@pkg-nec/http-server 14.1.1-pkgnec.0

package/LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2011-2022 Charlie Robbins, Marak Squires, Jade Michael Thornton and the Contributors.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,147 @@
+[![GitHub Workflow Status (trunk)](https://img.shields.io/github/actions/workflow/status/pkg-nec/http-server/node.js.yml?branch=trunk&style=flat-square)](https://github.com/pkg-nec/http-server/actions)
+[![npm](https://img.shields.io/npm/v/@pkg-nec/http-server.svg?style=flat-square)](https://www.npmjs.com/package/@pkg-nec/http-server) [![npm downloads](https://img.shields.io/npm/dm/@pkg-nec/http-server?color=blue&label=npm%20downloads&style=flat-square)](https://www.npmjs.com/package/@pkg-nec/http-server)
+[![license](https://img.shields.io/github/license/pkg-nec/http-server.svg?style=flat-square)](https://github.com/pkg-nec/http-server)
+
+> **Maintained fork.** This is `@pkg-nec/http-server`, a maintained fork of [`http-party/http-server`](https://github.com/http-party/http-server), which has been effectively unmaintained since early 2022. This fork ships vulnerability patches only — no new features. Report issues at [pkg-nec/http-server/issues](https://github.com/pkg-nec/http-server/issues).
+
+# http-server: a simple static HTTP server
+
+`http-server` is a simple, zero-configuration command-line static HTTP server.  It is powerful enough for production usage, but it's simple and hackable enough to be used for testing, local development and learning.
+
+![Example of running http-server](https://github.com/pkg-nec/http-server/raw/trunk/screenshots/public.png)
+
+## Installation:
+
+#### Running on-demand:
+
+Using `npx` you can run the script without installing it first:
+
+    npx @pkg-nec/http-server [path] [options]
+
+#### Globally via `npm`
+
+    npm install --global @pkg-nec/http-server
+
+This will install `http-server` globally so that it may be run from the command line anywhere.
+
+#### As a dependency in your `npm` package:
+
+    npm install @pkg-nec/http-server
+
+## Usage:
+
+     http-server [path] [options]
+
+`[path]` defaults to `./public` if the folder exists, and `./` otherwise.
+
+*Now you can visit http://localhost:8080 to view your server*
+
+**Note:** Caching is on by default. Add `-c-1` as an option to disable caching.
+
+## Available Options:
+
+| Command         | 	Description         | Defaults  |
+| -------------  |-------------|-------------|
+|`-p` or `--port` |Port to use. Use `-p 0` to look for an open port, starting at 8080. It will also read from `process.env.PORT`. |8080 |
+|`-a`   |Address to use |0.0.0.0|
+|`-d`     |Show directory listings |`true` |
+|`-i`   | Display autoIndex | `true` |
+|`-g` or `--gzip` |When enabled it will serve `./public/some-file.js.gz` in place of `./public/some-file.js` when a gzipped version of the file exists and the request accepts gzip encoding. If brotli is also enabled, it will try to serve brotli first.|`false`|
+|`-b` or `--brotli`|When enabled it will serve `./public/some-file.js.br` in place of `./public/some-file.js` when a brotli compressed version of the file exists and the request accepts `br` encoding. If gzip is also enabled, it will try to serve brotli first. |`false`|
+|`-e` or `--ext`  |Default file extension if none supplied |`html` | 
+|`-s` or `--silent` |Suppress log messages from output  | |
+|`--cors` |Enable CORS via the `Access-Control-Allow-Origin` header  | |
+|`-o [path]` |Open browser window after starting the server. Optionally provide a URL path to open. e.g.: -o /other/dir/ | |
+|`-c` |Set cache time (in seconds) for cache-control max-age header, e.g. `-c10` for 10 seconds. To disable caching, use `-c-1`.|`3600` |
+|`-U` or `--utc` |Use UTC time format in log messages.| |
+|`--log-ip` |Enable logging of the client's IP address |`false` |
+|`-P` or `--proxy` |Proxies all requests which can't be resolved locally to the given url. e.g.: -P http://someurl.com | |
+|`--proxy-options` |Pass proxy [options](https://github.com/http-party/node-http-proxy#options) using nested dotted objects. e.g.: --proxy-options.secure false |
+|`--username` |Username for basic authentication | |
+|`--password` |Password for basic authentication | |
+|`-S`, `--tls` or `--ssl` |Enable secure request serving with TLS/SSL (HTTPS)|`false`|
+|`-C` or `--cert` |Path to ssl cert file |`cert.pem` | 
+|`-K` or `--key` |Path to ssl key file |`key.pem` |
+|`-r` or `--robots` | Automatically provide a /robots.txt (The content of which defaults to `User-agent: *\nDisallow: /`)  | `false` |
+|`--no-dotfiles` |Do not show dotfiles| |
+|`--mimetypes` |Path to a .types file for custom mimetype definition| |
+|`-h` or `--help` |Print this list and exit. |   |
+|`-v` or `--version`|Print the version and exit. | |
+
+## Magic Files
+
+- `index.html` will be served as the default file to any directory requests.
+- `404.html` will be served if a file is not found. This can be used for Single-Page App (SPA) hosting to serve the entry page.
+
+## Catch-all redirect
+
+To implement a catch-all redirect, use the index page itself as the proxy with:
+
+```
+http-server --proxy http://localhost:8080?
+```
+
+Note the `?` at the end of the proxy URL. Thanks to [@houston3](https://github.com/houston3) for this clever hack!
+
+## TLS/SSL
+
+First, you need to make sure that [openssl](https://github.com/openssl/openssl) is installed correctly, and you have `key.pem` and `cert.pem` files. You can generate them using this command:
+
+``` sh
+openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out cert.pem
+```
+
+You will be prompted with a few questions after entering the command. Use `127.0.0.1` as value for `Common name` if you want to be able to install the certificate in your OS's root certificate store or browser so that it is trusted.
+
+This generates a cert-key pair and it will be valid for 3650 days (about 10 years).
+
+Then you need to run the server with `-S` for enabling SSL and `-C` for your certificate file.
+
+``` sh
+http-server -S -C cert.pem
+```
+
+If you wish to use a passphrase with your private key you can include one in the openssl command via the -passout parameter (using password of foobar)
+
+
+e.g.
+`openssl req -newkey rsa:2048 -passout pass:foobar -keyout key.pem -x509 -days 365 -out cert.pem`
+
+For security reasons, the passphrase will only be read from the `NODE_HTTP_SERVER_SSL_PASSPHRASE` environment variable.
+
+
+This is what should be output if successful:
+
+``` sh
+Starting up http-server, serving ./ through https
+
+http-server settings:
+CORS: disabled
+Cache: 3600 seconds
+Connection Timeout: 120 seconds
+Directory Listings: visible
+AutoIndex: visible
+Serve GZIP Files: false
+Serve Brotli Files: false
+Default File Extension: none
+
+Available on:
+  https://127.0.0.1:8080
+  https://192.168.1.101:8080
+  https://192.168.1.104:8080
+Hit CTRL-C to stop the server
+```
+
+# Development
+
+Checkout this repository locally, then:
+
+```sh
+$ npm i
+$ npm start
+```
+
+*Now you can visit http://localhost:8080 to view your server*
+
+You should see the turtle image in the screenshot above hosted at that URL. See
+the `./public` folder for demo content.

package/bin/http-server

@@ -0,0 +1,278 @@
+#!/usr/bin/env node
+
+'use strict';
+
+var chalk     = require('chalk'),
+    os         = require('os'),
+    httpServer = require('../lib/http-server'),
+    portfinder = require('portfinder'),
+    opener     = require('opener'),
+
+    fs         = require('fs'),
+    url        = require('url');
+var argv = require('minimist')(process.argv.slice(2), {
+  alias: {
+    tls: 'ssl'
+  }
+});
+var ifaces = os.networkInterfaces();
+
+process.title = 'http-server';
+
+if (argv.h || argv.help) {
+  console.log([
+    'usage: http-server [path] [options]',
+    '',
+    'options:',
+    '  -p --port    Port to use. If 0, look for open port. [8080]',
+    '  -a           Address to use [0.0.0.0]',
+    '  -d           Show directory listings [true]',
+    '  -i           Display autoIndex [true]',
+    '  -g --gzip    Serve gzip files when possible [false]',
+    '  -b --brotli  Serve brotli files when possible [false]',
+    '               If both brotli and gzip are enabled, brotli takes precedence',
+    '  -e --ext     Default file extension if none supplied [none]',
+    '  -s --silent  Suppress log messages from output',
+    '  --cors[=headers]   Enable CORS via the "Access-Control-Allow-Origin" header',
+    '                     Optionally provide CORS headers list separated by commas',
+    '  -o [path]    Open browser window after starting the server.',
+    '               Optionally provide a URL path to open the browser window to.',
+    '  -c           Cache time (max-age) in seconds [3600], e.g. -c10 for 10 seconds.',
+    '               To disable caching, use -c-1.',
+    '  -t           Connections timeout in seconds [120], e.g. -t60 for 1 minute.',
+    '               To disable timeout, use -t0',
+    '  -U --utc     Use UTC time format in log messages.',
+    '  --log-ip     Enable logging of the client\'s IP address',
+    '',
+    '  -P --proxy       Fallback proxy if the request cannot be resolved. e.g.: http://someurl.com',
+    '  --proxy-options  Pass options to proxy using nested dotted objects. e.g.: --proxy-options.secure false',
+    '',
+    '  --username   Username for basic authentication [none]',
+    '               Can also be specified with the env variable NODE_HTTP_SERVER_USERNAME',
+    '  --password   Password for basic authentication [none]',
+    '               Can also be specified with the env variable NODE_HTTP_SERVER_PASSWORD',
+    '',
+    '  -S --tls --ssl   Enable secure request serving with TLS/SSL (HTTPS)',
+    '  -C --cert    Path to TLS cert file (default: cert.pem)',
+    '  -K --key     Path to TLS key file (default: key.pem)',
+    '',
+    '  -r --robots        Respond to /robots.txt [User-agent: *\\nDisallow: /]',
+    '  --no-dotfiles      Do not show dotfiles',
+    '  --mimetypes        Path to a .types file for custom mimetype definition',
+    '  -h --help          Print this list and exit.',
+    '  -v --version       Print the version and exit.'
+  ].join('\n'));
+  process.exit();
+}
+
+var port = argv.p || argv.port || parseInt(process.env.PORT, 10),
+    host = argv.a || '0.0.0.0',
+    tls = argv.S || argv.tls,
+    sslPassphrase = process.env.NODE_HTTP_SERVER_SSL_PASSPHRASE,
+    proxy = argv.P || argv.proxy,
+    proxyOptions = argv['proxy-options'],
+    utc = argv.U || argv.utc,
+    version = argv.v || argv.version,
+    logger;
+
+var proxyOptionsBooleanProps = [
+  'ws', 'xfwd', 'secure', 'toProxy', 'prependPath', 'ignorePath', 'changeOrigin',
+  'preserveHeaderKeyCase', 'followRedirects', 'selfHandleResponse'
+];
+
+if (proxyOptions) {
+  Object.keys(proxyOptions).forEach(function (key) {
+    if (proxyOptionsBooleanProps.indexOf(key) > -1) {
+      proxyOptions[key] = proxyOptions[key].toLowerCase() === 'true';
+    }
+  });
+}
+
+if (!argv.s && !argv.silent) {
+  logger = {
+    info: console.log,
+    request: function (req, res, error) {
+      var date = utc ? new Date().toUTCString() : new Date();
+      var ip = argv['log-ip']
+          ? req.headers['x-forwarded-for'] || '' +  req.connection.remoteAddress
+          : '';
+      if (error) {
+        logger.info(
+          '[%s] %s "%s %s" Error (%s): "%s"',
+          date, ip, chalk.red(req.method), chalk.red(req.url),
+          chalk.red(error.status.toString()), chalk.red(error.message)
+        );
+      }
+      else {
+        logger.info(
+          '[%s] %s "%s %s" "%s"',
+          date, ip, chalk.cyan(req.method), chalk.cyan(req.url),
+          req.headers['user-agent']
+        );
+      }
+    }
+  };
+}
+else if (chalk) {
+  logger = {
+    info: function () {},
+    request: function () {}
+  };
+}
+
+if (version) {
+  logger.info('v' + require('../package.json').version);
+  process.exit();
+}
+
+if (!port) {
+  portfinder.basePort = 8080;
+  portfinder.getPort(function (err, port) {
+    if (err) { throw err; }
+    listen(port);
+  });
+}
+else {
+  listen(port);
+}
+
+function listen(port) {
+  var options = {
+    root: argv._[0],
+    cache: argv.c,
+    timeout: argv.t,
+    showDir: argv.d,
+    autoIndex: argv.i,
+    gzip: argv.g || argv.gzip,
+    brotli: argv.b || argv.brotli,
+    robots: argv.r || argv.robots,
+    ext: argv.e || argv.ext,
+    logFn: logger.request,
+    proxy: proxy,
+    proxyOptions: proxyOptions,
+    showDotfiles: argv.dotfiles,
+    mimetypes: argv.mimetypes,
+    username: argv.username || process.env.NODE_HTTP_SERVER_USERNAME,
+    password: argv.password || process.env.NODE_HTTP_SERVER_PASSWORD
+  };
+
+  if (argv.cors) {
+    options.cors = true;
+    if (typeof argv.cors === 'string') {
+      options.corsHeaders = argv.cors;
+    }
+  }
+
+  if (proxy) {
+    try {
+      new url.URL(proxy)
+    }
+    catch (err) {
+      logger.info(chalk.red('Error: Invalid proxy url'));
+      process.exit(1);
+    }
+  }
+
+  if (tls) {
+    options.https = {
+      cert: argv.C || argv.cert || 'cert.pem',
+      key: argv.K || argv.key || 'key.pem',
+      passphrase: sslPassphrase,
+    };
+    try {
+      fs.lstatSync(options.https.cert);
+    }
+    catch (err) {
+      logger.info(chalk.red('Error: Could not find certificate ' + options.https.cert));
+      process.exit(1);
+    }
+    try {
+      fs.lstatSync(options.https.key);
+    }
+    catch (err) {
+      logger.info(chalk.red('Error: Could not find private key ' + options.https.key));
+      process.exit(1);
+    }
+  }
+
+  var server = httpServer.createServer(options);
+  server.listen(port, host, function () {
+    var protocol = tls ? 'https://' : 'http://';
+
+    logger.info([
+      chalk.yellow('Starting up http-server, serving '),
+      chalk.cyan(server.root),
+      tls ? (chalk.yellow(' through') + chalk.cyan(' https')) : ''
+    ].join(''));
+
+    logger.info([chalk.yellow('\nhttp-server version: '), chalk.cyan(require('../package.json').version)].join(''));
+
+    logger.info([
+      chalk.yellow('\nhttp-server settings: '),
+      ([chalk.yellow('CORS: '), argv.cors ? chalk.cyan(argv.cors) : chalk.red('disabled')].join('')),
+      ([chalk.yellow('Cache: '), argv.c ? (argv.c === '-1' ? chalk.red('disabled') : chalk.cyan(argv.c + ' seconds')) : chalk.cyan('3600 seconds')].join('')),
+      ([chalk.yellow('Connection Timeout: '), argv.t === '0' ? chalk.red('disabled') : (argv.t ? chalk.cyan(argv.t + ' seconds') : chalk.cyan('120 seconds'))].join('')),
+      ([chalk.yellow('Directory Listings: '), argv.d ? chalk.red('not visible') : chalk.cyan('visible')].join('')),
+      ([chalk.yellow('AutoIndex: '), argv.i ? chalk.red('not visible') : chalk.cyan('visible')].join('')),
+      ([chalk.yellow('Serve GZIP Files: '), argv.g || argv.gzip ? chalk.cyan('true') : chalk.red('false')].join('')),
+      ([chalk.yellow('Serve Brotli Files: '), argv.b || argv.brotli ? chalk.cyan('true') : chalk.red('false')].join('')),
+      ([chalk.yellow('Default File Extension: '), argv.e ? chalk.cyan(argv.e) : (argv.ext ? chalk.cyan(argv.ext) : chalk.red('none'))].join(''))
+    ].join('\n'));
+
+    logger.info(chalk.yellow('\nAvailable on:'));
+
+    if (argv.a && host !== '0.0.0.0') {
+      logger.info(`  ${protocol}${host}:${chalk.green(port.toString())}`);
+    } else {
+      Object.keys(ifaces).forEach(function (dev) {
+        ifaces[dev].forEach(function (details) {
+          if (details.family === 'IPv4') {
+            logger.info(('  ' + protocol + details.address + ':' + chalk.green(port.toString())));
+          }
+        });
+      });
+    }
+
+    if (typeof proxy === 'string') {
+      if (proxyOptions) {
+        logger.info('Unhandled requests will be served from: ' + proxy + '. Options: ' + JSON.stringify(proxyOptions));
+      }
+      else {
+        logger.info('Unhandled requests will be served from: ' + proxy);
+      }
+    }
+
+    logger.info('Hit CTRL-C to stop the server');
+    if (argv.o) {
+      const openHost = host === '0.0.0.0' ? '127.0.0.1' : host;
+      let openUrl = `${protocol}${openHost}:${port}`;
+      if (typeof argv.o === 'string') {
+        openUrl += argv.o[0] === '/' ? argv.o : '/' + argv.o;
+      }
+      logger.info('Open: ' + openUrl);
+      opener(openUrl);
+    }
+
+    // Spacing before logs
+    if (!argv.s) logger.info();
+  });
+}
+
+if (process.platform === 'win32') {
+  require('readline').createInterface({
+    input: process.stdin,
+    output: process.stdout
+  }).on('SIGINT', function () {
+    process.emit('SIGINT');
+  });
+}
+
+process.on('SIGINT', function () {
+  logger.info(chalk.red('http-server stopped.'));
+  process.exit();
+});
+
+process.on('SIGTERM', function () {
+  logger.info(chalk.red('http-server stopped.'));
+  process.exit();
+});

package/doc/http-server.1

@@ -0,0 +1,165 @@
+.TH http-server 1 "April 2020" GNU "http-server man page"
+
+.SH NAME
+http-server \- a simple zero-configuration command-line http server
+
+.SH SYNOPSIS
+.B http-server
+[\fIPATH\fR]
+[\fIOPTIONS\fR]
+
+.SH DESCRIPTION
+\fBhttp-server\fR is a simple, zero-configuration command-line http server. It is powerful enough for production usage, but it's simple and hackable enough to be used for testing, local development, and learning.
+
+.SH OPTIONS
+
+.TP
+.BI [\fIPATH\fR]
+The directory to serve.
+Defaults to ./public if it exists, and ./ otherwise.
+
+.TP
+.BI \-p ", " \-\-port " " \fIPORT\fR
+Port to use. If 0, look for the first available port, starting at 8080.
+Default is 8080.
+
+.TP
+.BI \-a " " \fIADDRESS\fR
+Address to use.
+Default is 0.0.0.0.
+
+.TP
+.BI \-d
+Show directory listings.
+Default is true.
+
+.TP
+.BI \-i
+Display autoIndex.
+Default is true.
+
+.TP
+.BI \-g ", " \-\-gzip
+Serve gzip files when possible.
+Default is false.
+
+.TP
+.BI \-b ", " \-\-brotli
+Serve brotli files when possible.
+If both brotli and gzip are enabled, brotli takes precedence.
+Default is false.
+
+.TP
+.BI \-e ", " \-\-ext " " \fIEXTENSION\fR
+Default file extension is none is provided.
+
+.TP
+.BI \-s ", " \-\-silent
+Suppress log messages from output.
+
+.TP
+.BI \-\-cors " " [\fIHEADERS\fR]
+Enable CORS via the "Access-Control-Allow-Origin" header.
+Optionally provide CORS headers list separated by commas.
+
+.TP
+.BI \-o " " [\fIPATH\fR]
+Open default browser window after starting the server.
+Optionally provide a URL path to open the browser window to.
+
+.TP
+.BI \-c " " \fITIME\fR
+Cache time (max-age) in seconds.
+To disable caching, use \-c \-1.
+Default is 3600.
+
+.TP
+.BI \-U ", " \-\-utc
+Use UTC time format in log messages.
+
+.TP
+.BI \-\-log\-ip
+Enable logging of the client IP address.
+
+.TP
+.BI \-P ", " \-\-proxy
+Fallback proxy if the request cannot be resolved.
+
+.TP
+.BI \-\-proxy\-options
+Pass proxy options using nested dotted objects.
+
+.TP
+.BI \-\-username " " \fIUSERNAME\fR
+Username for basic authentication.
+Can also be specified with the environment variable NODE_HTTP_SERVER_USERNAME.
+Defaults to none.
+
+.TP
+.BI \-\-password " " \fIPASSWORD\fR
+Password for basic authentication.
+Can also be specified with the environment variable NODE_HTTP_SERVER_PASSWORD.
+Defaults to none.
+
+.TP
+.BI \-S ", " \-\-tls ", " \-\-ssl
+Enable https.
+
+.TP
+.BI \-C ", " \-\-cert " " [\fIFILE\fR]
+Path to SSL certificate file.
+If not specified, uses cert.pem.
+
+.TP
+.BI \-K ", " \-\-key " " [\fIFILE\fR]
+Path to SSL key file.
+If not specified, uses key.pem.
+Passphrase will be read from NODE_HTTP_SERVER_SSL_PASSPHRASE (if set)
+
+.TP
+.BI \-r ", " \-\-robots " " [\fIUSER\-AGENT\fR]
+Respond to /robots.txt request.
+If not specified, uses "User-agent: *\\nDisallow: /]"
+
+.TP
+.BI \-\-no\-dotfiles
+Do not show dotfiles.
+
+.TP
+.BI \-h ", " \-\-help
+Print usage and exit.
+
+.TP
+.BI \-v ", " \-\-version
+Print version and exit.
+
+.SH FILES
+.B index.html
+will be served as the default file to any directory requests.
+
+.B 404.html
+will be served if a file is not found. This can be used for SPA hosting to serve the entry page.
+
+.SH COPYING
+Copyright (c) 2011-2022 Charlie Robbins, Marak Squires, and the Contributors.
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+.SH VERSION
+Version 0.12.2

package/lib/core/aliases.json

@@ -0,0 +1,34 @@
+{
+  "autoIndex": [ "autoIndex", "autoindex" ],
+  "showDir": [ "showDir", "showdir" ],
+  "showDotfiles": ["showDotfiles", "showdotfiles"],
+  "humanReadable": [ "humanReadable", "humanreadable", "human-readable" ],
+  "hidePermissions": ["hidePermissions", "hidepermissions", "hide-permissions"],
+  "si": [ "si", "index" ],
+  "handleError": [ "handleError", "handleerror" ],
+  "cors": [ "cors", "CORS" ],
+  "headers": [ "H", "header", "headers" ],
+  "contentType": [ "contentType", "contenttype", "content-type" ],
+  "mimeType": [
+    "mimetype",
+    "mimetypes",
+    "mimeType",
+    "mimeTypes",
+    "mime-type",
+    "mime-types",
+    "mime-Type",
+    "mime-Types"
+  ],
+  "weakEtags": [ "weakEtags", "weaketags", "weak-etags" ],
+  "weakCompare": [
+    "weakcompare",
+    "weakCompare",
+    "weak-compare",
+    "weak-Compare"
+  ],
+  "handleOptionsMethod": [
+    "handleOptionsMethod",
+    "handleoptionsmethod",
+    "handle-options-method"
+  ]
+}

package/lib/core/defaults.json

@@ -0,0 +1,18 @@
+{
+  "autoIndex": true,
+  "showDir": true,
+  "showDotfiles": true,
+  "humanReadable": true,
+  "hidePermissions": false,
+  "si": false,
+  "cache": "max-age=3600",
+  "cors": false,
+  "gzip": true,
+  "brotli": false,
+  "defaultExt": ".html",
+  "handleError": true,
+  "contentType": "application/octet-stream",
+  "weakEtags": true,
+  "weakCompare": true,
+  "handleOptionsMethod": false
+}

package/lib/core/etag.js

@@ -0,0 +1,9 @@
+'use strict';
+
+module.exports = (stat, weakEtag) => {
+  let etag = `"${[stat.ino, stat.size, stat.mtime.toISOString()].join('-')}"`;
+  if (weakEtag) {
+    etag = `W/${etag}`;
+  }
+  return etag;
+};