Selective dependency updates with inline release notes for npm and bun — built in Rust.
Fast, lightweight, and terminal-native — built in Rust.
Most updaters tell you what's outdated. depick tells you what changed, how risky it is, and lets you apply exactly what you want... all in one terminal session. Works with npm and bun. No broken interactive mode. No two-step workflow.
cargo install depickOr build from source:
git clone https://github.com/sofianeabbar/depick
cd depick
cargo build --release
./target/release/depick# Auto-detect package manager (checks for bun.lock / bun.lockb)
depick
# Force a specific package manager
depick --pm bun
depick --pm npm
# Update only within your declared semver range
depick --target wanted
# Run in a specific directory
depick --dir ~/code/my-project- Detects your package manager — automatically picks npm or bun from the project context
- Finds outdated dependencies — builds a focused list of packages worth reviewing
- Loads release notes — pulls changelogs and release context so you can see what changed
- Highlights update risk — marks patch, minor, major, and 0.x bumps at a glance
- Applies only what you choose — updates just the packages you select
| Label | Meaning | Default selection |
|---|---|---|
patch |
Same major.minor, patch changed | ✓ selected |
minor |
Same major, minor bumped | unselected |
0.x minor |
0.x package, minor bump — may be breaking | unselected |
major |
Major version changed — review carefully | unselected |
- Disk cache for release notes (skip re-fetch on restart)
- Filter view: patch only / dev only / selected only (
/key) -
rkey to rescan without quitting - Numbered link hints in the modal (
oto open) - pnpm and yarn support
- Monorepo / workspace support
- Non-interactive CI mode:
depick --json - Homebrew tap
git clone https://github.com/sofianeabbar/depick
cd depick
cargo build
cargo clippy -- -D warnings # must pass clean
cargo testThe codebase follows a strict three-layer architecture — domain / infra / ui — where no layer imports upward. See CLAUDE.md for the full architecture guide.
This project is dual-licensed under MIT or Apache-2.0. Users may choose either license when using or modifying depick.
See LICENSE-MIT or LICENSE-APACHE for the full license texts.