Bumply

Earlier

• 1.9Aug 25, 2026A background check that finds something wrong sends one notification, at the moment it happens — and if your Mac was asleep, that was the only telling. Not any more.

  Bumply 1.9

  A background check that finds something wrong sends one notification, at the moment it happens — and if your Mac was asleep, that was the only telling. Not any more.

  • What changed while you were away now waits for you at the top of the project

  list. Each notice says what actually changed — settled → vulnerable — rather than repeating what the project card already says.

  • A notice leaves when the problem leaves, or when you dismiss it. Fix an

  advisory from the terminal and the notice retires itself, unread. Nothing disappears just because you looked at it, and every dismissal undoes with ⌘Z.

  • Colour is never the only signal. Each notice names its own severity in

  words, and a project Bumply could not read is no longer painted the same red as a live vulnerability.

• 1.8Aug 24, 2026Three things the project verdict claimed to know and did not.

  Bumply 1.8

  Three things the project verdict claimed to know and did not.

  • The list and the project page agree about deferrals. If you deferred an

  update, the list stops asking about it too. One of them used to say it was handled while the other kept nagging.

  • Project checks are remembered. A project you verified yesterday no longer

  reads as never verified after a relaunch. The result is kept, not the output.

  • Git state appears in the verdict — as a fact, not a failing. Being in the

  middle of your own work is not unfinished dependency maintenance.

  • Bumply tells you when a project gets worse after a background check, and

  stays quiet when it does not.

  • The filter row no longer squeezes the counts out of its own buttons, and the sort

  control has one arrow instead of two.

  New: Bumply now counts how many people use it — a random number generated on your Mac, the version, and which of five actions happened. No project names, no paths, no IP address. Settings → Usage Count turns it off.

• 1.7Aug 24, 2026Everything here came from people who used Bumply on real projects and wrote back.

  Bumply 1.7

  Everything here came from people who used Bumply on real projects and wrote back.

  • Defer an update, with the reason. Bumply stops offering a major you have

  already looked at and decided against, and remembers why. It comes back when a newer major is released — or immediately if a security advisory affects it.

  • A verdict for each project. One line answering the only question dependency

  maintenance asks: can I stop now? It can say no, and it names the one thing in the way. An audit that has not run is reported as unchecked, never as clean.

  • The project list answers where to start, not which project looks worst. On a

  good day it says so: twelve projects, nothing to do.

  • Monorepos. Update history names the packages an update touched instead of

  showing package.json in a repository with a dozen of them.