Hey Product Hunt 👋

I'm Elias, and I built Bumply because updating dependencies is the one routine job I never fully trusted myself to do.

You know the loop. `npm outdated` in one terminal, the changelog in a tab, the lockfile in another. You run the update, something breaks, and now you're reconstructing what the lockfile looked like twenty minutes ago. Multiply that by however many projects you have on disk.

Bumply is a native Mac app that does that loop for you, and — more importantly — makes every step of it reversible.

What it does

Every project in one window. npm, pnpm, Yarn and Bun, side by side. Monorepos count as one project, workspace root and packages together.
Updates you can undo. The exact command is shown before it runs. It refuses to start on a dirty repository and names the file that's in the way — and it never writes to your git history.
Update History, per project. Every update keeps the previous package.json and lockfile. Open the history on any project to see what changed and when, reveal the backup in Finder, or put those two files back — not just when something fails, but days later, because you changed your mind.
Blocked updates get past themselves. When npm refuses because another dependency is holding the update back, Bumply names it, shows you the command, offers to move it, and re-checks on its own.
Dependency health, with the evidence. What's installed, what your manifest asks for, what the registry actually offers — each labelled with where it came from. Every update says whether it stays inside your range or crosses a major.
Audits that never execute code. Advisories come from your package manager's own audit data, read-only: package-lock-only and ignore-scripts. Nothing is installed and no package script runs while Bumply looks.
It watches while you work. A menu bar item, a check every six hours, and — if you turn it on — a notification when a new high or critical advisory lands on something you actually depend on.
The gigabytes you forgot about. node_modules, .next, .turbo, Pods — what each one costs, per project.
Anything it removes goes to the Trash, not to /dev/null.

What it isn't

It's not a bot and it doesn't open PRs. It doesn't run in CI. It's a thing you open on your Mac when you're about to touch dependencies and want to see what you're doing first.

It works offline. It talks to our server exactly once, when you activate, and never again about your licence. Your package manager still reaches its registry from your machine, the same as in a terminal — those requests go to the registry, not to us.

Pricing

Bumply is free for three projects, with no time limit. Not a trial that expires — it doesn't stop working, nothing is deleted, and there's no wall to walk into. If three is all you have, that's the whole app, free, for as long as you want it.

The first seven days cover every project you have, so you can judge it on all of your work rather than three of it.

Beyond three projects it's $24.99, once. No subscription, no account, no login. The licence is perpetual — it doesn't expire, and nothing stops working if you never pay again. Twelve months of updates from the day you buy; after that you stay on the last version in your window, and renewing is optional. Three Macs at a time, and freeing one is a click. Thirty days to change your mind, no reason required.

Bumply 1.4, macOS 13 and later — https://bumply.app

I'd genuinely like to know what breaks. If Bumply gets something wrong about your project — a manager it misreads, a workspace layout it doesn't recognise — tell me here or use Report a bug in the app. That's the feedback I'm after today.