pleb

CLI to automate several npm package tasks.

Features

• Works locally and in CI. npx pleb [command] in mind.
• Supports both single package and yarn workspace setups.
• Skips already-published versions and private packages when publishing.
• Loads and uses user's npm authentication.

Commands

publish

Publish unpublished packages.

pleb assumes packages have already been built when publishing. If on-demand building is required, a "prepack" script can be used to build right before packing the package: "prepack": "npm run build"

upgrade

Upgrade dependencies and devDependencies of all packages. Checks the registry for latest version of each package, and updates package.json files with the new request.

Configuration File

pleb looks up pleb.config.js (or .mjs / .cjs) in the current directory and loads configuration from it, if exists.

e.g.:

1// pleb.config.mjs
2
3/** @type import('pleb').PlebConfiguration */
4export default {
5  pinnedPackages: ['react', 'react-dom', { name: 'execa', reason: 'newer version are pure ESM' }],
6};

Available configuration fields:

• "pinnedPackages" - skip upgrading specified packages during pleb upgrade. Any skipped packages, with their optional reason, will be printed in the upgrade report.

Integration

GitHub Actions

Inject NPM_TOKEN as a secret in GitHub's repository settings.

Save the following as npm.yml:

1name: npm
2on:
3  push:
4    branches: [main]
5jobs:
6  npm:
7    runs-on: ubuntu-latest
8    steps:
9      - uses: actions/checkout@v4
10      - name: Use Node.js 20
11        uses: actions/setup-node@v4
12        with:
13          node-version: 20
14          registry-url: 'https://registry.npmjs.org/'
15      - run: npm ci
16      - run: npx pleb publish
17        env:
18          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

License

MIT