Workspace scanner
Detects every package.json across all workspace folders (root and workspaces monorepo members) plus .npmrc files, always skipping node_modules.
VS Code extension
A Visual Studio-style npm experience for VS Code. Scan your workspace, browse packages, and install into one or many workspace packages — all from a fast, dark, blue-accented dashboard.
What it does
npm LL detects every package in your workspace and gives you a Visual Studio-grade view of what's installed, what's outdated, and what needs attention.
Detects every package.json across all workspace folders (root and workspaces monorepo members) plus .npmrc files, always skipping node_modules.
HTTP API search against registry.npmjs.org or your configured registry, with an npm search fallback.
Add, update, or remove a package in one or many workspace packages at once, with latest, prerelease, or pinned versions.
Patch, minor, and major classification powered by npm outdated --json, with batch updates streamed per package.
Surface vulnerable and deprecated dependencies via npm audit and registry deprecation metadata, with advisory links and a copyable report.
Surfaces dependencies, devDependencies, peerDependencies, and optionalDependencies per package and respects them on install.
Workflow
Open a folder with a package.json and npm LL maps every workspace package, dependency, and registry.
Find packages on the npm registry, inspect versions, licenses, dependencies, and deprecation info in Library Lens.
Pick a dependency type, a version, and target packages, then install or update in a single confirmed action.
Watch the Outdated and Vulnerable views, batch-update, and run an install when you're done.
Privacy first
npm LL has no backend. It talks to the npm registries you configure and runs the npm CLI locally.
Search and metadata requests go straight from VS Code to registry.npmjs.org or your configured registry. npm LL does not proxy or store them.
Install, update, and health checks run npm commands on your machine against your packages, via spawn with argument arrays — never through a shell.
The workspaces-root package.json is only modified after you confirm the change.
There is no analytics pipeline. npm LL does not collect your package contents, package names, or usage history, and never reads or stores .npmrc auth tokens.
Install
Install the extension, open a workspace with a package.json, and click the npm LL icon in the activity bar to see your workspace packages, dependencies, and the full dashboard.
Also works in Cursor and Windsurf.