Bumply

What is Bumply?

Bumply is a Mac app that keeps npm, pnpm, Yarn, and Bun projects up to date without the usual risk. It shows you the exact command before it runs, backs up your manifest and lockfile byte-for-byte, and rolls everything back the moment something fails. Built for macOS 13 and later, it works across all your Node projects from a single window—and it's free for up to three projects.

Who it's for

• Solo developers juggling multiple Node projects who want one place to see every outdated dependency and update them safely.
• Maintainers of monorepos who need updates handled as a single unit, with dirty-repo detection and clear explanations of what's blocking a change.
• Developers tired of broken updates who want a safety net—byte-for-byte backups, rollback on failure, and an Update History that lets you revert days later.

Key features

Updates you can undo

Every update shows the full command before it executes, and your manifest and lockfile are copied before anything is touched. If the update fails, those files are restored byte-for-byte. If you change your mind a week later, Update History lists every update the project has had and puts those two files back—without ever writing to your git history.

Dependency health, with the evidence

Bumply shows what's installed, what your manifest asks for, and what the registry offers, each with its source. Every update is classified: it tells you whether the new version stays inside your declared range or crosses a major version, so you never get surprised by a breaking change.

Audits that never execute code

Advisories come from your package manager's audit data, read-only, using flags like package-lock-only and ignore-scripts. Nothing is installed and no package script runs while Bumply looks, so you get vulnerability counts by severity without any risk of executing untrusted code.

The gigabytes you forgot about

Bumply finds build artefacts your project can rebuild from scratch—node_modules, .next, .turbo, Pods—and shows what each one costs. Anything you remove goes to the Trash, and it marks each item as regenerable or worth checking first, so you never delete something you can't get back.

What stands out