NPM Dependencies Updater

Smart version management for package.json with one-click updates and breaking change detection.

✨ Features

• 🔍 Smart Version Detection - Automatically scans package.json files and displays real-time version status.
• 🎯 Risk Analysis - Distinguishes between safe updates (patch/minor) and risky updates (major versions) with clear icons.
• 🖱️ One-Click Updates - Click on CodeLens hints to update your dependencies instantly.
• ⚠️ Safety Confirmation - Intelligent modal dialogs when performing batch updates to handle major version risks.
• 📊 Status Bar Integration - Real-time summary of available updates in your VS Code status bar.
• 🌍 Multi-language Support - Interface localized into 10 languages.
• 🔒 peerDependencies Aware - Peer ranges are shown but excluded from "Update All", since they express host compatibility windows.
• 🔁 Resilient Checks - Failed lookups are cached briefly and retried on demand instead of hammering the registry.
• 💾 Smart Caching - Efficiently caches NPM registry data to ensure a smooth, non-blocking experience.
• 🔗 NPM Integration - Quick links to view package details on npmjs.com.

🚀 Installation

1. Open VS Code
2. Go to Extensions (Ctrl+Shift+X)
3. Search for "NPM Dependencies Updater"
4. Click Install

Or install from command line:

code --install-extension cookabc.npm-dependencies-updater

🚀 Usage

1. Open any package.json file.
2. The extension automatically shows status for each dependency:
   • ✓ Up to date - Package is already at the latest version.
   • $(sync~spin) Checking... - Fetching information from NPM.
   • $(arrow-up) Update to X.X.X - Safe update available (click to update).
   • $(warning) Update to X.X.X Major - Major version update (use caution).
3. Use the Status Bar summary to see an overview of your project's health.
4. Click "Update All" in the status bar or command palette to batch update safe packages (peerDependencies are skipped).
5. If a check fails, the CodeLens shows the error — click it to retry.

⚙️ Configuration

🏗️ Project Structure

src/
├── core/           # Core business logic
│   ├── cache.ts           # Cache management
│   ├── packageJsonParser.ts # package.json parsing
│   └── versionResolver.ts # Version risk analysis & resolution
├── providers/      # Service providers
│   ├── codeLensProvider.ts # CodeLens provider
│   ├── npmClient.ts       # NPM API client
│   └── versionService.ts  # Version service
├── utils/          # Utility functions
│   ├── i18n.ts           # Internationalization
│   ├── logger.ts         # Output channel logging
│   └── statusBar.ts      # Status bar management
├── types/          # Type definitions
│   └── index.ts
└── extension.ts    # Extension entry point

🛠️ Development

# Install dependencies
npm install

# Compile
npm run compile

# Run tests
npm test

🚀 Publishing

Automated: pushing a version tag runs tests, publishes to both marketplaces and attaches the VSIX to a GitHub Release. Publishing uses OIDC trusted publishing — register the repository + workflow once on each marketplace (no token stored as a secret); VSCE_PAT / OVSX_PAT secrets still work as a fallback:

git tag v<package.json version> && git push origin v<package.json version>

Manual local publish (reads .env with VSCE_PAT / OVSX_PAT):

# Publish to both VS Code Marketplace and OpenVSX
./publish.sh all

# Publish to VS Code Marketplace only
./publish.sh vsx

# Publish to OpenVSX only
./publish.sh ovsx

Prerequisites: Azure DevOps Personal Access Token with Marketplace permissions. See VS Code Publishing Docs for setup details.

�📄 License

MIT License. See LICENSE for details.