Gathering detailed insights and metrics for @zwik/yarn-upgrade-all
Gathering detailed insights and metrics for @zwik/yarn-upgrade-all
Installations
npm install @zwik/yarn-upgrade-allDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
10.16.0
NPM Version
6.9.0
Releases
9
Languages
1
JavaScript
JavaScript (100%)
Developer
zwik
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
76 Commits
2 Watchers
1 Branches
1 Contributors
Updated on Nov 19, 2024
Maintainers
1
Package Meta Information
Latest Version
0.0.12
Package Id
@zwik/yarn-upgrade-all@0.0.12
Unpacked Size
5.81 kB
Size
2.40 kB
File Count
5
NPM Version
6.9.0
Node Version
10.16.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
4
@zwik/yarn-upgrade-all
Based on yarn-upgrade-all which is very slow and was missing some functionality, such as exact/tilde/caret versioning, I've decided to rework it a bit resulting in this packages.
This is a command line utility program to upgrade all the packages in your package.json to the latest version
(potentially upgrading packages across major versions).
Installation
yarn add --dev @zwik/yarn-upgrade-all
Installation globally
yarn global add @zwik/yarn-upgrade-all
Installation on Windows
npm install -g @zwik/yarn-upgrade-all
:exclamation: Don't use yarn to install it on Windows because there is a bug: yarnpkg/yarn#2224.
Usage
npx @zwik/yarn-upgrade-all
Will update packages with caret ^ versioning.
npx @zwik/yarn-upgrade-all -E
Will update packages with exact versioning.
npx @zwik/yarn-upgrade-all -T
Will update packages with tilde versioning.
How does it work?
For every package in package.json, it runs yarn add [--dev|--peer] <package-name>.
Why not simply yarn upgrade --latest ?
Most of the time yarn upgrade --latest works. But I did meet some cases when it didn't work. I am not sure of the reason, maybe it's yarn's bug.
This library is very robust because it goes the hard way.
What if a package failed to install?
In that case, that package will be skipped and an error message will be printed.
You need to read the error message and manually install that package.
It is the recommended flow. Because if a package failed to install, most of the time, you need to manually troubleshoot the issue and fix the issue.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
Found 0/2 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 28 are checked with a SAST tool
Reason
21 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
- Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
- Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
- Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
Score
1.3
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More