A Mac app for keeping npm, pnpm, Yarn, and Bun projects current. Bumply shows you every command before it runs, backs up your manifest and lockfile byte-for-byte, and rolls back the moment anything fails.
I'm Elias, and I built Bumply because updating dependencies is the one routine job I never fully trusted myself to do.
You know the loop. `npm outdated` in one terminal, the changelog in a tab, the lockfile in another. You run the update, something breaks, and now you're reconstructing what the lockfile looked like twenty minutes ago. Multiply that by however many projects you have on disk.
Bumply is a native Mac app that does that loop for you, and — more importantly — makes every step of it reversible.
What it does
Every project in one window. npm, pnpm, Yarn and Bun, side by side. Monorepos count as one project, workspace root and packages together.
Updates you can undo. The exact command is shown before it runs. It refuses to start on a dirty repository and names the file that's in the way — and it never writes to your git history.
Update History, per project. Every update keeps the previous package.json and lockfile. Open the history on any project to see what changed and when, reveal the backup in Finder, or put those two files back — not just when something fails, but days later, because you changed your mind.
Blocked updates get past themselves. When npm refuses because another dependency is holding the update back, Bumply names it, shows you the command, offers to move it, and re-checks on its own.
Dependency health, with the evidence. What's installed, what your manifest asks for, what the registry actually offers — each labelled with where it came from. Every update says whether it stays inside your range or crosses a major.
Audits that never execute code. Advisories come from your package manager's own audit data, read-only: package-lock-only and ignore-scripts. Nothing is installed and no package script runs while Bumply looks.
It watches while you work. A menu bar item, a check every six hours, and — if you turn it on — a notification when a new high or critical advisory lands on something you actually depend on.
The gigabytes you forgot about. node_modules, .next, .turbo, Pods — what each one costs, per project.
Anything it removes goes to the Trash, not to /dev/null.
What it isn't
It's not a bot and it doesn't open PRs. It doesn't run in CI. It's a thing you open on your Mac when you're about to touch dependencies and want to see what you're doing first.
It works offline. It talks to our server exactly once, when you activate, and never again about your licence. Your package manager still reaches its registry from your machine, the same as in a terminal — those requests go to the registry, not to us.
Pricing
Bumply is free for three projects, with no time limit. Not a trial that expires — it doesn't stop working, nothing is deleted, and there's no wall to walk into. If three is all you have, that's the whole app, free, for as long as you want it.
The first seven days cover every project you have, so you can judge it on all of your work rather than three of it.
Beyond three projects it's $24.99, once. No subscription, no account, no login. The licence is perpetual — it doesn't expire, and nothing stops working if you never pay again. Twelve months of updates from the day you buy; after that you stay on the last version in your window, and renewing is optional. Three Macs at a time, and freeing one is a click. Thirty days to change your mind, no reason required.
I'd genuinely like to know what breaks. If Bumply gets something wrong about your project — a manager it misreads, a workspace layout it doesn't recognise — tell me here or use Report a bug in the app. That's the feedback I'm after today.
About Bumply on Product Hunt
“Update your dependencies and undo anything”
Bumply launched on Product Hunt on August 24th, 2026 and earned 106 upvotes and 3 comments, placing #9 on the daily leaderboard. A Mac app for keeping npm, pnpm, Yarn, and Bun projects current. Bumply shows you every command before it runs, backs up your manifest and lockfile byte-for-byte, and rolls back the moment anything fails.
On the analytics side, Bumply competes within Developer Tools — topics that collectively have 518k followers on Product Hunt. The dashboard above tracks how Bumply performed against the three products that launched closest to it on the same day.
Who hunted Bumply?
Bumply was hunted by Elias Ripari. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Elias Ripari
Hey Product Hunt 👋
I'm Elias, and I built Bumply because updating dependencies is the one routine job I never fully trusted myself to do.
You know the loop. `npm outdated` in one terminal, the changelog in a tab, the lockfile in another. You run the update, something breaks, and now you're reconstructing what the lockfile looked like twenty minutes ago. Multiply that by however many projects you have on disk.
Bumply is a native Mac app that does that loop for you, and — more importantly — makes every step of it reversible.
What it does
Every project in one window. npm, pnpm, Yarn and Bun, side by side. Monorepos count as one project, workspace root and packages together.
Updates you can undo. The exact command is shown before it runs. It refuses to start on a dirty repository and names the file that's in the way — and it never writes to your git history.
Update History, per project. Every update keeps the previous package.json and lockfile. Open the history on any project to see what changed and when, reveal the backup in Finder, or put those two files back — not just when something fails, but days later, because you changed your mind.
Blocked updates get past themselves. When npm refuses because another dependency is holding the update back, Bumply names it, shows you the command, offers to move it, and re-checks on its own.
Dependency health, with the evidence. What's installed, what your manifest asks for, what the registry actually offers — each labelled with where it came from. Every update says whether it stays inside your range or crosses a major.
Audits that never execute code. Advisories come from your package manager's own audit data, read-only: package-lock-only and ignore-scripts. Nothing is installed and no package script runs while Bumply looks.
It watches while you work. A menu bar item, a check every six hours, and — if you turn it on — a notification when a new high or critical advisory lands on something you actually depend on.
The gigabytes you forgot about. node_modules, .next, .turbo, Pods — what each one costs, per project.
Anything it removes goes to the Trash, not to /dev/null.
What it isn't
It's not a bot and it doesn't open PRs. It doesn't run in CI. It's a thing you open on your Mac when you're about to touch dependencies and want to see what you're doing first.
It works offline. It talks to our server exactly once, when you activate, and never again about your licence. Your package manager still reaches its registry from your machine, the same as in a terminal — those requests go to the registry, not to us.
Pricing
Bumply is free for three projects, with no time limit. Not a trial that expires — it doesn't stop working, nothing is deleted, and there's no wall to walk into. If three is all you have, that's the whole app, free, for as long as you want it.
The first seven days cover every project you have, so you can judge it on all of your work rather than three of it.
Beyond three projects it's $24.99, once. No subscription, no account, no login. The licence is perpetual — it doesn't expire, and nothing stops working if you never pay again. Twelve months of updates from the day you buy; after that you stay on the last version in your window, and renewing is optional. Three Macs at a time, and freeing one is a click. Thirty days to change your mind, no reason required.
Bumply 1.4, macOS 13 and later — https://bumply.app
I'd genuinely like to know what breaks. If Bumply gets something wrong about your project — a manager it misreads, a workspace layout it doesn't recognise — tell me here or use Report a bug in the app. That's the feedback I'm after today.