Bumply
macOS dependency update, audit, and rollbackable project cleanup tool
About Bumply
Bumply is a macOS app for maintaining npm, pnpm, Yarn, and Bun projects. Before updating dependencies, it shows the exact commands that will run and backs up the manifest and lockfile byte-for-byte; if an update fails, you can roll it back or restore it from update history. Bumply also reads package manager audit data in read-only mode without installing content or running package scripts, and can identify rebuildable artifacts such as node_modules, .next, .turbo, and Pods, sending removed items to the Trash.
Best for
Best use cases
Update project dependencies and review the commands beforehand
Restore the manifest and lockfile after a failed dependency update
Check dependency security advisories in read-only mode
Identify and clean up rebuildable build artifacts
Features
Rollbackable dependency updates
Shows the exact commands before updating and backs up the manifest and lockfile byte-for-byte; automatically rolls back on failure and can also restore from update history.
Read-only security audit
Reads package manager audit data without installing content or running package scripts.
Build artifact cleanup
Identifies rebuildable artifacts such as node_modules, .next, .turbo, and Pods, and sends removed items to the Trash.
Update history
Lists project update records and lets you restore the manifest and lockfile later without writing to Git history.
Pros
- Shows exact commands and backs up key files before updating
- Can roll back after a failure or if you change your mind
- The security audit does not install content or run package scripts
- One-time purchase with no subscription or account
Cons
- Only supports macOS 13 and later
- The free tier supports only three projects
Pricing Plans
Free
- Supports three projects
- No expiration
* Pricing information is for reference only. Please refer to the latest announcement on Bumply's official website.