diff --git a/pkgs/by-name/va/valdi/package.nix b/pkgs/by-name/va/valdi/package.nix
index d36d6d38e127..b240499cea1a 100644
--- a/pkgs/by-name/va/valdi/package.nix
+++ b/pkgs/by-name/va/valdi/package.nix
@@ -15,6 +15,8 @@ buildNpmPackage rec {
     hash = "sha256-B0j4R07M9/nTf0RxnKEfv84B5Xh41cWLz9VgV9O4+VA=";
   };
 
+  passthru.updateScript = ./update.sh;
+
   sourceRoot = "${src.name}/npm_modules/cli";
 
   npmDepsHash = "sha256-LGgyMdhDQ4UwdtENZT/89yiQawn8SxKdth/p7evDAgk=";
diff --git a/pkgs/by-name/va/valdi/update.sh b/pkgs/by-name/va/valdi/update.sh
new file mode 100755
index 000000000000..0f48b3a7f47b
--- /dev/null
+++ b/pkgs/by-name/va/valdi/update.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env nix-shell
+#! nix-shell -i bash -p curl jq common-updater-scripts prefetch-npm-deps
+
+set -eu -o pipefail
+
+owner=snapchat
+repo=valdi
+path=npm_modules/cli
+pkg_file=./pkgs/by-name/va/valdi/package.nix
+
+api_url_latest="https://api.github.com/repos/$owner/$repo/commits?path=$path&per_page=1"
+json_latest=$(curl -sSfL -H "Accept: application/vnd.github+json" ${GITHUB_TOKEN:+-u ":$GITHUB_TOKEN"} "$api_url_latest")
+latest_rev=$(printf '%s' "$json_latest" | jq -r '.[0].sha')
+
+version=$(curl -sSfL "https://raw.githubusercontent.com/$owner/$repo/$latest_rev/$path/package.json" | jq -r .version)
+
+update-source-version valdi "$version" --rev="$latest_rev"
+
+deps_hash=$(prefetch-npm-deps <(curl -sSfL "https://raw.githubusercontent.com/$owner/$repo/$latest_rev/$path/package-lock.json"))
+
+sed -i "s|npmDepsHash = \".*\";|npmDepsHash = \"$deps_hash\";|" "$pkg_file"