New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

ripencli

Package Overview
Dependencies
Maintainers
1
Versions
27
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

ripencli

Interactive dependency updater for npm, pnpm, yarn, and bun

latest
Source
npmnpm
Version
1.0.1
Version published
Maintainers
1
Created
Source

ripen

Interactive dependency updater for npm, pnpm, yarn, and bun

npm version node GitHub License

ripen banner

Features

  • Interactive TUI — navigate packages with arrow keys, select with space
  • Version picker — choose any specific version from the npm registry, not just latest
  • Changelog viewer — see GitHub release notes before you update
  • npm, pnpm, yarn & bun — auto-detects your package manager
  • Global packages — check and update global installs across all* package managers
  • Show all packagesripen --all lists every dependency, not just outdated ones (great for checking changelogs or downgrading)
  • Self-update — notifies you when a new version of ripen is available
  • Major bump warnings — highlights potentially breaking updates
  • Scope grouping — optionally group scoped packages (e.g. @heroui/*) together
  • Frequency sorting — packages you update often can be surfaced to the top

Install

npm install -g ripencli@latest
# or
pnpm add -g ripencli@latest
# or
yarn global add ripencli@latest
# or
bun add -g ripencli@latest

Usage

# Check current project
ripen

# Check global packages (scans npm, pnpm, and yarn)
ripen -g

# Show all packages, not just outdated ones
ripen --all

# Help
ripen --help

Controls

KeyAction
↑ ↓Navigate packages
spaceToggle select
vPick specific version
cView changelog / release notes
enterUpdate selected packages
sOpen settings
escCancel / go back

How it works

  • Reads your package.json and checks each dependency against the npm registry directly
  • Detects your package manager from the lock file (bun.lock, pnpm-lock.yaml, package-lock.json, or yarn.lock) for running updates
  • Shows outdated packages in a colorful interactive list (use --all to show every package, including up-to-date ones)
  • Press v on any package to pick a specific version from the npm registry
  • Press c to see GitHub release notes between your current and target version
  • Select the ones you want and press enter — ripen runs the update commands for you

Settings

Press s to open the settings screen. Settings are persisted at ~/.config/ripen/config.json.

SettingDefaultDescription
Sort by update frequencyOffPackages you update often appear at the top
Separate dev dependenciesOnShow dependencies and devDependencies in separate groups
Enable scope groupingOffGroup scoped packages under their scope prefix
Show grouped scopes on topOffGrouped scopes appear before ungrouped packages
Grouped scopesList of scopes to group (e.g. @heroui, @radix-ui)

When using ripen -g, all available package managers (npm, pnpm, yarn) are checked in parallel so you see every global package in one place. Bun is not included in global checking because it doesn't provide a JSON output for its outdated command.

License

MIT

Keywords

npm

FAQs

Package last updated on 27 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts