@verdaccio/api 9.0.0-next-9.4 → 9.0.0-next-9.5

package/build/index.js

@@ -15,13 +15,10 @@ const require_profile = require("./v1/profile.js");
 const require_search$1 = require("./v1/search.js");
 const require_token = require("./v1/token.js");
 const require_whoami = require("./whoami.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let express = require("express");
 express = require_runtime.__toESM(express);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 //#region src/index.ts
-var debug$1 = (0, debug.default)("verdaccio:api");
 function src_default(config, auth, storage, logger) {
 	const app = express.default.Router();
 	app.param("package", _verdaccio_middleware.validatePackage);
@@ -32,12 +29,8 @@ function src_default(config, auth, storage, logger) {
 	app.param("token", _verdaccio_middleware.validateName);
 	app.param("_rev", (0, _verdaccio_middleware.match)(/^-rev$/));
 	app.param("org_couchdb_user", (0, _verdaccio_middleware.match)(/^org\.couchdb\.user:/));
+	(0, _verdaccio_middleware.registerBodyParser)(app, config);
 	app.use(auth.apiJWTmiddleware());
-	if (hasBodyParser(app)) debug$1("json parser already registered");
-	else app.use(express.default.json({
-		strict: false,
-		limit: config.max_body_size || "10mb"
-	}));
 	app.use((0, _verdaccio_middleware.antiLoop)(config));
 	app.use(_verdaccio_middleware.makeURLrelative);
 	app.use(_verdaccio_middleware.encodeScopePackage);
@@ -55,11 +48,6 @@ function src_default(config, auth, storage, logger) {
 	if (config.flags?.webLogin) require_login.default(app, auth, storage, config, logger);
 	return app;
 }
-function hasBodyParser(app) {
-	return (app.stack || app._router?.stack || []).some((middleware) => {
-		return middleware.handle?.name === "jsonParser" || middleware.name === "jsonParser";
-	});
-}
 //#endregion
 exports.default = src_default;
 

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Router } from 'express';\nimport express from 'express';\n\nimport type { Auth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  makeURLrelative,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport login from './v1/login';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nconst debug = buildDebug('verdaccio:api');\n\nexport default function (config: Config, auth: Auth, storage: Storage, logger: Logger): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // Express route parameter names must be valid JavaScript identifiers, which means\n  // they cannot start with a hyphen (-) or contain special characters like dots (.)\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n\n  app.use(auth.apiJWTmiddleware());\n\n  // middleware might have registered a json parser already\n  if (hasBodyParser(app)) {\n    debug('json parser already registered');\n  } else {\n    app.use(express.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  }\n\n  app.use(antiLoop(config));\n  app.use(makeURLrelative);\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  profile(app, auth, config);\n  search(app, logger);\n  user(app, auth, config, logger);\n  distTags(app, auth, storage, logger);\n  publish(app, auth, storage, logger);\n  ping(app);\n  stars(app, storage);\n  v1Search(app, auth, storage, logger);\n  token(app, auth, storage, config, logger);\n  pkg(app, auth, storage, logger);\n  if (config.flags?.webLogin) {\n    login(app, auth, storage, config, logger);\n  }\n  return app;\n}\n\nfunction hasBodyParser(app: Router): boolean {\n  // @ts-ignore - Express internals: app.stack is not part of the public API\n  const stack = (app as any).stack || (app as any)._router?.stack || [];\n  return stack.some((middleware: any) => {\n    return middleware.handle?.name === 'jsonParser' || middleware.name === 'jsonParser';\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BA,IAAM,WAAA,GAAA,MAAA,SAAmB,gBAAgB;AAEzC,SAAA,YAAyB,QAAgB,MAAY,SAAkB,QAAwB;CAE7F,MAAM,MAAM,QAAA,QAAQ,QAAQ;AAI5B,KAAI,MAAM,WAAW,sBAAA,gBAAgB;AACrC,KAAI,MAAM,YAAY,sBAAA,aAAa;AACnC,KAAI,MAAM,OAAO,sBAAA,aAAa;AAC9B,KAAI,MAAM,WAAW,sBAAA,aAAa;AAClC,KAAI,MAAM,YAAY,sBAAA,aAAa;AACnC,KAAI,MAAM,SAAS,sBAAA,aAAa;AAIhC,KAAI,MAAM,SAAA,GAAA,sBAAA,OAAc,SAAS,CAAC;AAClC,KAAI,MAAM,qBAAA,GAAA,sBAAA,OAA0B,uBAAuB,CAAC;AAE5D,KAAI,IAAI,KAAK,kBAAkB,CAAC;AAGhC,KAAI,cAAc,IAAI,CACpB,SAAM,iCAAiC;KAEvC,KAAI,IAAI,QAAA,QAAQ,KAAK;EAAE,QAAQ;EAAO,OAAO,OAAO,iBAAiB;EAAQ,CAAC,CAAC;AAGjF,KAAI,KAAA,GAAA,sBAAA,UAAa,OAAO,CAAC;AACzB,KAAI,IAAI,sBAAA,gBAAgB;AAExB,KAAI,IAAI,sBAAA,mBAAmB;AAE3B,gBAAA,QAAO,IAAI;AACX,iBAAA,QAAQ,KAAK,MAAM,OAAO;AAC1B,gBAAA,QAAO,KAAK,OAAO;AACnB,cAAA,QAAK,KAAK,MAAM,QAAQ,OAAO;AAC/B,mBAAA,QAAS,KAAK,MAAM,SAAS,OAAO;AACpC,iBAAA,QAAQ,KAAK,MAAM,SAAS,OAAO;AACnC,cAAA,QAAK,IAAI;AACT,eAAA,QAAM,KAAK,QAAQ;AACnB,kBAAA,QAAS,KAAK,MAAM,SAAS,OAAO;AACpC,eAAA,QAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AACzC,iBAAA,QAAI,KAAK,MAAM,SAAS,OAAO;AAC/B,KAAI,OAAO,OAAO,SAChB,eAAA,QAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AAE3C,QAAO;;AAGT,SAAS,cAAc,KAAsB;AAG3C,SADe,IAAY,SAAU,IAAY,SAAS,SAAS,EAAE,EACxD,MAAM,eAAoB;AACrC,SAAO,WAAW,QAAQ,SAAS,gBAAgB,WAAW,SAAS;GACvE"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import type { Router } from 'express';\nimport express from 'express';\n\nimport type { Auth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  makeURLrelative,\n  match,\n  registerBodyParser,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport login from './v1/login';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nexport default function (config: Config, auth: Auth, storage: Storage, logger: Logger): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // Express route parameter names must be valid JavaScript identifiers, which means\n  // they cannot start with a hyphen (-) or contain special characters like dots (.)\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n\n  // Body parser must be registered before JWT middleware which pauses/resumes the stream\n  registerBodyParser(app, config);\n\n  app.use(auth.apiJWTmiddleware());\n\n  app.use(antiLoop(config));\n  app.use(makeURLrelative);\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  profile(app, auth, config);\n  search(app, logger);\n  user(app, auth, config, logger);\n  distTags(app, auth, storage, logger);\n  publish(app, auth, storage, logger);\n  ping(app);\n  stars(app, storage);\n  v1Search(app, auth, storage, logger);\n  token(app, auth, storage, config, logger);\n  pkg(app, auth, storage, logger);\n  if (config.flags?.webLogin) {\n    login(app, auth, storage, config, logger);\n  }\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA6BA,SAAA,YAAyB,QAAgB,MAAY,SAAkB,QAAwB;CAE7F,MAAM,MAAM,QAAA,QAAQ,QAAQ;AAI5B,KAAI,MAAM,WAAW,sBAAA,gBAAgB;AACrC,KAAI,MAAM,YAAY,sBAAA,aAAa;AACnC,KAAI,MAAM,OAAO,sBAAA,aAAa;AAC9B,KAAI,MAAM,WAAW,sBAAA,aAAa;AAClC,KAAI,MAAM,YAAY,sBAAA,aAAa;AACnC,KAAI,MAAM,SAAS,sBAAA,aAAa;AAIhC,KAAI,MAAM,SAAA,GAAA,sBAAA,OAAc,SAAS,CAAC;AAClC,KAAI,MAAM,qBAAA,GAAA,sBAAA,OAA0B,uBAAuB,CAAC;AAG5D,EAAA,GAAA,sBAAA,oBAAmB,KAAK,OAAO;AAE/B,KAAI,IAAI,KAAK,kBAAkB,CAAC;AAEhC,KAAI,KAAA,GAAA,sBAAA,UAAa,OAAO,CAAC;AACzB,KAAI,IAAI,sBAAA,gBAAgB;AAExB,KAAI,IAAI,sBAAA,mBAAmB;AAE3B,gBAAA,QAAO,IAAI;AACX,iBAAA,QAAQ,KAAK,MAAM,OAAO;AAC1B,gBAAA,QAAO,KAAK,OAAO;AACnB,cAAA,QAAK,KAAK,MAAM,QAAQ,OAAO;AAC/B,mBAAA,QAAS,KAAK,MAAM,SAAS,OAAO;AACpC,iBAAA,QAAQ,KAAK,MAAM,SAAS,OAAO;AACnC,cAAA,QAAK,IAAI;AACT,eAAA,QAAM,KAAK,QAAQ;AACnB,kBAAA,QAAS,KAAK,MAAM,SAAS,OAAO;AACpC,eAAA,QAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AACzC,iBAAA,QAAI,KAAK,MAAM,SAAS,OAAO;AAC/B,KAAI,OAAO,OAAO,SAChB,eAAA,QAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AAE3C,QAAO"}

package/build/index.mjs

@@ -10,11 +10,9 @@ import profile_default from "./v1/profile.mjs";
 import search_default$1 from "./v1/search.mjs";
 import token_default from "./v1/token.mjs";
 import whoami_default from "./whoami.mjs";
-import buildDebug from "debug";
 import express from "express";
-import { antiLoop, encodeScopePackage, makeURLrelative, match, validateName, validatePackage } from "@verdaccio/middleware";
+import { antiLoop, encodeScopePackage, makeURLrelative, match, registerBodyParser, validateName, validatePackage } from "@verdaccio/middleware";
 //#region src/index.ts
-var debug = buildDebug("verdaccio:api");
 function src_default(config, auth, storage, logger) {
 	const app = express.Router();
 	app.param("package", validatePackage);
@@ -25,12 +23,8 @@ function src_default(config, auth, storage, logger) {
 	app.param("token", validateName);
 	app.param("_rev", match(/^-rev$/));
 	app.param("org_couchdb_user", match(/^org\.couchdb\.user:/));
+	registerBodyParser(app, config);
 	app.use(auth.apiJWTmiddleware());
-	if (hasBodyParser(app)) debug("json parser already registered");
-	else app.use(express.json({
-		strict: false,
-		limit: config.max_body_size || "10mb"
-	}));
 	app.use(antiLoop(config));
 	app.use(makeURLrelative);
 	app.use(encodeScopePackage);
@@ -48,11 +42,6 @@ function src_default(config, auth, storage, logger) {
 	if (config.flags?.webLogin) login_default(app, auth, storage, config, logger);
 	return app;
 }
-function hasBodyParser(app) {
-	return (app.stack || app._router?.stack || []).some((middleware) => {
-		return middleware.handle?.name === "jsonParser" || middleware.name === "jsonParser";
-	});
-}
 //#endregion
 export { src_default as default };
 

package/build/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Router } from 'express';\nimport express from 'express';\n\nimport type { Auth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  makeURLrelative,\n  match,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport login from './v1/login';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nconst debug = buildDebug('verdaccio:api');\n\nexport default function (config: Config, auth: Auth, storage: Storage, logger: Logger): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // Express route parameter names must be valid JavaScript identifiers, which means\n  // they cannot start with a hyphen (-) or contain special characters like dots (.)\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n\n  app.use(auth.apiJWTmiddleware());\n\n  // middleware might have registered a json parser already\n  if (hasBodyParser(app)) {\n    debug('json parser already registered');\n  } else {\n    app.use(express.json({ strict: false, limit: config.max_body_size || '10mb' }));\n  }\n\n  app.use(antiLoop(config));\n  app.use(makeURLrelative);\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  profile(app, auth, config);\n  search(app, logger);\n  user(app, auth, config, logger);\n  distTags(app, auth, storage, logger);\n  publish(app, auth, storage, logger);\n  ping(app);\n  stars(app, storage);\n  v1Search(app, auth, storage, logger);\n  token(app, auth, storage, config, logger);\n  pkg(app, auth, storage, logger);\n  if (config.flags?.webLogin) {\n    login(app, auth, storage, config, logger);\n  }\n  return app;\n}\n\nfunction hasBodyParser(app: Router): boolean {\n  // @ts-ignore - Express internals: app.stack is not part of the public API\n  const stack = (app as any).stack || (app as any)._router?.stack || [];\n  return stack.some((middleware: any) => {\n    return middleware.handle?.name === 'jsonParser' || middleware.name === 'jsonParser';\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA6BA,IAAM,QAAQ,WAAW,gBAAgB;AAEzC,SAAA,YAAyB,QAAgB,MAAY,SAAkB,QAAwB;CAE7F,MAAM,MAAM,QAAQ,QAAQ;AAI5B,KAAI,MAAM,WAAW,gBAAgB;AACrC,KAAI,MAAM,YAAY,aAAa;AACnC,KAAI,MAAM,OAAO,aAAa;AAC9B,KAAI,MAAM,WAAW,aAAa;AAClC,KAAI,MAAM,YAAY,aAAa;AACnC,KAAI,MAAM,SAAS,aAAa;AAIhC,KAAI,MAAM,QAAQ,MAAM,SAAS,CAAC;AAClC,KAAI,MAAM,oBAAoB,MAAM,uBAAuB,CAAC;AAE5D,KAAI,IAAI,KAAK,kBAAkB,CAAC;AAGhC,KAAI,cAAc,IAAI,CACpB,OAAM,iCAAiC;KAEvC,KAAI,IAAI,QAAQ,KAAK;EAAE,QAAQ;EAAO,OAAO,OAAO,iBAAiB;EAAQ,CAAC,CAAC;AAGjF,KAAI,IAAI,SAAS,OAAO,CAAC;AACzB,KAAI,IAAI,gBAAgB;AAExB,KAAI,IAAI,mBAAmB;AAE3B,gBAAO,IAAI;AACX,iBAAQ,KAAK,MAAM,OAAO;AAC1B,gBAAO,KAAK,OAAO;AACnB,cAAK,KAAK,MAAM,QAAQ,OAAO;AAC/B,mBAAS,KAAK,MAAM,SAAS,OAAO;AACpC,SAAQ,KAAK,MAAM,SAAS,OAAO;AACnC,cAAK,IAAI;AACT,eAAM,KAAK,QAAQ;AACnB,kBAAS,KAAK,MAAM,SAAS,OAAO;AACpC,eAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AACzC,iBAAI,KAAK,MAAM,SAAS,OAAO;AAC/B,KAAI,OAAO,OAAO,SAChB,eAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AAE3C,QAAO;;AAGT,SAAS,cAAc,KAAsB;AAG3C,SADe,IAAY,SAAU,IAAY,SAAS,SAAS,EAAE,EACxD,MAAM,eAAoB;AACrC,SAAO,WAAW,QAAQ,SAAS,gBAAgB,WAAW,SAAS;GACvE"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["import type { Router } from 'express';\nimport express from 'express';\n\nimport type { Auth } from '@verdaccio/auth';\nimport {\n  antiLoop,\n  encodeScopePackage,\n  makeURLrelative,\n  match,\n  registerBodyParser,\n  validateName,\n  validatePackage,\n} from '@verdaccio/middleware';\nimport type { Storage } from '@verdaccio/store';\nimport type { Config, Logger } from '@verdaccio/types';\n\nimport distTags from './dist-tags';\nimport pkg from './package';\nimport ping from './ping';\nimport publish from './publish';\nimport search from './search';\nimport stars from './stars';\nimport user from './user';\nimport login from './v1/login';\nimport profile from './v1/profile';\nimport v1Search from './v1/search';\nimport token from './v1/token';\nimport whoami from './whoami';\n\nexport default function (config: Config, auth: Auth, storage: Storage, logger: Logger): Router {\n  /* eslint new-cap:off */\n  const app = express.Router();\n\n  // validate all of these params as a package name\n  // this might be too harsh, so ask if it causes trouble\n  app.param('package', validatePackage);\n  app.param('filename', validateName);\n  app.param('tag', validateName);\n  app.param('version', validateName);\n  app.param('revision', validateName);\n  app.param('token', validateName);\n\n  // Express route parameter names must be valid JavaScript identifiers, which means\n  // they cannot start with a hyphen (-) or contain special characters like dots (.)\n  app.param('_rev', match(/^-rev$/));\n  app.param('org_couchdb_user', match(/^org\\.couchdb\\.user:/));\n\n  // Body parser must be registered before JWT middleware which pauses/resumes the stream\n  registerBodyParser(app, config);\n\n  app.use(auth.apiJWTmiddleware());\n\n  app.use(antiLoop(config));\n  app.use(makeURLrelative);\n  // encode / in a scoped package name to be matched as a single parameter in routes\n  app.use(encodeScopePackage);\n  // for \"npm whoami\"\n  whoami(app);\n  profile(app, auth, config);\n  search(app, logger);\n  user(app, auth, config, logger);\n  distTags(app, auth, storage, logger);\n  publish(app, auth, storage, logger);\n  ping(app);\n  stars(app, storage);\n  v1Search(app, auth, storage, logger);\n  token(app, auth, storage, config, logger);\n  pkg(app, auth, storage, logger);\n  if (config.flags?.webLogin) {\n    login(app, auth, storage, config, logger);\n  }\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,SAAA,YAAyB,QAAgB,MAAY,SAAkB,QAAwB;CAE7F,MAAM,MAAM,QAAQ,QAAQ;AAI5B,KAAI,MAAM,WAAW,gBAAgB;AACrC,KAAI,MAAM,YAAY,aAAa;AACnC,KAAI,MAAM,OAAO,aAAa;AAC9B,KAAI,MAAM,WAAW,aAAa;AAClC,KAAI,MAAM,YAAY,aAAa;AACnC,KAAI,MAAM,SAAS,aAAa;AAIhC,KAAI,MAAM,QAAQ,MAAM,SAAS,CAAC;AAClC,KAAI,MAAM,oBAAoB,MAAM,uBAAuB,CAAC;AAG5D,oBAAmB,KAAK,OAAO;AAE/B,KAAI,IAAI,KAAK,kBAAkB,CAAC;AAEhC,KAAI,IAAI,SAAS,OAAO,CAAC;AACzB,KAAI,IAAI,gBAAgB;AAExB,KAAI,IAAI,mBAAmB;AAE3B,gBAAO,IAAI;AACX,iBAAQ,KAAK,MAAM,OAAO;AAC1B,gBAAO,KAAK,OAAO;AACnB,cAAK,KAAK,MAAM,QAAQ,OAAO;AAC/B,mBAAS,KAAK,MAAM,SAAS,OAAO;AACpC,SAAQ,KAAK,MAAM,SAAS,OAAO;AACnC,cAAK,IAAI;AACT,eAAM,KAAK,QAAQ;AACnB,kBAAS,KAAK,MAAM,SAAS,OAAO;AACpC,eAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AACzC,iBAAI,KAAK,MAAM,SAAS,OAAO;AAC/B,KAAI,OAAO,OAAO,SAChB,eAAM,KAAK,MAAM,SAAS,QAAQ,OAAO;AAE3C,QAAO"}

package/build/package.js

@@ -1,8 +1,8 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 let _verdaccio_store = require("@verdaccio/store");
 //#region src/package.ts
 var debug$1 = (0, debug.default)("verdaccio:api:package");

package/build/package.mjs

@@ -1,6 +1,6 @@
-import buildDebug from "debug";
 import { PACKAGE_API_ENDPOINTS, allow, getRequestOptions } from "@verdaccio/middleware";
 import { HEADERS, HEADER_TYPE, stringUtils } from "@verdaccio/core";
+import buildDebug from "debug";
 import { Storage } from "@verdaccio/store";
 //#region src/package.ts
 var debug = buildDebug("verdaccio:api:package");

package/build/publish.js

@@ -1,8 +1,8 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 //#region src/publish.ts
 var debug$1 = (0, debug.default)("verdaccio:api:publish");
 /**

package/build/publish.mjs

@@ -1,6 +1,6 @@
-import buildDebug from "debug";
 import { PUBLISH_API_ENDPOINTS, allow, expectJson, getRequestOptions, media } from "@verdaccio/middleware";
 import { API_MESSAGE, HEADERS, HTTP_STATUS } from "@verdaccio/core";
+import buildDebug from "debug";
 //#region src/publish.ts
 var debug = buildDebug("verdaccio:api:publish");
 /**

package/build/user.js

@@ -1,8 +1,8 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 let _verdaccio_auth = require("@verdaccio/auth");
 let _verdaccio_config = require("@verdaccio/config");
 //#region src/user.ts

package/build/user.mjs

@@ -1,6 +1,6 @@
-import buildDebug from "debug";
 import { USER_API_ENDPOINTS, rateLimit } from "@verdaccio/middleware";
 import { API_ERROR, API_MESSAGE, HEADERS, HTTP_STATUS, authUtils, cryptoUtils, errorUtils, validationUtils } from "@verdaccio/core";
+import buildDebug from "debug";
 import { getApiToken } from "@verdaccio/auth";
 import { createRemoteUser } from "@verdaccio/config";
 //#region src/user.ts

package/build/v1/login.js

@@ -1,8 +1,8 @@
 const require_runtime = require("../_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 let _verdaccio_auth = require("@verdaccio/auth");
 let _verdaccio_config = require("@verdaccio/config");
 let node_crypto = require("node:crypto");

package/build/v1/login.mjs

@@ -1,6 +1,6 @@
-import buildDebug from "debug";
 import { LOGIN_API_ENDPOINTS, rateLimit } from "@verdaccio/middleware";
 import { API_ERROR, HEADERS, HTTP_STATUS, authUtils, errorUtils } from "@verdaccio/core";
+import buildDebug from "debug";
 import { getApiToken } from "@verdaccio/auth";
 import { createRemoteUser } from "@verdaccio/config";
 import { randomUUID } from "node:crypto";

package/build/v1/search.js

@@ -1,10 +1,10 @@
 const require_runtime = require("../_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let lodash = require("lodash");
 lodash = require_runtime.__toESM(lodash);
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 //#region src/v1/search.ts
 var debug$1 = (0, debug.default)("verdaccio:api:search");
 /**

package/build/v1/search.mjs

@@ -1,7 +1,7 @@
-import buildDebug from "debug";
 import { SEARCH_API_ENDPOINTS } from "@verdaccio/middleware";
 import _ from "lodash";
 import { HTTP_STATUS } from "@verdaccio/core";
+import buildDebug from "debug";
 //#region src/v1/search.ts
 var debug = buildDebug("verdaccio:api:search");
 /**

package/build/whoami.js

@@ -1,8 +1,8 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
-let debug = require("debug");
-debug = require_runtime.__toESM(debug);
 let _verdaccio_middleware = require("@verdaccio/middleware");
 let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
 //#region src/whoami.ts
 var debug$1 = (0, debug.default)("verdaccio:api:user");
 function whoami_default(route) {

package/build/whoami.mjs

@@ -1,6 +1,6 @@
-import buildDebug from "debug";
 import { USER_API_ENDPOINTS } from "@verdaccio/middleware";
 import { errorUtils } from "@verdaccio/core";
+import buildDebug from "debug";
 //#region src/whoami.ts
 var debug = buildDebug("verdaccio:api:user");
 function whoami_default(route) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "9.0.0-next-9.4",
+  "version": "9.0.0-next-9.5",
   "description": "Verdaccio Registry API",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -33,23 +33,23 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "9.0.0-next-9.4",
-    "@verdaccio/config": "9.0.0-next-9.4",
-    "@verdaccio/core": "9.0.0-next-9.4",
-    "@verdaccio/logger": "9.0.0-next-9.4",
-    "@verdaccio/middleware": "9.0.0-next-9.4",
-    "@verdaccio/store": "9.0.0-next-9.4",
+    "@verdaccio/auth": "9.0.0-next-9.5",
+    "@verdaccio/config": "9.0.0-next-9.5",
+    "@verdaccio/core": "9.0.0-next-9.5",
+    "@verdaccio/logger": "9.0.0-next-9.5",
+    "@verdaccio/middleware": "9.0.0-next-9.5",
+    "@verdaccio/store": "9.0.0-next-9.5",
     "debug": "4.4.3",
     "express": "5.2.1",
     "lodash": "4.17.23"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "5.0.0-next-9.4",
-    "@verdaccio/types": "14.0.0-next-9.1",
+    "@verdaccio/test-helper": "5.0.0-next-9.5",
+    "@verdaccio/types": "14.0.0-next-9.2",
     "mockdate": "3.0.5",
     "nock": "13.5.6",
     "supertest": "7.1.4",
-    "vitest": "3.2.4"
+    "vitest": "4.1.0"
   },
   "funding": {
     "type": "opencollective",