globally installed dependencies, then select packages by m filter.

Displaying only stats and exit by --only-stats or --report flag
This is applicable if you use --store-history option otherwise stats could not be collected

Displaing stats using --date flag to show stats only for specified date


MIT © Rushan Alyautdinov
FAQs
CLI app to check for outdated and unused dependencies, and run update/delete action over selected ones
The npm package npm-check-extras receives a total of 6 weekly downloads. As such, npm-check-extras popularity was classified as not popular.
We found that npm-check-extras demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.