Syncpack

What it does

Catalogs

It can migrate repositories to pnpm or bun catalogs and bump outdated versions in catalogs.checked 4 Oct 2026

Catalog support

It can migrate repositories to pnpm or Bun catalogs and update versions in those catalogs.checked 11 Oct 2026

Configuration

Syncpack accepts configuration in JSON, YAML, JavaScript, or TypeScript files, as well as supported package.json properties.checked 4 Oct 2026

Dependency policies

Syncpack can pin dependencies to specific versions, ban dependencies, and define rules for exact or loose semver ranges.checked 11 Oct 2026

Dependency rules

It can pin or ban dependencies and define rules for exact or loose semver ranges.checked 4 Oct 2026

Dependency updates

It can find outdated dependency versions in the npm registry and update package files to use newer versions.checked 11 Oct 2026

Formatting

Its format command sorts package.json fields into a consistent order and alphabetizes nested fields without changing version numbers.checked 11 Oct 2026

Install

The official site recommends installing Syncpack as a project dev dependency with npm install syncpack --save-dev.checked 11 Oct 2026

Installation

The documentation recommends installing Syncpack as a project devDependency so collaborators use the same version.checked 4 Oct 2026

Intended users

The documentation describes it as a tool for JavaScript monorepos and also explains how to use it across projects split among multiple Git repositories.checked 4 Oct 2026

Mismatch checks

It can find and fix dependency version mismatches.checked 4 Oct 2026

Package manager discovery

It can locate project package.json files through npm, Yarn, pnpm, or Lerna workspace configuration, or use configured file patterns.checked 11 Oct 2026

Polyrepo use

The source configuration can target package.json files across multiple cloned repositories, so Syncpack can also be used without a monorepo.checked 11 Oct 2026

Preview changes

The update command supports dry-run mode, which behaves as if it were applying updates but does not write to disk.checked 11 Oct 2026

Product

Syncpack is a command-line tool for keeping dependency versions consistent in large JavaScript monorepos.checked 11 Oct 2026

Purpose

Syncpack is a command-line tool for keeping dependency versions consistent in large JavaScript monorepos.checked 4 Oct 2026

Security feature

Its update command can ignore package versions published more recently than a configured age threshold to reduce supply chain attack risk; the default is 1440 minutes when no project pnpm setting applies.checked 4 Oct 2026

Supply chain setting

Syncpack excludes versions newer than the configured minimumReleaseAge by default to reduce supply chain attack risk.checked 11 Oct 2026

Try it

The documentation says the quickest way to try Syncpack is with npx.checked 4 Oct 2026

Update scope

The update command can target latest, minor, or patch versions and can filter by dependency name and dependency type.checked 11 Oct 2026

Users

The official site lists AWS, Cloudflare, DataDog, Electron, Microsoft, Salesforce, and Vercel among Syncpack users.checked 11 Oct 2026

Version consistency

It finds and fixes dependency version mismatches and can enforce one version policy or separate policies for different groups.checked 11 Oct 2026

Version policies

It can enforce one version policy or apply separate policies to partitions of a repository.checked 4 Oct 2026

Workspace discovery

It can discover package.json files using npm or Yarn workspaces, pnpm workspace configuration, or Lerna; users can also configure source patterns.checked 4 Oct 2026