REST API

curl -s https://api.ripedeps.com/plan -H 'content-type: application/json' -d '{"packageJson":"{\"dependencies\":{\"zod\":\"^3.22.0\"}}","minAgeDays":7,"skipAdoptConfig":true}' | jq -r .diff

jq -n --rawfile pj package.json '{ packageJson: $pj, minAgeDays: 7 }' \
  | curl -s -X POST https://api.ripedeps.com/plan \
      -H 'content-type: application/json' --data-binary @- \
  | jq -r .diff

jq -n --rawfile pj package.json '{ packageJson: $pj, minAgeDays: 7 }' \
  | curl -s -X POST https://api.ripedeps.com/plan \
      -H 'content-type: application/json' --data-binary @- \
  | jq -r .diff \
  | patch -p1

"ripedeps": { "minAgeDays": 7, "maxBump": "minor" }

{
  "packageJson": "{\n  \"dependencies\": { \"zod\": \"^3.22.0\" }\n}\n",
  "minAgeDays": 7,
  "maxBump": "minor"
}

{
  "packageJsonUrl": "https://raw.githubusercontent.com/owner/repo/main/package.json",
  "minAgeDays": 7
}

{ "packageJson": "…", "focus": ["axios"], "minAgeDays": 0, "skipAdoptConfig": true }

jq -n --rawfile pj package.json '{ packageJson: $pj, focus: ["axios"], minAgeDays: 0, skipAdoptConfig: true }' \
  | curl -s -X POST https://api.ripedeps.com/plan -H 'content-type: application/json' --data-binary @- \
  | jq -r .diff

{ "packageJson": "…", "maxBump": "major", "minAgeDays": 14, "skipAdoptConfig": true }

{
  "name": "my-app",
  "version": "1.0.0",
  "dependencies": {
    "axios": "^1.6.0",
    "express": "^4.18.2",
    "lodash": "^4.17.20",
    "zod": "^3.22.0"
  },
  "devDependencies": {
    "@types/node": "^20.10.0",
    "eslint": "^9.10.0",
    "prettier": "^3.1.0",
    "typescript": "^5.3.0"
  },
  "engines": {
    "node": ">=20"
  }
}

{
  "diff": "--- a/package.json\n+++ b/package.json\n…",
  "meta": {
    "components": 3,
    "exact": true,
    "input": {
      "bytes": 119,
      "source": "inline"
    },
    "settings": {
      "maxBump": {
        "source": "request",
        "value": "minor"
      },
      "minAgeDays": {
        "source": "request",
        "value": 7
      }
    },
    "stale": false
  },
  "notes": [],
  "packages": [
    {
      "bestVersion": "15.5.28",
      "explanation": "`next` 15.0.0 -> 15.5.28 (minor step, 9 days old, age gate 7); newest version that qualifies; not taken: `next@16.4.3` is a major step from 15.0.0, above the allowed minor level",
      "name": "next",
      "newRange": "^15.5.28",
      "newVersion": "15.5.28",
      "oldRange": "^15.0.0",
      "oldVersion": "15.0.0",
      "publishedAt": "2026-10-14T17:36:08.917Z",
      "reasons": [
        {
          "kind": "level-limit",
          "message": "`next@16.4.3` is a major step from 15.0.0, above the allowed minor level",
          "version": "16.4.3"
        }
      ],
      "section": "dependencies",
      "status": "upgrade",
      "step": "minor"
    },
    {
      "bestVersion": "18.3.1",
      "explanation": "`react` held at 18.3.1; not taken: `react@19.3.1` is a major step from 18.3.1, above the allowed minor level",
      "name": "react",
      "newRange": "^18.3.1",
      "newVersion": "18.3.1",
      "oldRange": "^18.3.1",
      "oldVersion": "18.3.1",
      "publishedAt": "2024-04-26T16:42:26.496Z",
      "reasons": [
        {
          "kind": "level-limit",
          "message": "`react@19.3.1` is a major step from 18.3.1, above the allowed minor level",
          "version": "19.3.1"
        }
      ],
      "section": "dependencies",
      "status": "held",
      "step": "none"
    }
  ],
  "updatedPackageJson": "{\n  \"name\": \"web\",\n  \"dependencies\": {\n    \"next\": \"^15.5.28\",\n    \"react\": \"^18.3.1\",\n    \"react-dom\": \"^18.3.1\"\n  }\n}\n",
  "warnings": []
}

[
  "The `ripedeps` entry was added (minAgeDays 7, maxBump minor) so later runs use the same limits"
]

{
  "bestVersion": "15.5.28",
  "explanation": "`next` 15.0.0 -> 15.5.28 (minor step, 9 days old, age gate 7); newest version that qualifies; not taken: `next@16.4.3` is a major step from 15.0.0, above the allowed minor level",
  "name": "next",
  "newRange": "^15.5.28",
  "newVersion": "15.5.28",
  "oldRange": "^15.0.0",
  "oldVersion": "15.0.0",
  "publishedAt": "2026-10-14T17:36:08.917Z",
  "reasons": [
    {
      "kind": "level-limit",
      "message": "`next@16.4.3` is a major step from 15.0.0, above the allowed minor level",
      "version": "16.4.3"
    }
  ],
  "section": "dependencies",
  "status": "upgrade",
  "step": "minor"
}

{
  "bestVersion": "1.20.0",
  "explanation": "`axios` is outside the focus, left at 1.6.0",
  "name": "axios",
  "newRange": "^1.6.0",
  "newVersion": "1.6.0",
  "oldRange": "^1.6.0",
  "oldVersion": "1.6.0",
  "publishedAt": "2023-10-26T21:15:55.685Z",
  "reasons": [],
  "section": "dependencies",
  "status": "outside-focus",
  "step": "none"
}

{
  "error": {
    "code": "no_processable_dependency",
    "message": "package.json has no dependency that can be processed"
  }
}

{
  "packageJsonProcessed": 1204,
  "packageJsonImproved": 981,
  "packagesStored": 3512,
  "versionsStored": 561230,
  "asOf": "2026-10-24T12:17:02.388Z"
}

import { readFile } from 'node:fs/promises';

const res = await fetch('https://api.ripedeps.com/plan', {
  method: 'POST',
  headers: { 'content-type': 'application/json' },
  body: JSON.stringify({ packageJson: await readFile('package.json', 'utf8'), minAgeDays: 7 }),
  signal: AbortSignal.timeout(120_000)
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);

for (const p of body.packages)
  if (p.status === 'upgrade') console.log(p.name, p.oldRange, '->', p.newRange, '|', p.explanation);
// body.updatedPackageJson is yours to write, or not.

import requests

r = requests.post(
    "https://api.ripedeps.com/plan",
    json={"packageJson": open("package.json").read(), "minAgeDays": 7},
    timeout=120,
)
r.raise_for_status()
print(r.json()["diff"])

bash ripedeps.sh --json --min-age 7 package.json \
  | jq -r '.packages[] | select(.status == "upgrade") | "\(.name)\t\(.oldRange) -> \(.newRange)"'

bash ripedeps.sh --json --min-age 7 --skip-adoptconfig package.json \
  | jq -e '[.packages[] | select(.status == "upgrade")] | length == 0'

name: ripedeps
on:
  schedule: [{ cron: '0 6 * * 1' }]
  workflow_dispatch:
permissions:
  contents: write
  pull-requests: write
jobs:
  upgrade:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - name: Plan and apply
        run: |
          curl -fsSLO https://ripedeps.com/ripedeps.sh
          bash ripedeps.sh --min-age 7 package.json | patch -p1
          git diff --quiet && exit 0
          git switch -c ripedeps/weekly
          git -c user.name=ci -c user.email=ci@example.com commit -am 'chore: ripedeps upgrades'
          git push -u origin HEAD
          gh pr create --fill
        env:
          GH_TOKEN: ${{ github.token }}