Syncpack

Spec sheet

Purpose

Syncpack is a command-line tool for keeping dependency versions consistent in large JavaScript monorepos.Read 4 Oct 2026 · syncpack.dev

Product

Syncpack is a command-line tool for keeping dependency versions consistent in large JavaScript monorepos.Read 11 Oct 2026 · syncpack.dev

Intended users

The documentation describes it as a tool for JavaScript monorepos and also explains how to use it across projects split among multiple Git repositories.Read 4 Oct 2026 · syncpack.dev

Catalog support

It can migrate repositories to pnpm or Bun catalogs and update versions in those catalogs.Read 11 Oct 2026 · syncpack.dev

Catalogs

It can migrate repositories to pnpm or bun catalogs and bump outdated versions in catalogs.Read 4 Oct 2026 · syncpack.dev

Configuration

Syncpack accepts configuration in JSON, YAML, JavaScript, or TypeScript files, as well as supported package.json properties.Read 4 Oct 2026 · syncpack.dev

Dependency policies

Syncpack can pin dependencies to specific versions, ban dependencies, and define rules for exact or loose semver ranges.Read 11 Oct 2026 · syncpack.dev

Dependency rules

It can pin or ban dependencies and define rules for exact or loose semver ranges.Read 4 Oct 2026 · syncpack.dev

Dependency updates

It can find outdated dependency versions in the npm registry and update package files to use newer versions.Read 11 Oct 2026 · syncpack.dev

Formatting

Its format command sorts package.json fields into a consistent order and alphabetizes nested fields without changing version numbers.Read 11 Oct 2026 · syncpack.dev

Install

The official site recommends installing Syncpack as a project dev dependency with npm install syncpack --save-dev.Read 11 Oct 2026 · syncpack.dev

Installation

The documentation recommends installing Syncpack as a project devDependency so collaborators use the same version.Read 4 Oct 2026 · syncpack.dev

Mismatch checks

It can find and fix dependency version mismatches.Read 4 Oct 2026 · syncpack.dev

Package manager discovery

It can locate project package.json files through npm, Yarn, pnpm, or Lerna workspace configuration, or use configured file patterns.Read 11 Oct 2026 · syncpack.dev

Polyrepo use

The source configuration can target package.json files across multiple cloned repositories, so Syncpack can also be used without a monorepo.Read 11 Oct 2026 · syncpack.dev

Preview changes

The update command supports dry-run mode, which behaves as if it were applying updates but does not write to disk.Read 11 Oct 2026 · syncpack.dev

Security feature

Its update command can ignore package versions published more recently than a configured age threshold to reduce supply chain attack risk; the default is 1440 minutes when no project pnpm setting applies.Read 4 Oct 2026 · syncpack.dev

Supply chain setting

Syncpack excludes versions newer than the configured minimumReleaseAge by default to reduce supply chain attack risk.Read 11 Oct 2026 · syncpack.dev

Try it

The documentation says the quickest way to try Syncpack is with npx.Read 4 Oct 2026 · syncpack.dev

Update scope

The update command can target latest, minor, or patch versions and can filter by dependency name and dependency type.Read 11 Oct 2026 · syncpack.dev

Users

The official site lists AWS, Cloudflare, DataDog, Electron, Microsoft, Salesforce, and Vercel among Syncpack users.Read 11 Oct 2026 · syncpack.dev

Version consistency

It finds and fixes dependency version mismatches and can enforce one version policy or separate policies for different groups.Read 11 Oct 2026 · syncpack.dev

Version policies

It can enforce one version policy or apply separate policies to partitions of a repository.Read 4 Oct 2026 · syncpack.dev

Workspace discovery

It can discover package.json files using npm or Yarn workspaces, pnpm workspace configuration, or Lerna; users can also configure source patterns.Read 4 Oct 2026 · syncpack.dev

Where Specifiction places it

• Monorepo Management Tools#31 of 337.1