New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

taze

Package Overview
Dependencies
Maintainers
1
Versions
102
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

taze

A modern cli tool that keeps your deps fresh

  • 0.4.3
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
30K
increased by0.02%
Maintainers
1
Weekly downloads
 
Created
Source

🥦 Taze 𝚊𝚕𝚙𝚑𝚊

(/ta:zei/, fresh in Turkish)

A modern cli tool that keeps your deps fresh

npx taze

or recursively for monorepos

npx taze -r

Features

  • Built-in support for monorepos
  • No installation required - npx taze
  • Safe by default - updates in the version range your allowed

Usage

By default, taze will only bump versions in the ranges you specified in package.json (which is safe and the default behavior of npm install)

To ignore the ranges, if you explicitly set the maximum allowenace version changes.

For example taze major will check all changes and bump to the lastest stable changes including majors(breaking changes), or taze minor that bump to lastest minor changes within the same major version.


Check for major updates

Check up to minor updates

Check up to patch updates

Monorepo

taze has the built-in first-class monorepo support. Simply adding -r, it will scan the subdirectories that contains package.json and update them together. It will handles in local private packages automatically.

Configures

See taze --help for more details

Filters

You can filter out packages you want to check for upgrades by --include or --exclude, they accept string and regex, separate by command(,).

taze --include lodash,webpack
taze --include /react/ --exclude react-dom # regex is also supported

Programmatic APIs

TODO:

Alternatives

taze is inspired from the following tools.

  • npm-check-updates
  • npm-check

They work well but have different focuses and feature sets, try them out as well :)

Thanks

Great thanks to @sinoon who helped a lot on having idea brainstroming and feedback discussion.

License

MIT License © 2020 Anthony Fu

FAQs

Package last updated on 04 Apr 2021

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc