\n \n | --cache | \n Cache versions to a local cache file. Default --cacheFile is ~/.ncu-cache.json and default --cacheExpiration is 10 minutes. | \n
\n \n | --cacheClear | \n Clear the default cache, or the cache file specified by --cacheFile. | \n
\n \n | --cacheExpiration <min> | \n Cache expiration in minutes. Only works with --cache. (default: 10) | \n
\n \n | --cacheFile <path> | \n Filepath for the cache file. Only works with --cache. (default: \"~/.ncu-cache.json\") | \n
\n \n | --color | \n Force color in terminal. | \n
\n \n | --concurrency <n> | \n Max number of concurrent HTTP requests to registry. (default: 8) | \n
\n \n | --configFileName <s> | \n Config file name. (default: .ncurc or .ncurc.{json,yaml,yml,js,mjs,cjs}) | \n
\n \n | --configFilePath <path> | \n Directory of .ncurc config file. (default: directory of packageFile) | \n
\n \n | -c, --cooldown <period> | \n Sets a minimum age for package versions to be considered for upgrade. Accepts a number (days) or a string with a unit: \"7d\" (days), \"12h\" (hours), \"30m\" (minutes). Reduces the risk of installing newly published, potentially compromised packages. | \n
\n \n | --cwd <path> | \n Working directory in which npm will be executed. | \n
\n \n | --deep | \n Run recursively in current working directory. Alias of (--packageFile '**/package.json'). | \n
\n \n | --dep <value> | \n Check one or more sections of dependencies only: dev, optional, peer, prod, or packageManager (comma-delimited). (default: [\"prod\",\"dev\",\"optional\",\"packageManager\"]) | \n
\n \n | --deprecated | \n Include deprecated packages. Use --no-deprecated to exclude deprecated packages (20–25% slower). (default: true) | \n
\n \n | -d, --doctor | \n Iteratively installs upgrades and runs tests to identify breaking upgrades. Requires -u to execute. | \n
\n \n | --doctorInstall <command> | \n Specifies the install script to use in doctor mode. (default: npm install or the equivalent for your package manager) | \n
\n \n | --doctorTest <command> | \n Specifies the test script to use in doctor mode. (default: npm test) | \n
\n \n | --enginesNode | \n Include only packages that satisfy engines.node as specified in the package file. | \n
\n \n | -e, --errorLevel <n> | \n Set the error level. 1: exits with error code 0 if no errors occur. 2: exits with error code 0 if no packages need updating (useful for continuous integration). (default: 1) | \n
\n \n | -f, --filter <p> | \n Include only package names matching the given string, wildcard, glob, comma-or-space-delimited list, /regex/, or predicate function. | \n
\n \n | filterResults <fn> | \n Filters results based on a user provided predicate function after fetching new versions. | \n
\n \n | --filterVersion <p> | \n Filter on package version using comma-or-space-delimited list, /regex/, or predicate function. | \n
\n \n | --format <value> | \n Modify the output formatting or show additional information. Specify one or more comma-delimited values: dep, group, ownerChanged, repo, time, lines, installedVersion. (default: []) | \n
\n \n | -g, --global | \n Check global packages instead of in the current project. | \n
\n \n | groupFunction <fn> | \n Customize how packages are divided into groups when using --format group. | \n
\n \n | --install <value> | \n Control the auto-install behavior: always, never, prompt. (default: \"prompt\") | \n
\n \n | -i, --interactive | \n Enable interactive prompts for each dependency; implies -u unless one of the json options are set. | \n
\n \n | -j, --jsonAll | \n Output new package file instead of human-readable message. | \n
\n \n | --jsonDeps | \n Like jsonAll but only lists dependencies, devDependencies, optionalDependencies, etc of the new package data. | \n
\n \n | --jsonUpgraded | \n Output upgraded dependencies in json. | \n
\n \n | -l, --loglevel <n> | \n Amount to log: silent, error, minimal, warn, info, verbose, silly. (default: \"warn\") | \n
\n \n | --mergeConfig | \n Merges nested configs with the root config file for --deep or --packageFile options. (default: false) | \n
\n \n | -m, --minimal | \n Do not upgrade newer versions that are already satisfied by the version range according to semver. | \n
\n \n | --packageData <value> | \n Package file data (you can also use stdin). | \n
\n \n | --packageFile <path|glob> | \n Package file(s) location. (default: ./package.json) | \n
\n \n | -p, --packageManager <s> | \n npm, yarn, pnpm, deno, bun, staticRegistry (default: npm). | \n
\n \n | --peer | \n Check peer dependencies of installed packages and filter updates to compatible versions. | \n
\n \n | --pre <n> | \n Include prerelease versions, e.g. -alpha.0, -beta.5, -rc.2. Automatically set to 1 when --target is newest or greatest, or when the current version is a prerelease. (default: 0) | \n
\n \n | --prefix <path> | \n Current working directory of npm. | \n
\n \n | -r, --registry <uri> | \n Specify the registry to use when looking up package versions. | \n
\n \n | --registryType <type> | \n Specify whether --registry refers to a full npm registry or a simple JSON file or url: npm, json. (default: npm) | \n
\n \n | -x, --reject <p> | \n Exclude packages matching the given string, wildcard, glob, comma-or-space-delimited list, /regex/, or predicate function. | \n
\n \n | --rejectVersion <p> | \n Exclude package.json versions using comma-or-space-delimited list, /regex/, or predicate function. | \n
\n \n | --removeRange | \n Remove version ranges from the final package version. | \n
\n \n | --retry <n> | \n Number of times to retry failed requests for package info. (default: 3) | \n
\n \n | --root | \n Runs updates on the root project in addition to specified workspaces. Only allowed with --workspace or --workspaces. (default: true) | \n
\n \n | -s, --silent | \n Don't output anything. Alias for --loglevel silent. | \n
\n \n | --stdin | \n Read package.json from stdin. | \n
\n \n | -t, --target <value> | \n Determines the version to upgrade to: latest, newest, greatest, minor, patch, semver, @[tag], or [function]. (default: latest) | \n
\n \n | --timeout <ms> | \n Global timeout in milliseconds. (default: no global timeout and 30 seconds per npm-registry-fetch) | \n
\n \n | -u, --upgrade | \n Overwrite package file with upgraded versions instead of just outputting to console. | \n
\n \n | --verbose | \n Log additional information for debugging. Alias for --loglevel verbose. | \n
\n \n | --workspace <s> | \n Run on one or more specified workspaces. Add --no-root to exclude the root project. (default: []) | \n
\n \n | -w, --workspaces | \n Run on all workspaces. Add --no-root to exclude the root project. | \n
\n
\n\n\n\n## Advanced Options\n\nSome options have advanced usage, or allow per-package values by specifying a function in your .ncurc.js file.\n\nRun `ncu --help [OPTION]` to view advanced help for a specific option, or see below:\n\n\n\n\n## cooldown\n\nUsage:\n\n ncu --cooldown [period]\n ncu -c [period]\n\nThe cooldown option helps protect against supply chain attacks by requiring package versions to be published at least the given amount of time before considering them for upgrade.\n\nThe value can be a plain number (days) or a string with a unit suffix:\n\n --cooldown 7 7 days\n --cooldown 7d 7 days (same as above)\n --cooldown 12h 12 hours\n --cooldown 30m 30 minutes\n\nNote that previous stable versions will not be suggested. The package will be completely ignored if its latest published version is within the cooldown period. This is due to a limitation of the npm registry, which does not provide a way to query previous stable versions.\n\nExample:\n\nLet's examine how cooldown works with a package that has these versions available:\n\n 1.0.0 Released 7 days ago (initial version)\n 1.1.0 Released 6 days ago (minor update)\n 1.1.1 Released 5 days ago (patch update)\n 1.2.0 Released 5 days ago (minor update)\n 2.0.0-beta.1 Released 5 days ago (beta release)\n 1.2.1 Released 4 days ago (patch update)\n 1.3.0 Released 4 days ago (minor update) [latest]\n 2.0.0-beta.2 Released 3 days ago (beta release)\n 2.0.0-beta.3 Released 2 days ago (beta release) [beta]\n\nWith default target (latest):\n\n```js\n$ ncu --cooldown 5\n```\n\nNo update will be suggested because:\n\n- Latest version (1.3.0) is only 4 days old.\n- Cooldown requires versions to be at least 5 days old\n- Use `--cooldown 4` or lower to allow this update\n\nWith `@beta`/`@tag` target:\n\n```js\n$ ncu --cooldown 3 --target @beta\n```\n\nNo update will be suggested because:\n\n- Current beta (2.0.0-beta.3) is only 2 days old\n- Cooldown requires versions to be at least 3 days old\n- Use `--cooldown 2` or lower to allow this update\n\nWith other targets:\n\n```js\n$ ncu --cooldown 5 --target greatest|newest|minor|patch|semver\n```\n\nEach target will select the best version that is at least 5 days old:\n\n greatest → 1.2.0 (highest version number outside cooldown)\n newest → 2.0.0-beta.1 (most recently published version outside cooldown)\n minor → 1.2.0 (highest minor version outside cooldown)\n patch → 1.1.1 (highest patch version outside cooldown)\n\nNote for latest/tag targets:\n\n> :warning: For packages that update frequently (e.g. daily releases), using a long cooldown period (7+ days) with the default `--target latest` or `--target @tag` may prevent all updates since new versions will be published before older ones meet the cooldown requirement. Please consider this when setting your cooldown period.\n\nYou can also provide a custom function in your .ncurc.js file or when importing npm-check-updates as a module.\n\n> :warning: The predicate function is only available in .ncurc.js or when importing npm-check-updates as a module, not on the command line. To convert a JSON config to a JS config, follow the instructions at https://github.com/raineorshine/npm-check-updates#config-functions.\n\n```js\n/** Set cooldown to 3 days but skip it for `@my-company` packages.\n @param packageName The name of the dependency.\n @returns Cooldown days restriction for given package.\n*/\ncooldown: packageName => (packageName.startsWith('@my-company') ? 0 : 3)\n```\n\n## doctor\n\nUsage:\n\n ncu --doctor -u\n ncu --no-doctor\n ncu -du\n\nIteratively installs upgrades and runs your project's tests to identify breaking upgrades. Reverts broken upgrades and updates package.json with working upgrades.\n\nRequires `-u` to execute (modifies your package file, lock file, and node_modules)\n\nTo be more precise:\n\n1. Runs `npm install` and `npm test` to ensure tests are currently passing.\n2. Runs `ncu -u` to optimistically upgrade all dependencies.\n3. If tests pass, hurray!\n4. If tests fail, restores package file and lock file.\n5. For each dependency, install upgrade and run tests.\n6. Prints broken upgrades with test error.\n7. Saves working upgrades to package.json.\n\nAdditional options:\n\n