Bumply is a specialized macOS application designed to simplify and secure the dependency management process for Node.js projects. Developed by Revelio LLC, the tool provides a safe and transparent environment for keeping projects updated across major package managers including npm, pnpm, Yarn, and Bun. By focusing on visibility and safety, Bumply allows developers to manage their dependencies with confidence, ensuring they understand every change being made to their projects.

Functionality of the tool involves scanning selected local directories to identify Node.js projects, monitoring their dependency health, and facilitating updates. It acts as an intermediary between the developer and their chosen package manager, offering a pre-flight check for every action. This ensures that manifest files and lockfiles remain protected and that no unintended modifications occur without explicit approval. The tool operates primarily from the menu bar, providing updates and visibility without requiring constant terminal interaction.

Some of the key features are:

• Safe Updates: Displays the exact command to be executed before it runs and provides automated byte-for-byte backups of manifest and lockfiles.
• One-Click Rollbacks: Allows users to revert dependency changes instantly if an update fails, utilizing a dedicated update history.
• Dependency Transparency: Visualizes installed, declared, and published versions of dependencies, providing clear context on their sources.
• Security Audits: Performs dependency audits using the package manager's native data without executing any package code or scripts.
• Storage Cleanup: Identifies and safely removes redundant build artifacts like node_modules or cache folders to reclaim disk space.
• Compatibility Checking: Automatically distinguishes between minor updates and major version changes for all pending dependencies.
• Monorepo Support: Intelligently handles workspace roots and internal packages as unified projects.

To use Bumply, developers select folders containing their projects. The application then monitors these for updates or security advisories. When an update is identified, the user can review the specific command in the application interface before approving execution. If a problem arises, the application's history feature allows for an immediate restoration of files to their previous state. The application also provides ongoing monitoring, running checks periodically to alert users to new releases or potential vulnerabilities.

Some common use cases include:

• Maintaining Dependency Hygiene: Regularly updating packages in development environments to ensure software remains patched against known vulnerabilities.
• Safe Dependency Management: Avoiding the risks of accidental dependency breakage by utilizing built-in automatic backups and easy rollback mechanisms.
• Project Cleanup: Freeing up significant storage space on Mac workstations by removing temporary build artifacts from multiple projects at once.
• Monorepo Handling: Managing dependencies in complex projects where multiple packages share a single lockfile and workspace structure.