Feature request: detect dependencies with no recent releases

[sandrooco]

• I have searched for similar issues

I regularly use ncu to modernize older codebases that did not have Renovate set up, and it works great. Thanks for the awesome tool!

One small gap I have noticed: while ncu does a great job updating packages to their latest versions, it does not highlight packages that are already up to date but have not received any updates for several years. For me, long-term inactivity is often a signal to look for alternative packages.

I could imagine a flag for ncu that also lists packages which:

• are currently on the latest version, and
• have not had any releases within a configurable time span (for example, 1+ years)

This would make it easier to identify potentially unmaintained dependencies when reviewing older projects.

Would this be something that fits the scope of this project?
If yes, could you point me to the part of the codebase that would be most relevant if I tried to add such a feature?

[raineorshine]

Hi, thanks for the suggestion.

I think it's a great idea, but probably out of scope for npm-check-updates. We are laser focused on upgrading dependencies to newer versions.