fleet-wide scanone walk across your projects — standalone repos, monorepo workspaces, OSS clones, throwaway scripts. reads pnpm, npm, yarn, and bun lockfiles for the truth, falls back to the manifest range when there isn't one.
A Mac app and a terminal-native TUI that walk every project on your machine and report the dependency situation across all of them at once — drift, advisories, abandonment. One window, or one terminal pane. Same data, same scan, your choice.
fleet-wide scanone walk across your projects — standalone repos, monorepo workspaces, OSS clones, throwaway scripts. reads pnpm, npm, yarn, and bun lockfiles for the truth, falls back to the manifest range when there isn't one.
package spreadevery project pinning typescript, react, or next, lined up version by version. the lone outlier sits next to the chorus, so drift is impossible to miss.
live security advisoriesOSV.dev pulled per-package and normalized to GHSA severity buckets. high and critical escalate to the top of the list so dangerous gets handled before merely outdated.
reviewed upgradesjump to latest, or stair-step to the next major's latest patch — your call per package. the full plan renders before any command runs, so nothing changes on disk until you say so.
Installs the Mac app and puts monogrove on your PATH for the TUI. Tracks the appcast — brew upgrade picks up releases as they ship.
$ brew tap howells/tap $ brew install --cask monogrove
Mac app only. Signed, notarized, stapled. Universal binary. Drag to Applications and launch.
latest release on github