fleet-wide scanone walk across your projects: standalone repos, monorepo workspaces, OSS clones, throwaway scripts. reads pnpm, npm, yarn, and bun lockfiles for the truth, falls back to the manifest range when there isn’t one.
A Mac app and a terminal-native TUI that walk every project on your machine and report on all of them at once: version drift, security advisories, packages nobody has published in years. Both run the same scan. Use whichever fits.
fleet-wide scanone walk across your projects: standalone repos, monorepo workspaces, OSS clones, throwaway scripts. reads pnpm, npm, yarn, and bun lockfiles for the truth, falls back to the manifest range when there isn’t one.
package spreadevery project pinning typescript, react, or next, lined up version by version. the one repo three majors behind sits directly under the twelve that aren’t.
live security advisoriesOSV.dev pulled per-package and normalised to GHSA severity buckets. high and critical sort to the top, ahead of everything that is merely out of date.
reviewed upgradesjump to latest, or stair-step to the next major’s latest patch, package by package. the full plan renders before any command runs. nothing touches disk until you say so.
Installs the Mac app and puts monogrove on your PATH for the TUI. Tracks the appcast, so brew upgrade picks up releases as they ship.
$ brew tap howells/tap $ brew install --cask monogrove
Mac app only. Signed, notarised, stapled. Universal binary. Drag to Applications and launch.
latest release on github