diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index c9ec8d6b6047900b0820a7ab181277f15cb9a24c..22837612b7d3be707faabf236f759d1d37fff230 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -4,6 +4,7 @@ include:
 stages:
   - build
   - test
+  - npm
 
 backend:
   stage: build
@@ -17,7 +18,6 @@ backend:
   only:
     changes:
       - backend/**/*
-      - .gitlab-ci.yml
 
 frontend:
   stage: build
@@ -51,3 +51,44 @@ backend-unittests:
     changes:
       - login_provider/**/*
       - .gitlab-ci.yml
+
+audit:
+  stage: npm
+  image: node:13-alpine
+  script:
+    - cd frontend
+    - npm install
+    - npm audit --audit-level=low
+  allow_failure: true
+
+upgrade:
+  stage: npm
+  #extends: frontend-e2etest
+  image: node:13-alpine
+  before_script:
+    - cd frontend
+    - apk add git
+    - npm install -g npm-check-updates
+    - ncu -u
+    - npm install
+  script:
+    # remove when this is an extension of frontend-e2e
+    - git diff
+  allow_failure: true
+
+apply:
+  stage: npm
+  image: node:13-alpine
+  script:
+    - cd frontend
+    - apk add git
+    - BRANCH_NAME=npm-update-$(date +%s)
+    - npm install -g npm-check-updates
+    - ncu -u
+    - git config user.name "$GIT_USERNAME"
+    - git config user.email "$GIT_EMAIL"
+    - git remote set-url origin https://$GIT_USERNAME:$GIT_ACCESS_TOKEN@open.greenhost.net/openappstack/user-panel
+    - git checkout -b $BRANCH_NAME
+    - git commit -a -m "build(npm) update packages"
+    - git push origin $BRANCH_NAME -o merge_request.create -o merge_request.target=master
+  when: manual
diff --git a/frontend/package.json b/frontend/package.json
index 36edcffab28af8e6515fb5034f49a6adf15c396c..0012b6f94f36aadb2f8831092b045ed45fea4254 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -15,17 +15,17 @@
   "homepage": "https://open.greenhost.net/openappstack/user-panel",
   "license": "SEE LICENSE IN LICENSE.txt",
   "dependencies": {
-    "@nuxtjs/auth": "^4.8.4",
-    "@nuxtjs/axios": "^5.6.0",
-    "bootstrap-vue": "^2.0.3",
-    "cookie-parser": "^1.4.4",
+    "@nuxtjs/auth": "^4.9.0",
+    "@nuxtjs/axios": "^5.9.7",
+    "bootstrap-vue": "^2.10.0",
+    "cookie-parser": "^1.4.5",
     "lokka": "^1.7.0",
     "lokka-transport-http": "^1.6.1",
-    "nuxt": "^2.10.2",
-    "openid-client": "^3.7.3"
+    "nuxt": "^2.12.2",
+    "openid-client": "^3.14.1"
   },
   "devDependencies": {
-    "chromedriver": "^77.0.0",
-    "nightwatch": "^1.2.4"
+    "chromedriver": "^80.0.1",
+    "nightwatch": "^1.3.4"
   }
 }