Site | NPM Module | GitHub Repo
Node Power User is the CLI that NPM should have had!
First, install the package via npm:
npm i -g node-power-user- Clean and reinstall your node project
- Easily bump your NPM project's version without opening an editor
After installing via NPM, you can use the CLI with the npu command.
Bump your project's version by the specified level.
npu bump <level>npu bump patch: Bump the last numbernpu bump minor: Bump the middle numbernpu bump major: Bump the first number
Clean your node project (runs rm -fr node_modules && rm -fr package-lock.json && npm cache clean --force && npm install && npm rb).
npu cleanList all global packages for all versions of Node.js on your machine (you must have NVM installed).
npu globalInstall packages with supply chain protection via Socket. Every install is wrapped with Socket to detect malicious or compromised packages β including transitive dependencies β before they're added to your project. After install, a full socket npm audit runs against your entire dependency tree.
npu install
npu i <package>
npu i <package> --save-dev
npu i <package> --save-exactIf Socket CLI is not installed, npu install will refuse to run. Install it globally to enable protection:
npm install -g @socketsecurity/cli --save-exactUse --force to bypass Socket protection (not recommended):
npu i <package> --forceRun a Socket supply chain audit on your current dependency tree.
npu auditCompare the versions of installed modules to those in your package.json. When you choose to update, the install step and a full post-install audit are both wrapped with Socket for supply chain protection.
npu outdated
npu out --heal # skip the menu: reinstall copies that don't match package-lock.json
npu out --sync # skip the menu: install packages to match package.json
npu out -r # skip the menu: reconcile package.json to installed versions
npu out -P | -m | -M # skip the menu: apply patch / minor / major updates
npu out --force # bypass Socket protectionEvery run starts with an integrity check: npu compares what node_modules/.package-lock.json claims is installed against the packages physically on disk β including transitive deps the table can't show. Desynced copies (stale or partially-extracted installs, typically left behind by an interrupted or Socket-blocked install) make npm silently no-op (npm install trusts the lockfile over the disk), so npu warns about them and offers to heal.
When problems are found, the menu offers context-aware actions:
- Heal β when disk copies don't match
package-lock.json, removes them and reinstalls so reality matches the lockfile again. - Sync β when
node_modulesis behindpackage.json, installs packages to match whatpackage.jsondeclares. - Reconcile β when
node_modulesis ahead ofpackage.json, updatespackage.jsonto match installed versions. Strictly ahead-only β it never downgradespackage.jsonto match a stale install.
Installs remove the targeted node_modules copies first so npm actually re-fetches them (instead of trusting a stale lockfile and reporting "up to date"), then npu verifies the new versions physically landed in node_modules. If an install fails or Socket blocks it, both package.json and package-lock.json are restored β npu never leaves the lockfile advanced past the files on disk.
List all packages in your project.
npu packagesPull the latest changes from the remote repository and push your changes. You can optionally supply a --message="Your commit message here" flag.
npu syncOpen the current repository's remote URL in your default browser.
npu openCheck the version of node-power-user.
npu -vWait for a specified number of ms.
npu wait <ms>-C <dir>,--cwd <dir>: Run as if invoked from<dir>(e.g.npu -C /path/to/project out)--debug: Log the commands and flags before they are executed
To test commands locally while developing:
npm start -- <command> [options]For example:
npm start -- outdated
npm start -- bump patch
npm start -- -vIf you are still having difficulty, we would love for you to post a question to the Node Power User issues page. It is much easier to answer questions that include your code and relevant files! So if you can provide them, we'd be extremely grateful (and more likely to help you find the answer!)
Somiibo: A Social Media Bot with an open-source module library.
JekyllUp: A website devoted to sharing the best Jekyll themes.
Slapform: A backend processor for your HTML forms on static sites.
Proxifly: A backend processor for your HTML forms on static sites.
Optiic: A backend processor for your HTML forms on static sites.
SoundGrail Music App: A resource for producers, musicians, and DJs.
Hammock Report: An API for exploring and listing backyard products.
Ask us to have your project listed! :)