Dev tools · alternatives · 2026
24 alternatives to Bumply
Update your dependencies and undo anything
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
- 2IH
2021 · pakkly.com · its alternatives →
- 3
EasyNPM▲108Search & install command with one-click for npm packages
2023 · easynpm.netlify.app · its alternatives →
- 4
Hey HN, we are building bumpgen (https://github.com/xeol-io/bumpgen/) to remove the toil of fixing breaking changes during version bumps. bumpgen bumps your npm package version then generates the fixes to potential breaking changes. There were some interesting challenges we encountered using an LLM to fix breaking changes: [1] Finding the breaking changes → know how is a dependency used through the codebase [2] Knowing how to fix the a breaking change → know how the dependency has changed from one version to another [3] Understanding how the fix has modified existing…
2024 · github.com · its alternatives →
- 5
- 6
Vibe Backup▲111I built an app to stop that mini heart attack you get when you realize you’ve lost code. It's called Vibe Backup, and it's made just for us. It automatically saves versions of your Vibe Coding projects in the background. Think of it as a simple time machine for your code. It works great with Git—saving a snapshot after each commit—and has a hotkey for those "hold my beer" moments before a big refactor. Restoring is just a click. Key features: Trigger backups instantly with KEYBOARD SHORTCUTS — without leaving your IDE. Set it and FORGET IT — Schedule backups on a flexible timer or…
2025 · vibebackup.com · its alternatives →
- 7
Refuse▲84Block vulnerable package installs for you and your AI
Jun 2026 · refuse.dev · its alternatives →
- 8
Apparency 3.0▲169Quick look if an OS X Installer package is safe
2025 · mothersruin.com · its alternatives →
- 9AI
2016 · npmjs.com · its alternatives →
- 10
BackYourStack▲111A simple way to support your open source dependencies.
2018 · backyourstack.com · its alternatives →
- 11
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com · its alternatives →
- 12
This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…
Nov 2025 · github.com · its alternatives →
- 13
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 14
- 15
bunpm▲4npm, yarn, pnpm - same commands, powered by Bun underneath
Jul 2026 · github.com · its alternatives →
- 16
Meet bumpy - your new favourite open-source versioning, release, and changelog tool. Especially useful in monorepos with many related packages, but also great to use in simpler setups. This is a modern successor to the popular changesets tool, used by many open source projects. While changesets is great, and I love the file-based bump+changelog workflow, the project has hundreds of open issues, many of which have been open for multiple years. Bumpy fixes most of the important ones (over 120+ by my last count), and adds some new features as well. It also greatly simplifies things, so it…
Apr 2026 · github.com · its alternatives →
- 17
MacOS Dependency Manager and Installer
2024 · apps.apple.com · its alternatives →
- 18
In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…
May 2026 · npmjs.com · its alternatives →
- 19
- 20
TidyDisk▲5See what is eating your dev disk. Reclaim it in one click.
Jul 2026 · tidydisk.app · its alternatives →
- 21
2018 · backyourstack.com · its alternatives →
- 22
Block bad npm and pip packages. Before they download.
May 2026 · veln.sh · its alternatives →
- 23
- 24
Free macOS menu bar app that finds every package manager on your Mac — Homebrew, npm, pip, Cargo and 15 more — and updates what is outdated in one click.
24d ago · macup.patriciobcs.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →