A Mac app for keeping npm, pnpm, Yarn, and Bun projects current. Bumply shows you every command before it runs, backs up your manifest and lockfile byte-for-byte, and rolls back the moment anything fails.
Hey Product Hunt š
I'm Elias, and I built Bumply because updating dependencies is the one routine job I never fully trusted myself to do.
You know the loop. `npm outdated` in one terminal, the changelog in a tab, the lockfile in another. You run the update, something breaks, and now you're reconstructing what the lockfile looked like twenty minutes ago. Multiply that by however many projects you have on disk.
Bumply is a native Mac app that does that loop for you, and ā more importantly ā makes every step of it reversible.
WHAT IT DOES
⢠Every project in one window. npm, pnpm, Yarn and Bun, side by side. Monorepos
count as one project, workspace root and packages together.
⢠Updates you can undo. The exact command is shown before it runs. Your manifest
and lockfile are copied first and restored byte-for-byte if anything fails. It
refuses to start on a dirty repository and names the file that's in the way ā
and it never writes to your git history.
⢠Dependency health, with the evidence. What's installed, what your manifest
asks for, what the registry actually offers ā each labelled with where it came
from. Every update says whether it stays inside your range or crosses a major.
⢠Audits that never execute code. Advisories come from your package manager's
own audit data, read-only: package-lock-only and ignore-scripts. Nothing is
installed and no package script runs while Bumply looks.
⢠The gigabytes you forgot about. node_modules, .next, .turbo, Pods ā what each
one costs, per project. Anything it removes goes to the Trash, not to /dev/null.
WHAT IT ISN'T
It's not a bot and it doesn't open PRs. It doesn't run in CI. It's a thing you
open on your Mac when you're about to touch dependencies and want to see what
you're doing first.
It works offline. It talks to our server exactly once, when you activate, and
never again about your licence. Your package manager still reaches its registry
from your machine, the same as in a terminal ā those requests go to the registry,
not to us.
macOS 13 and later: https://bumply.app
I'd genuinely like to know what breaks. If Bumply gets something wrong about your
project ā a manager it misreads, a workspace layout it doesn't recognise ā tell me
here or use Report a bug in the app. That's the feedback I'm after today.
Bumply