# npm-check-updates

This skill checks and upgrades package.json dependencies with npm-check-updates. Use it for selective, bulk, or guarded version changes.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 426 installs · ★ 2
- Author: ilteoood
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/ilteoood/harness/tree/HEAD/skills/nodejs-development/npm-check-updates/SKILL.md
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/skills/npm-check-updates

## What it does

The skill lets an agent inspect stale dependencies and raise their versions in `package.json` while keeping the project’s existing range style. It can call `ncu` or `npm-check-updates`, include packages with `--filter`, leave them out with `--reject`, and limit upgrades with `--target` such as patch or minor.

It also covers monorepos through `--deep`, `--workspaces`, `--workspace`, and `--packageFile`. `--interactive` lets you choose packages from a checklist. With `--doctor`, the tool applies upgrades one at a time and runs tests to identify a breaking change; `--cooldown`, `--peer`, and `--enginesNode` add selection constraints.

Only `package.json` is edited. After `ncu -u`, run the project’s package-manager install command, such as `npm install`, to refresh the lockfile and `node_modules`. Until that happens, the installed dependencies stay unchanged.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add ilteoood/harness --skill npm-check-updates -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/npm-check-updates/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/npm-check-updates/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add ilteoood/harness --skill npm-check-updates -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/npm-check-updates/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add ilteoood/harness --skill npm-check-updates -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/npm-check-updates/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install ilteoood/harness npm-check-updates
```

2. **Manually: put the files in place**
- File: `.github/skills/npm-check-updates/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add ilteoood/harness --skill npm-check-updates -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/ilteoood/harness --path skills/nodejs-development/npm-check-updates
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/npm-check-updates/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add ilteoood/harness --skill npm-check-updates -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/ilteoood/harness/tree/HEAD/skills/nodejs-development/npm-check-updates/SKILL.md

## When to use it
- find stale dependencies in `package.json`
- upgrade a selected set of packages
- exclude packages from a version bump
- scan workspaces and nested package files
- trace a breaking upgrade with `--doctor`

## Example prompts
- Check `package.json` for outdated dependencies and show the proposed changes.
- Upgrade only `react` and `react-dom` with `--filter`, then give me the install command.
- Scan all workspaces and use `--doctor` to identify the upgrade that breaks the tests.

## Similar
- [updating-npm-package](https://affpapa.org/en/nevibecode/skills/updating-npm-package.md) — skill · 398 installs
- [check-npm](https://affpapa.org/en/nevibecode/skills/check-npm.md) — skill · 2800 installs
- [npm-security-best-practices](https://affpapa.org/en/nevibecode/skills/npm-security-best-practices.md) — skill · 919 installs
- [dependency-check](https://affpapa.org/en/nevibecode/skills/dependency-check.md) — skill · 748 installs
- [npm-trusted-publishing](https://affpapa.org/en/nevibecode/skills/npm-trusted-publishing.md) — skill · ★ 40451
- [dependency-auditor](https://affpapa.org/en/nevibecode/skills/onewave-ai-dependency-auditor.md) — skill · 302 installs

From the same set: [ilteoood/harness](https://affpapa.org/en/nevibecode/by/ilteoood/harness.md) — 2 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md