@verdaccio/core 6.0.0-6-next.3 → 6.0.0-6-next.6

package/build/schemes/publish-manifest.js

@@ -0,0 +1,49 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.validatePublishSingleVersion = validatePublishSingleVersion;
+
+var _ajv = _interopRequireDefault(require("ajv"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+const ajv = new _ajv.default(); // FIXME: this could extend from @verdaccio/types but we need
+// schemas from @verdaccio/types to be able to validate them
+
+const schema = {
+  type: 'object',
+  properties: {
+    name: {
+      type: 'string'
+    },
+    versions: {
+      type: 'object',
+      maxProperties: 1
+    },
+    _attachments: {
+      type: 'object',
+      maxProperties: 1
+    }
+  },
+  required: ['name', 'versions', '_attachments'],
+  additionalProperties: true
+}; // validate is a type guard for MyData - type is inferred from schema type
+
+const validate = ajv.compile(schema);
+/**
+ * Validate if a manifest has the correct structure when a new package
+ * is being created. The properties name, versions and _attachments must contain 1 element.
+ * @param data a manifest object
+ * @returns boolean
+ */
+
+function validatePublishSingleVersion(manifest) {
+  if (!manifest) {
+    return false;
+  }
+
+  return validate(manifest);
+}
+//# sourceMappingURL=publish-manifest.js.map

package/build/schemes/publish-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-manifest.js","names":["ajv","Ajv","schema","type","properties","name","versions","maxProperties","_attachments","required","additionalProperties","validate","compile","validatePublishSingleVersion","manifest"],"sources":["../../src/schemes/publish-manifest.ts"],"sourcesContent":["import Ajv, { JSONSchemaType } from 'ajv';\n\nconst ajv = new Ajv();\n\n// FIXME: this could extend from @verdaccio/types but we need\n// schemas from @verdaccio/types to be able to validate them\ninterface Manifest {\n  name: string;\n  versions: object;\n  _attachments: object;\n}\n\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', maxProperties: 1 },\n    _attachments: { type: 'object', maxProperties: 1 },\n  },\n  required: ['name', 'versions', '_attachments'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validatePublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;;;;AAAA;;;;AAEA,MAAMA,GAAG,GAAG,IAAIC,YAAJ,EAAZ,C,CAEA;AACA;;AAOA,MAAMC,MAAgC,GAAG;EACvCC,IAAI,EAAE,QADiC;EAEvCC,UAAU,EAAE;IACVC,IAAI,EAAE;MAAEF,IAAI,EAAE;IAAR,CADI;IAEVG,QAAQ,EAAE;MAAEH,IAAI,EAAE,QAAR;MAAkBI,aAAa,EAAE;IAAjC,CAFA;IAGVC,YAAY,EAAE;MAAEL,IAAI,EAAE,QAAR;MAAkBI,aAAa,EAAE;IAAjC;EAHJ,CAF2B;EAOvCE,QAAQ,EAAE,CAAC,MAAD,EAAS,UAAT,EAAqB,cAArB,CAP6B;EAQvCC,oBAAoB,EAAE;AARiB,CAAzC,C,CAWA;;AACA,MAAMC,QAAQ,GAAGX,GAAG,CAACY,OAAJ,CAAYV,MAAZ,CAAjB;AAEA;AACA;AACA;AACA;AACA;AACA;;AACO,SAASW,4BAAT,CAAsCC,QAAtC,EAAqD;EAC1D,IAAI,CAACA,QAAL,EAAe;IACb,OAAO,KAAP;EACD;;EACD,OAAOH,QAAQ,CAACG,QAAD,CAAf;AACD"}

package/build/search-utils.d.ts

@@ -14,10 +14,14 @@ export declare type SearchItemPkg = {
     path?: string;
     time?: number | Date;
 };
-export declare type SearchItem = {
+declare type PrivatePackage = {
+    verdaccioPrivate?: boolean;
+    verdaccioPkgCached?: boolean;
+};
+export interface SearchItem extends UnStable, PrivatePackage {
     package: SearchItemPkg;
     score: Score;
-} & UnStable;
+}
 export declare type Score = {
     final: number;
     detail: SearchMetrics;
@@ -48,11 +52,11 @@ export declare type SearchPackageBody = {
     publisher?: any;
     maintainers?: PublisherMaintainer[];
 };
-export declare type SearchPackageItem = {
+export interface SearchPackageItem extends UnStable, PrivatePackage {
     package: SearchPackageBody;
     score: Score;
     searchScore?: number;
-} & UnStable;
+}
 export declare const UNSCOPED = "unscoped";
 export declare type SearchQuery = {
     text: string;

package/build/search-utils.js

@@ -4,6 +4,8 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.UNSCOPED = void 0;
+// @deprecated use @verdaccio/types
+// @deprecated use @verdaccio/types
 const UNSCOPED = 'unscoped';
 exports.UNSCOPED = UNSCOPED;
 //# sourceMappingURL=search-utils.js.map

package/build/search-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/search-utils.ts"],"names":["UNSCOPED"],"mappings":";;;;;;AA+DO,MAAMA,QAAQ,GAAG,UAAjB","sourcesContent":["export type SearchMetrics = {\n  quality: number;\n  popularity: number;\n  maintenance: number;\n};\nexport type UnStable = {\n  flags?: {\n    // if is false is not be included in search results (majority are stable)\n    unstable?: boolean;\n  };\n};\nexport type SearchItemPkg = {\n  name: string;\n  scoped?: string;\n  path?: string;\n  time?: number | Date;\n};\n\nexport type SearchItem = {\n  package: SearchItemPkg;\n  score: Score;\n} & UnStable;\n\nexport type Score = {\n  final: number;\n  detail: SearchMetrics;\n};\n\nexport type SearchResults = {\n  objects: SearchItemPkg[];\n  total: number;\n  time: string;\n};\n\ntype PublisherMaintainer = {\n  username: string;\n  email: string;\n};\n\nexport type SearchPackageBody = {\n  name: string;\n  scope: string;\n  description: string;\n  author: string | PublisherMaintainer;\n  version: string;\n  keywords: string | string[] | undefined;\n  date: string;\n  links?: {\n    npm: string; // only include placeholder for URL eg: {url}/{packageName}\n    homepage?: string;\n    repository?: string;\n    bugs?: string;\n  };\n  publisher?: any;\n  maintainers?: PublisherMaintainer[];\n};\n\nexport type SearchPackageItem = {\n  package: SearchPackageBody;\n  score: Score;\n  searchScore?: number;\n} & UnStable;\n\nexport const UNSCOPED = 'unscoped';\n\nexport type SearchQuery = {\n  text: string;\n  size?: number;\n  from?: number;\n} & SearchMetrics;\n"],"file":"search-utils.js"}
+{"version":3,"file":"search-utils.js","names":["UNSCOPED"],"sources":["../src/search-utils.ts"],"sourcesContent":["export type SearchMetrics = {\n  quality: number;\n  popularity: number;\n  maintenance: number;\n};\nexport type UnStable = {\n  flags?: {\n    // if is false is not be included in search results (majority are stable)\n    unstable?: boolean;\n  };\n};\nexport type SearchItemPkg = {\n  name: string;\n  scoped?: string;\n  path?: string;\n  time?: number | Date;\n};\n\ntype PrivatePackage = {\n  // note: prefixed to avoid external conflicts\n\n  // the package is published as private\n  verdaccioPrivate?: boolean;\n  // if the package is not private but is cached\n  verdaccioPkgCached?: boolean;\n};\n\nexport interface SearchItem extends UnStable, PrivatePackage {\n  package: SearchItemPkg;\n  score: Score;\n}\n\nexport type Score = {\n  final: number;\n  detail: SearchMetrics;\n};\n\nexport type SearchResults = {\n  objects: SearchItemPkg[];\n  total: number;\n  time: string;\n};\n\n// @deprecated use @verdaccio/types\ntype PublisherMaintainer = {\n  username: string;\n  email: string;\n};\n\n// @deprecated use @verdaccio/types\nexport type SearchPackageBody = {\n  name: string;\n  scope: string;\n  description: string;\n  author: string | PublisherMaintainer;\n  version: string;\n  keywords: string | string[] | undefined;\n  date: string;\n  links?: {\n    npm: string; // only include placeholder for URL eg: {url}/{packageName}\n    homepage?: string;\n    repository?: string;\n    bugs?: string;\n  };\n  publisher?: any;\n  maintainers?: PublisherMaintainer[];\n};\n\nexport interface SearchPackageItem extends UnStable, PrivatePackage {\n  package: SearchPackageBody;\n  score: Score;\n  searchScore?: number;\n}\n\nexport const UNSCOPED = 'unscoped';\n\nexport type SearchQuery = {\n  text: string;\n  size?: number;\n  from?: number;\n} & SearchMetrics;\n"],"mappings":";;;;;;AA2CA;AAMA;AAyBO,MAAMA,QAAQ,GAAG,UAAjB"}

package/build/stream-utils.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="node" />
-import { PassThrough, TransformOptions, Transform } from 'stream';
+import { PassThrough, Transform, TransformOptions } from 'stream';
 export interface IReadTarball {
     abort?: () => void;
 }

package/build/stream-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/stream-utils.ts"],"names":["ReadTarball","PassThrough","constructor","options","addAbstractMethods","abort","UploadTarball","done","self","name","_called_methods","__defineGetter__","__defineSetter__","fn","readableToString","stream","chunks","chunk","push","Buffer","from","buffer","concat","str","toString","transformObjectToString","Transform","objectMode","transform","encoding","callback","JSON","stringify"],"mappings":";;;;;;;AAAA;;AAWA;AACA;AACA;AACA;AACA;AACA,MAAMA,WAAN,SAA0BC,mBAA1B,CAA8D;AAC5D;AACF;AACA;AACA;AACSC,EAAAA,WAAW,CAACC,OAAD,EAA4B;AAC5C,UAAMA,OAAN,EAD4C,CAE5C;;AACAC,IAAAA,kBAAkB,CAAC,IAAD,EAAO,OAAP,CAAlB;AACD;;AAEMC,EAAAA,KAAK,GAAS,CAAE;;AAXqC;AAc9D;AACA;AACA;AACA;AACA;;;;;AACA,MAAMC,aAAN,SAA4BL,mBAA5B,CAAkE;AAChE;AACF;AACA;AACA;AACSC,EAAAA,WAAW,CAACC,OAAD,EAAe;AAC/B,UAAMA,OAAN,EAD+B,CAE/B;;AACAC,IAAAA,kBAAkB,CAAC,IAAD,EAAO,OAAP,CAAlB,CAH+B,CAK/B;;AACAA,IAAAA,kBAAkB,CAAC,IAAD,EAAO,MAAP,CAAlB;AACD;;AAEMC,EAAAA,KAAK,GAAS,CAAE;;AAChBE,EAAAA,IAAI,GAAS,CAAE;;AAf0C;AAkBlE;AACA;AACA;AACA;AACA;AACA;AACA;;;;;AACA,SAASH,kBAAT,CAA4BI,IAA5B,EAAuCC,IAAvC,EAAwD;AACtDD,EAAAA,IAAI,CAACE,eAAL,GAAuBF,IAAI,CAACE,eAAL,IAAwB,EAA/C;;AAEAF,EAAAA,IAAI,CAACG,gBAAL,CAAsBF,IAAtB,EAA4B,YAAY;AACtC,WAAO,YAAkB;AACvBD,MAAAA,IAAI,CAACE,eAAL,CAAqBD,IAArB,IAA6B,IAA7B;AACD,KAFD;AAGD,GAJD;;AAMAD,EAAAA,IAAI,CAACI,gBAAL,CAAsBH,IAAtB,EAA4B,UAAUI,EAAV,EAAmB;AAC7C,WAAOL,IAAI,CAACC,IAAD,CAAX;AAEAD,IAAAA,IAAI,CAACC,IAAD,CAAJ,GAAaI,EAAb,CAH6C,CAK7C;;AACA,QAAIL,IAAI,CAACE,eAAL,IAAwBF,IAAI,CAACE,eAAL,CAAqBD,IAArB,CAA5B,EAAwD;AACtD,aAAOD,IAAI,CAACE,eAAL,CAAqBD,IAArB,CAAP;AAEAD,MAAAA,IAAI,CAACC,IAAD,CAAJ;AACD;AACF,GAXD;AAYD;AAED;AACA;AACA;;;AACA,MAAMK,gBAAgB,GAAG,MAAOC,MAAP,IAAkB;AACzC,QAAMC,MAAgB,GAAG,EAAzB;;AACA,aAAW,IAAIC,KAAf,IAAwBF,MAAxB,EAAgC;AAC9BC,IAAAA,MAAM,CAACE,IAAP,CAAYC,MAAM,CAACC,IAAP,CAAYH,KAAZ,CAAZ;AACD;;AACD,QAAMI,MAAM,GAAGF,MAAM,CAACG,MAAP,CAAcN,MAAd,CAAf;AACA,QAAMO,GAAG,GAAGF,MAAM,CAACG,QAAP,CAAgB,OAAhB,CAAZ;AACA,SAAOD,GAAP;AACD,CARD;AAUA;AACA;AACA;;;;;AACA,MAAME,uBAAuB,GAAG,MAAM;AACpC,SAAO,IAAIC,iBAAJ,CAAc;AACnBC,IAAAA,UAAU,EAAE,IADO;AAEnBC,IAAAA,SAAS,EAAE,CAACX,KAAD,EAAQY,QAAR,EAAkBC,QAAlB,KAA+B;AACxCA,MAAAA,QAAQ,CAAC,IAAD,EAAOC,IAAI,CAACC,SAAL,CAAef,KAAf,CAAP,CAAR;AACD;AAJkB,GAAd,CAAP;AAMD,CAPD","sourcesContent":["import { PassThrough, TransformOptions, Transform } from 'stream';\n\nexport interface IReadTarball {\n  abort?: () => void;\n}\n\nexport interface IUploadTarball {\n  done?: () => void;\n  abort?: () => void;\n}\n\n/**\n * This stream is used to read tarballs from repository.\n * @param {*} options\n * @return {Stream}\n */\nclass ReadTarball extends PassThrough implements IReadTarball {\n  /**\n   *\n   * @param {Object} options\n   */\n  public constructor(options: TransformOptions) {\n    super(options);\n    // called when data is not needed anymore\n    addAbstractMethods(this, 'abort');\n  }\n\n  public abort(): void {}\n}\n\n/**\n * This stream is used to upload tarballs to a repository.\n * @param {*} options\n * @return {Stream}\n */\nclass UploadTarball extends PassThrough implements IUploadTarball {\n  /**\n   *\n   * @param {Object} options\n   */\n  public constructor(options: any) {\n    super(options);\n    // called when user closes connection before upload finishes\n    addAbstractMethods(this, 'abort');\n\n    // called when upload finishes successfully\n    addAbstractMethods(this, 'done');\n  }\n\n  public abort(): void {}\n  public done(): void {}\n}\n\n/**\n * This function intercepts abstract calls and replays them allowing.\n * us to attach those functions after we are ready to do so\n * @param {*} self\n * @param {*} name\n */\n// Perhaps someone knows a better way to write this\nfunction addAbstractMethods(self: any, name: any): void {\n  self._called_methods = self._called_methods || {};\n\n  self.__defineGetter__(name, function () {\n    return function (): void {\n      self._called_methods[name] = true;\n    };\n  });\n\n  self.__defineSetter__(name, function (fn: any) {\n    delete self[name];\n\n    self[name] = fn;\n\n    // eslint-disable-next-line @typescript-eslint/prefer-optional-chain\n    if (self._called_methods && self._called_methods[name]) {\n      delete self._called_methods[name];\n\n      self[name]();\n    }\n  });\n}\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream) => {\n  const chunks: Buffer[] = [];\n  for await (let chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { ReadTarball, UploadTarball, readableToString, transformObjectToString };\n"],"file":"stream-utils.js"}
+{"version":3,"file":"stream-utils.js","names":["ReadTarball","PassThrough","constructor","options","addAbstractMethods","abort","UploadTarball","done","self","name","_called_methods","__defineGetter__","__defineSetter__","fn","readableToString","stream","chunks","chunk","push","Buffer","from","buffer","concat","str","toString","transformObjectToString","Transform","objectMode","transform","encoding","callback","JSON","stringify"],"sources":["../src/stream-utils.ts"],"sourcesContent":["import { PassThrough, Transform, TransformOptions } from 'stream';\n\nexport interface IReadTarball {\n  abort?: () => void;\n}\n\nexport interface IUploadTarball {\n  done?: () => void;\n  abort?: () => void;\n}\n\n/**\n * This stream is used to read tarballs from repository.\n * @param {*} options\n * @return {Stream}\n */\nclass ReadTarball extends PassThrough implements IReadTarball {\n  /**\n   *\n   * @param {Object} options\n   */\n  public constructor(options: TransformOptions) {\n    super(options);\n    // called when data is not needed anymore\n    addAbstractMethods(this, 'abort');\n  }\n\n  public abort(): void {}\n}\n\n/**\n * This stream is used to upload tarballs to a repository.\n * @param {*} options\n * @return {Stream}\n */\nclass UploadTarball extends PassThrough implements IUploadTarball {\n  /**\n   *\n   * @param {Object} options\n   */\n  public constructor(options: any) {\n    super(options);\n    // called when user closes connection before upload finishes\n    addAbstractMethods(this, 'abort');\n\n    // called when upload finishes successfully\n    addAbstractMethods(this, 'done');\n  }\n\n  public abort(): void {}\n  public done(): void {}\n}\n\n/**\n * This function intercepts abstract calls and replays them allowing.\n * us to attach those functions after we are ready to do so\n * @param {*} self\n * @param {*} name\n */\n// Perhaps someone knows a better way to write this\nfunction addAbstractMethods(self: any, name: any): void {\n  self._called_methods = self._called_methods || {};\n\n  self.__defineGetter__(name, function () {\n    return function (): void {\n      self._called_methods[name] = true;\n    };\n  });\n\n  self.__defineSetter__(name, function (fn: any) {\n    delete self[name];\n\n    self[name] = fn;\n\n    // eslint-disable-next-line @typescript-eslint/prefer-optional-chain\n    if (self._called_methods && self._called_methods[name]) {\n      delete self._called_methods[name];\n\n      self[name]();\n    }\n  });\n}\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream) => {\n  const chunks: Buffer[] = [];\n  for await (let chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { ReadTarball, UploadTarball, readableToString, transformObjectToString };\n"],"mappings":";;;;;;;AAAA;;AAWA;AACA;AACA;AACA;AACA;AACA,MAAMA,WAAN,SAA0BC,mBAA1B,CAA8D;EAC5D;AACF;AACA;AACA;EACSC,WAAW,CAACC,OAAD,EAA4B;IAC5C,MAAMA,OAAN,EAD4C,CAE5C;;IACAC,kBAAkB,CAAC,IAAD,EAAO,OAAP,CAAlB;EACD;;EAEMC,KAAK,GAAS,CAAE;;AAXqC;AAc9D;AACA;AACA;AACA;AACA;;;;;AACA,MAAMC,aAAN,SAA4BL,mBAA5B,CAAkE;EAChE;AACF;AACA;AACA;EACSC,WAAW,CAACC,OAAD,EAAe;IAC/B,MAAMA,OAAN,EAD+B,CAE/B;;IACAC,kBAAkB,CAAC,IAAD,EAAO,OAAP,CAAlB,CAH+B,CAK/B;;IACAA,kBAAkB,CAAC,IAAD,EAAO,MAAP,CAAlB;EACD;;EAEMC,KAAK,GAAS,CAAE;;EAChBE,IAAI,GAAS,CAAE;;AAf0C;AAkBlE;AACA;AACA;AACA;AACA;AACA;AACA;;;;;AACA,SAASH,kBAAT,CAA4BI,IAA5B,EAAuCC,IAAvC,EAAwD;EACtDD,IAAI,CAACE,eAAL,GAAuBF,IAAI,CAACE,eAAL,IAAwB,EAA/C;;EAEAF,IAAI,CAACG,gBAAL,CAAsBF,IAAtB,EAA4B,YAAY;IACtC,OAAO,YAAkB;MACvBD,IAAI,CAACE,eAAL,CAAqBD,IAArB,IAA6B,IAA7B;IACD,CAFD;EAGD,CAJD;;EAMAD,IAAI,CAACI,gBAAL,CAAsBH,IAAtB,EAA4B,UAAUI,EAAV,EAAmB;IAC7C,OAAOL,IAAI,CAACC,IAAD,CAAX;IAEAD,IAAI,CAACC,IAAD,CAAJ,GAAaI,EAAb,CAH6C,CAK7C;;IACA,IAAIL,IAAI,CAACE,eAAL,IAAwBF,IAAI,CAACE,eAAL,CAAqBD,IAArB,CAA5B,EAAwD;MACtD,OAAOD,IAAI,CAACE,eAAL,CAAqBD,IAArB,CAAP;MAEAD,IAAI,CAACC,IAAD,CAAJ;IACD;EACF,CAXD;AAYD;AAED;AACA;AACA;;;AACA,MAAMK,gBAAgB,GAAG,MAAOC,MAAP,IAAkB;EACzC,MAAMC,MAAgB,GAAG,EAAzB;;EACA,WAAW,IAAIC,KAAf,IAAwBF,MAAxB,EAAgC;IAC9BC,MAAM,CAACE,IAAP,CAAYC,MAAM,CAACC,IAAP,CAAYH,KAAZ,CAAZ;EACD;;EACD,MAAMI,MAAM,GAAGF,MAAM,CAACG,MAAP,CAAcN,MAAd,CAAf;EACA,MAAMO,GAAG,GAAGF,MAAM,CAACG,QAAP,CAAgB,OAAhB,CAAZ;EACA,OAAOD,GAAP;AACD,CARD;AAUA;AACA;AACA;;;;;AACA,MAAME,uBAAuB,GAAG,MAAM;EACpC,OAAO,IAAIC,iBAAJ,CAAc;IACnBC,UAAU,EAAE,IADO;IAEnBC,SAAS,EAAE,CAACX,KAAD,EAAQY,QAAR,EAAkBC,QAAlB,KAA+B;MACxCA,QAAQ,CAAC,IAAD,EAAOC,IAAI,CAACC,SAAL,CAAef,KAAf,CAAP,CAAR;IACD;EAJkB,CAAd,CAAP;AAMD,CAPD"}

package/build/validation-utils.d.ts

@@ -1,4 +1,5 @@
-import { Package } from '@verdaccio/types';
+import { Manifest } from '@verdaccio/types';
+export { validatePublishSingleVersion } from './schemes/publish-manifest';
 export declare function isPackageNameScoped(name: string): boolean;
 /**
  * From normalize-package-data/lib/fixer.js
@@ -14,11 +15,12 @@ export declare function validatePackage(name: string): boolean;
 /**
  * Validate the package metadata, add additional properties whether are missing within
  * the metadata properties.
- * @param {*} object
+ * @param {*} manifest
  * @param {*} name
  * @return {Object} the object with additional properties as dist-tags ad versions
+ * FUTURE: rename to normalizeMetadata
  */
-export declare function validateMetadata(object: Package, name: string): Package;
+export declare function normalizeMetadata(manifest: Manifest, name: string): Manifest;
 /**
  * Check whether an element is an Object
  * @param {*} obj the element

package/build/validation-utils.js

@@ -5,14 +5,22 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.isObject = isObject;
 exports.isPackageNameScoped = isPackageNameScoped;
-exports.validateMetadata = validateMetadata;
+exports.normalizeMetadata = normalizeMetadata;
 exports.validateName = validateName;
 exports.validatePackage = validatePackage;
+Object.defineProperty(exports, "validatePublishSingleVersion", {
+  enumerable: true,
+  get: function () {
+    return _publishManifest.validatePublishSingleVersion;
+  }
+});
 
 var _assert = _interopRequireDefault(require("assert"));
 
 var _constants = require("./constants");
 
+var _publishManifest = require("./schemes/publish-manifest");
+
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 function isPackageNameScoped(name) {
@@ -73,30 +81,33 @@ function validatePackage(name) {
 /**
  * Validate the package metadata, add additional properties whether are missing within
  * the metadata properties.
- * @param {*} object
+ * @param {*} manifest
  * @param {*} name
  * @return {Object} the object with additional properties as dist-tags ad versions
+ * FUTURE: rename to normalizeMetadata
  */
 
 
-function validateMetadata(object, name) {
-  (0, _assert.default)(isObject(object), 'not a json object');
+function normalizeMetadata(manifest, name) {
+  _assert.default.strictEqual(manifest.name, name);
 
-  _assert.default.strictEqual(object.name, name);
+  const _manifest = { ...manifest
+  };
+
+  if (!isObject(manifest[_constants.DIST_TAGS])) {
+    _manifest[_constants.DIST_TAGS] = {};
+  } // This may not be nee dit
 
-  if (!isObject(object[_constants.DIST_TAGS])) {
-    object[_constants.DIST_TAGS] = {};
-  }
 
-  if (!isObject(object['versions'])) {
-    object['versions'] = {};
+  if (!isObject(manifest['versions'])) {
+    _manifest['versions'] = {};
   }
 
-  if (!isObject(object['time'])) {
-    object['time'] = {};
+  if (!isObject(manifest['time'])) {
+    _manifest['time'] = {};
   }
 
-  return object;
+  return _manifest;
 }
 /**
  * Check whether an element is an Object
@@ -106,7 +117,7 @@ function validateMetadata(object, name) {
 
 
 function isObject(obj) {
-  if (obj === null || typeof obj === 'undefined') {
+  if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {
     return false;
   }
 

package/build/validation-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/validation-utils.ts"],"names":["isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","validateMetadata","object","isObject","assert","strictEqual","DIST_TAGS","obj","prototype","Array","isArray"],"mappings":";;;;;;;;;;;AAAA;;AAEA;;;;AAEO,SAASA,mBAAT,CAA6BC,IAA7B,EAAoD;AACzD,SAAOA,IAAI,CAACC,UAAL,CAAgB,GAAhB,CAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,YAAT,CAAsBF,IAAtB,EAA6C;AAClD,MAAI,OAAOA,IAAP,KAAgB,QAApB,EAA8B;AAC5B,WAAO,KAAP;AACD;;AAED,MAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAL,EAA7B;AAEA,QAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAD,CAA7C;AACA,QAAMM,UAAU,GAAGN,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,EAAmB,CAAnB,CAAnB;;AAEA,MAAIF,QAAQ,IAAI,OAAOC,UAAP,KAAsB,WAAtC,EAAmD;AACjDH,IAAAA,cAAc,GAAGG,UAAU,CAACF,WAAX,EAAjB;AACD;AAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AACE,SAAO,EACL,CAACD,cAAc,CAACK,KAAf,CAAqB,0BAArB,CAAD,IACAL,cAAc,CAACF,UAAf,CAA0B,GAA1B,CADA,IACkC;AAClC,GAAC,cAAD,EAAiB,WAAjB,EAA8B,aAA9B,EAA6CQ,QAA7C,CAAsDN,cAAtD,CAHK,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASO,eAAT,CAAyBV,IAAzB,EAAgD;AACrD,QAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,CAAjB;;AACA,MAAII,QAAQ,CAACC,MAAT,KAAoB,CAAxB,EAA2B;AACzB;AACA,WAAOV,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnB;AACD,GALoD,CAMrD;;;AACA,SAAOA,QAAQ,CAAC,CAAD,CAAR,CAAY,CAAZ,MAAmB,GAAnB,IAA0BT,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAR,CAAYE,KAAZ,CAAkB,CAAlB,CAAD,CAAtC,IAAgEX,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnF;AACD;AAED;AACA;AACA;AACA;AACA;AACA;AACA;;;AACO,SAASG,gBAAT,CAA0BC,MAA1B,EAA2Cf,IAA3C,EAAkE;AACvE,uBAAOgB,QAAQ,CAACD,MAAD,CAAf,EAAyB,mBAAzB;;AACAE,kBAAOC,WAAP,CAAmBH,MAAM,CAACf,IAA1B,EAAgCA,IAAhC;;AAEA,MAAI,CAACgB,QAAQ,CAACD,MAAM,CAACI,oBAAD,CAAP,CAAb,EAAkC;AAChCJ,IAAAA,MAAM,CAACI,oBAAD,CAAN,GAAoB,EAApB;AACD;;AAED,MAAI,CAACH,QAAQ,CAACD,MAAM,CAAC,UAAD,CAAP,CAAb,EAAmC;AACjCA,IAAAA,MAAM,CAAC,UAAD,CAAN,GAAqB,EAArB;AACD;;AAED,MAAI,CAACC,QAAQ,CAACD,MAAM,CAAC,MAAD,CAAP,CAAb,EAA+B;AAC7BA,IAAAA,MAAM,CAAC,MAAD,CAAN,GAAiB,EAAjB;AACD;;AAED,SAAOA,MAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,QAAT,CAAkBI,GAAlB,EAAqC;AAC1C,MAAIA,GAAG,KAAK,IAAR,IAAgB,OAAOA,GAAP,KAAe,WAAnC,EAAgD;AAC9C,WAAO,KAAP;AACD;;AAED,SACE,CAAC,OAAOA,GAAP,KAAe,QAAf,IAA2B,OAAOA,GAAG,CAACC,SAAX,KAAyB,WAArD,KACAC,KAAK,CAACC,OAAN,CAAcH,GAAd,MAAuB,KAFzB;AAID","sourcesContent":["import assert from 'assert';\nimport { Package } from '@verdaccio/types';\nimport { DIST_TAGS } from './constants';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} object\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function validateMetadata(object: Package, name: string): Package {\n  assert(isObject(object), 'not a json object');\n  assert.strictEqual(object.name, name);\n\n  if (!isObject(object[DIST_TAGS])) {\n    object[DIST_TAGS] = {};\n  }\n\n  if (!isObject(object['versions'])) {\n    object['versions'] = {};\n  }\n\n  if (!isObject(object['time'])) {\n    object['time'] = {};\n  }\n\n  return object;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  if (obj === null || typeof obj === 'undefined') {\n    return false;\n  }\n\n  return (\n    (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n    Array.isArray(obj) === false\n  );\n}\n"],"file":"validation-utils.js"}
+{"version":3,"file":"validation-utils.js","names":["isPackageNameScoped","name","startsWith","validateName","normalizedName","toLowerCase","isScoped","scopedName","split","match","includes","validatePackage","nameList","length","slice","normalizeMetadata","manifest","assert","strictEqual","_manifest","isObject","DIST_TAGS","obj","prototype","Array","isArray"],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n * FUTURE: rename to normalizeMetadata\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  // This may not be nee dit\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n    return false;\n  }\n\n  return (\n    (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n    Array.isArray(obj) === false\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA;;AAIA;;AAEA;;;;AAEO,SAASA,mBAAT,CAA6BC,IAA7B,EAAoD;EACzD,OAAOA,IAAI,CAACC,UAAL,CAAgB,GAAhB,CAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,YAAT,CAAsBF,IAAtB,EAA6C;EAClD,IAAI,OAAOA,IAAP,KAAgB,QAApB,EAA8B;IAC5B,OAAO,KAAP;EACD;;EAED,IAAIG,cAAsB,GAAGH,IAAI,CAACI,WAAL,EAA7B;EAEA,MAAMC,QAAiB,GAAGN,mBAAmB,CAACC,IAAD,CAA7C;EACA,MAAMM,UAAU,GAAGN,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,EAAmB,CAAnB,CAAnB;;EAEA,IAAIF,QAAQ,IAAI,OAAOC,UAAP,KAAsB,WAAtC,EAAmD;IACjDH,cAAc,GAAGG,UAAU,CAACF,WAAX,EAAjB;EACD;EAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;EACE,OAAO,EACL,CAACD,cAAc,CAACK,KAAf,CAAqB,0BAArB,CAAD,IACAL,cAAc,CAACF,UAAf,CAA0B,GAA1B,CADA,IACkC;EAClC,CAAC,cAAD,EAAiB,WAAjB,EAA8B,aAA9B,EAA6CQ,QAA7C,CAAsDN,cAAtD,CAHK,CAAP;AAKD;AAED;AACA;AACA;AACA;;;AACO,SAASO,eAAT,CAAyBV,IAAzB,EAAgD;EACrD,MAAMW,QAAQ,GAAGX,IAAI,CAACO,KAAL,CAAW,GAAX,EAAgB,CAAhB,CAAjB;;EACA,IAAII,QAAQ,CAACC,MAAT,KAAoB,CAAxB,EAA2B;IACzB;IACA,OAAOV,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnB;EACD,CALoD,CAMrD;;;EACA,OAAOA,QAAQ,CAAC,CAAD,CAAR,CAAY,CAAZ,MAAmB,GAAnB,IAA0BT,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAR,CAAYE,KAAZ,CAAkB,CAAlB,CAAD,CAAtC,IAAgEX,YAAY,CAACS,QAAQ,CAAC,CAAD,CAAT,CAAnF;AACD;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AACO,SAASG,iBAAT,CAA2BC,QAA3B,EAA+Cf,IAA/C,EAAuE;EAC5EgB,eAAA,CAAOC,WAAP,CAAmBF,QAAQ,CAACf,IAA5B,EAAkCA,IAAlC;;EACA,MAAMkB,SAAS,GAAG,EAAE,GAAGH;EAAL,CAAlB;;EAEA,IAAI,CAACI,QAAQ,CAACJ,QAAQ,CAACK,oBAAD,CAAT,CAAb,EAAoC;IAClCF,SAAS,CAACE,oBAAD,CAAT,GAAuB,EAAvB;EACD,CAN2E,CAQ5E;;;EACA,IAAI,CAACD,QAAQ,CAACJ,QAAQ,CAAC,UAAD,CAAT,CAAb,EAAqC;IACnCG,SAAS,CAAC,UAAD,CAAT,GAAwB,EAAxB;EACD;;EAED,IAAI,CAACC,QAAQ,CAACJ,QAAQ,CAAC,MAAD,CAAT,CAAb,EAAiC;IAC/BG,SAAS,CAAC,MAAD,CAAT,GAAoB,EAApB;EACD;;EAED,OAAOA,SAAP;AACD;AAED;AACA;AACA;AACA;AACA;;;AACO,SAASC,QAAT,CAAkBE,GAAlB,EAAqC;EAC1C,IAAIA,GAAG,KAAK,IAAR,IAAgB,OAAOA,GAAP,KAAe,WAA/B,IAA8C,OAAOA,GAAP,KAAe,QAAjE,EAA2E;IACzE,OAAO,KAAP;EACD;;EAED,OACE,CAAC,OAAOA,GAAP,KAAe,QAAf,IAA2B,OAAOA,GAAG,CAACC,SAAX,KAAyB,WAArD,KACAC,KAAK,CAACC,OAAN,CAAcH,GAAd,MAAuB,KAFzB;AAID"}

package/build/warning-utils.d.ts

@@ -1,10 +1,7 @@
 export declare enum Codes {
     VERWAR001 = "VERWAR001",
-    VERWAR002 = "VERWAR002",
     VERWAR003 = "VERWAR003",
     VERWAR004 = "VERWAR004",
-    VERDEP001 = "VERDEP001",
-    VERDEP002 = "VERDEP002",
     VERDEP003 = "VERDEP003"
 }
 export declare function emit(code: any, a?: string, b?: string, c?: string): void;

package/build/warning-utils.js

@@ -6,11 +6,11 @@ Object.defineProperty(exports, "__esModule", {
 exports.Codes = void 0;
 exports.emit = emit;
 
-var _fastifyWarning = _interopRequireDefault(require("fastify-warning"));
+var _processWarning = _interopRequireDefault(require("process-warning"));
 
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-const warningInstance = (0, _fastifyWarning.default)();
+const warningInstance = (0, _processWarning.default)();
 const verdaccioWarning = 'VerdaccioWarning';
 const verdaccioDeprecation = 'VerdaccioDeprecation';
 let Codes;
@@ -18,22 +18,16 @@ exports.Codes = Codes;
 
 (function (Codes) {
   Codes["VERWAR001"] = "VERWAR001";
-  Codes["VERWAR002"] = "VERWAR002";
   Codes["VERWAR003"] = "VERWAR003";
   Codes["VERWAR004"] = "VERWAR004";
-  Codes["VERDEP001"] = "VERDEP001";
-  Codes["VERDEP002"] = "VERDEP002";
   Codes["VERDEP003"] = "VERDEP003";
 })(Codes || (exports.Codes = Codes = {}));
 
 warningInstance.create(verdaccioWarning, Codes.VERWAR001, `Verdaccio doesn't need superuser privileges. don't run it under root`);
-warningInstance.create(verdaccioWarning, Codes.VERWAR002, 'logger is not defined');
 warningInstance.create(verdaccioWarning, Codes.VERWAR003, 'rotating-file type is not longer supported, consider use [logrotate] instead');
 warningInstance.create(verdaccioWarning, Codes.VERWAR004, `invalid address - %s, we expect a port (e.g. "4873"), 
 host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")
 https://verdaccio.org/docs/en/configuration#listen-port`);
-warningInstance.create(verdaccioDeprecation, Codes.VERDEP001, 'config.logs is deprecated, rename configuration to "config.log" in singular');
-warningInstance.create(verdaccioDeprecation, Codes.VERDEP002, 'deprecate: multiple logger configuration is deprecated, please check the migration guide.');
 warningInstance.create(verdaccioDeprecation, Codes.VERDEP003, 'multiple addresses will be deprecated in the next major, only use one');
 
 function emit(code, a, b, c) {

package/build/warning-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/warning-utils.ts"],"names":["warningInstance","verdaccioWarning","verdaccioDeprecation","Codes","create","VERWAR001","VERWAR002","VERWAR003","VERWAR004","VERDEP001","VERDEP002","VERDEP003","emit","code","a","b","c"],"mappings":";;;;;;;;AAAA;;;;AAEA,MAAMA,eAAe,GAAG,8BAAxB;AACA,MAAMC,gBAAgB,GAAG,kBAAzB;AACA,MAAMC,oBAAoB,GAAG,sBAA7B;IAEYC,K;;;WAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;AAAAA,EAAAA,K;GAAAA,K,qBAAAA,K;;AAUZH,eAAe,CAACI,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACE,SAFR,EAGG,sEAHH;AAMAL,eAAe,CAACI,MAAhB,CAAuBH,gBAAvB,EAAyCE,KAAK,CAACG,SAA/C,EAA0D,uBAA1D;AAEAN,eAAe,CAACI,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACI,SAFR,EAGE,8EAHF;AAMAP,eAAe,CAACI,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACK,SAFR,EAGG;AACH;AACA,wDALA;AAQAR,eAAe,CAACI,MAAhB,CACEF,oBADF,EAEEC,KAAK,CAACM,SAFR,EAGE,6EAHF;AAMAT,eAAe,CAACI,MAAhB,CACEF,oBADF,EAEEC,KAAK,CAACO,SAFR,EAGE,2FAHF;AAMAV,eAAe,CAACI,MAAhB,CACEF,oBADF,EAEEC,KAAK,CAACQ,SAFR,EAGE,uEAHF;;AAMO,SAASC,IAAT,CAAcC,IAAd,EAAoBC,CAApB,EAAgCC,CAAhC,EAA4CC,CAA5C,EAAwD;AAC7DhB,EAAAA,eAAe,CAACY,IAAhB,CAAqBC,IAArB,EAA2BC,CAA3B,EAA8BC,CAA9B,EAAiCC,CAAjC;AACD","sourcesContent":["import warning from 'fastify-warning';\n\nconst warningInstance = warning();\nconst verdaccioWarning = 'VerdaccioWarning';\nconst verdaccioDeprecation = 'VerdaccioDeprecation';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR002 = 'VERWAR002',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  VERDEP001 = 'VERDEP001',\n  VERDEP002 = 'VERDEP002',\n  VERDEP003 = 'VERDEP003',\n}\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR001,\n  `Verdaccio doesn't need superuser privileges. don't run it under root`\n);\n\nwarningInstance.create(verdaccioWarning, Codes.VERWAR002, 'logger is not defined');\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR003,\n  'rotating-file type is not longer supported, consider use [logrotate] instead'\n);\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR004,\n  `invalid address - %s, we expect a port (e.g. \"4873\"), \nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/en/configuration#listen-port`\n);\n\nwarningInstance.create(\n  verdaccioDeprecation,\n  Codes.VERDEP001,\n  'config.logs is deprecated, rename configuration to \"config.log\" in singular'\n);\n\nwarningInstance.create(\n  verdaccioDeprecation,\n  Codes.VERDEP002,\n  'deprecate: multiple logger configuration is deprecated, please check the migration guide.'\n);\n\nwarningInstance.create(\n  verdaccioDeprecation,\n  Codes.VERDEP003,\n  'multiple addresses will be deprecated in the next major, only use one'\n);\n\nexport function emit(code, a?: string, b?: string, c?: string) {\n  warningInstance.emit(code, a, b, c);\n}\n"],"file":"warning-utils.js"}
+{"version":3,"file":"warning-utils.js","names":["warningInstance","warning","verdaccioWarning","verdaccioDeprecation","Codes","create","VERWAR001","VERWAR003","VERWAR004","VERDEP003","emit","code","a","b","c"],"sources":["../src/warning-utils.ts"],"sourcesContent":["import warning from 'process-warning';\n\nconst warningInstance = warning();\nconst verdaccioWarning = 'VerdaccioWarning';\nconst verdaccioDeprecation = 'VerdaccioDeprecation';\n\nexport enum Codes {\n  VERWAR001 = 'VERWAR001',\n  VERWAR003 = 'VERWAR003',\n  VERWAR004 = 'VERWAR004',\n  // deprecation warnings\n  VERDEP003 = 'VERDEP003',\n}\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR001,\n  `Verdaccio doesn't need superuser privileges. don't run it under root`\n);\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR003,\n  'rotating-file type is not longer supported, consider use [logrotate] instead'\n);\n\nwarningInstance.create(\n  verdaccioWarning,\n  Codes.VERWAR004,\n  `invalid address - %s, we expect a port (e.g. \"4873\"), \nhost:port (e.g. \"localhost:4873\") or full url '(e.g. \"http://localhost:4873/\")\nhttps://verdaccio.org/docs/en/configuration#listen-port`\n);\n\nwarningInstance.create(\n  verdaccioDeprecation,\n  Codes.VERDEP003,\n  'multiple addresses will be deprecated in the next major, only use one'\n);\n\nexport function emit(code, a?: string, b?: string, c?: string) {\n  warningInstance.emit(code, a, b, c);\n}\n"],"mappings":";;;;;;;;AAAA;;;;AAEA,MAAMA,eAAe,GAAG,IAAAC,uBAAA,GAAxB;AACA,MAAMC,gBAAgB,GAAG,kBAAzB;AACA,MAAMC,oBAAoB,GAAG,sBAA7B;IAEYC,K;;;WAAAA,K;EAAAA,K;EAAAA,K;EAAAA,K;EAAAA,K;GAAAA,K,qBAAAA,K;;AAQZJ,eAAe,CAACK,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACE,SAFR,EAGG,sEAHH;AAMAN,eAAe,CAACK,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACG,SAFR,EAGE,8EAHF;AAMAP,eAAe,CAACK,MAAhB,CACEH,gBADF,EAEEE,KAAK,CAACI,SAFR,EAGG;AACH;AACA,wDALA;AAQAR,eAAe,CAACK,MAAhB,CACEF,oBADF,EAEEC,KAAK,CAACK,SAFR,EAGE,uEAHF;;AAMO,SAASC,IAAT,CAAcC,IAAd,EAAoBC,CAApB,EAAgCC,CAAhC,EAA4CC,CAA5C,EAAwD;EAC7Dd,eAAe,CAACU,IAAhB,CAAqBC,IAArB,EAA2BC,CAA3B,EAA8BC,CAA9B,EAAiCC,CAAjC;AACD"}

package/package.json

@@ -1,58 +1,62 @@
 {
-	"name": "@verdaccio/core",
-	"version": "6.0.0-6-next.3",
-	"description": "core utilities",
-	"keywords": [
-		"private",
-		"package",
-		"repository",
-		"registry",
-		"enterprise",
-		"modules",
-		"proxy",
-		"server",
-		"verdaccio"
-	],
-	"main": "./build/index.js",
-	"types": "./build/index.d.ts",
-	"author": "Juan Picado <juanpicado19@gmail.com>",
-	"license": "MIT",
-	"homepage": "https://verdaccio.org",
-	"engines": {
-		"node": ">=14",
-		"npm": ">=6"
-	},
-	"repository": {
-		"type": "https",
-		"url": "https://github.com/verdaccio/verdaccio",
-		"directory": "packages/core/core"
-	},
-	"bugs": {
-		"url": "https://github.com/verdaccio/verdaccio/issues"
-	},
-	"publishConfig": {
-		"access": "public"
-	},
-	"dependencies": {
-		"http-errors": "1.8.0",
-		"http-status-codes": "2.1.4",
-		"semver": "7.3.5",
-		"fastify-warning": "0.2.0"
-	},
-	"devDependencies": {
-		"@verdaccio/types": "11.0.0-6-next.9"
-	},
-	"funding": {
-		"type": "opencollective",
-		"url": "https://opencollective.com/verdaccio"
-	},
-	"scripts": {
-		"clean": "rimraf ./build",
-		"test": "cross-env NODE_ENV=test BABEL_ENV=test jest",
-		"type-check": "tsc --noEmit -p tsconfig.build.json",
-		"build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
-		"build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
-		"watch": "pnpm build:js -- --watch",
-		"build": "pnpm run build:js && pnpm run build:types"
-	}
-}
+  "name": "@verdaccio/core",
+  "version": "6.0.0-6-next.6",
+  "description": "core utilities",
+  "keywords": [
+    "private",
+    "package",
+    "repository",
+    "registry",
+    "enterprise",
+    "modules",
+    "proxy",
+    "server",
+    "verdaccio"
+  ],
+  "main": "./build/index.js",
+  "types": "./build/index.d.ts",
+  "author": "Juan Picado <juanpicado19@gmail.com>",
+  "license": "MIT",
+  "homepage": "https://verdaccio.org",
+  "engines": {
+    "node": ">=14",
+    "npm": ">=6"
+  },
+  "repository": {
+    "type": "https",
+    "url": "https://github.com/verdaccio/verdaccio",
+    "directory": "packages/core/core"
+  },
+  "bugs": {
+    "url": "https://github.com/verdaccio/verdaccio/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "http-errors": "1.8.1",
+    "http-status-codes": "2.2.0",
+    "semver": "7.3.7",
+    "ajv": "8.11.0",
+    "process-warning": "1.0.0",
+    "core-js": "3.24.1"
+  },
+  "devDependencies": {
+    "lodash": "4.17.21",
+    "@verdaccio/types": "11.0.0-6-next.13"
+  },
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/verdaccio"
+  },
+  "scripts": {
+    "clean": "rimraf ./build",
+    "test": "jest",
+    "type-check": "tsc --noEmit -p tsconfig.build.json",
+    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+    "watch": "pnpm build:js -- --watch",
+    "build": "pnpm run build:js && pnpm run build:types"
+  },
+  "readme": "# Core\n\n[![CircleCI](https://circleci.com/gh/verdaccio/streams.svg?style=svg)](https://circleci.com/gh/ayusharma/@verdaccio/streams)\n[![codecov](https://codecov.io/gh/verdaccio/streams/branch/master/graph/badge.svg)](https://codecov.io/gh/verdaccio/streams)\n[![verdaccio (latest)](https://img.shields.io/npm/v/@verdaccio/streams/latest.svg)](https://www.npmjs.com/package/@verdaccio/streams)\n[![backers](https://opencollective.com/verdaccio/tiers/backer/badge.svg?label=Backer&color=brightgreen)](https://opencollective.com/verdaccio)\n[![discord](https://img.shields.io/discord/388674437219745793.svg)](http://chat.verdaccio.org/)\n![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)\n[![node](https://img.shields.io/node/v/@verdaccio/streams/latest.svg)](https://www.npmjs.com/package/@verdaccio/streams)\n\nThis project provides an extension of `PassThrough` stream.\n\n## Detail\n\nIt provides 2 additional methods `abort()` and `done()`. Those implementations are widely use in the verdaccio core for handle `tarballs`.\n\n## License\n\nMIT (http://www.opensource.org/licenses/mit-license.php)\n"
+}

package/src/constants.ts

@@ -19,6 +19,7 @@ export const CHARACTER_ENCODING = {
   UTF8: 'utf8',
 };
 
+// @deprecated use Bearer instead
 export const TOKEN_BASIC = 'Basic';
 export const TOKEN_BEARER = 'Bearer';
 
@@ -42,6 +43,7 @@ export const HEADERS = {
   CSP: 'Content-Security-Policy',
   CTO: 'X-Content-Type-Options',
   XSS: 'X-XSS-Protection',
+  NONE_MATCH: 'If-None-Match',
   ETAG: 'ETag',
   JSON_CHARSET: 'application/json; charset=utf-8',
   OCTET_STREAM: 'application/octet-stream; charset=utf-8',
@@ -82,6 +84,7 @@ export const API_MESSAGE = {
   TAG_UPDATED: 'tags updated',
   TAG_REMOVED: 'tag removed',
   TAG_ADDED: 'package tagged',
+  OK: 'ok',
   LOGGED_OUT: 'Logged out',
 };
 
@@ -89,3 +92,18 @@ export const LOG_STATUS_MESSAGE =
   "@{status}, user: @{user}(@{remoteIP}), req: '@{request.method} @{request.url}'";
 export const LOG_VERDACCIO_ERROR = `${LOG_STATUS_MESSAGE}, error: @{!error}`;
 export const LOG_VERDACCIO_BYTES = `${LOG_STATUS_MESSAGE}, bytes: @{bytes.in}/@{bytes.out}`;
+
+export const ROLES = {
+  $ALL: '$all',
+  ALL: 'all',
+  $AUTH: '$authenticated',
+  $ANONYMOUS: '$anonymous',
+  DEPRECATED_ALL: '@all',
+  DEPRECATED_AUTH: '@authenticated',
+  DEPRECATED_ANONYMOUS: '@anonymous',
+};
+
+export const PACKAGE_ACCESS = {
+  SCOPE: '@*/*',
+  ALL: '**',
+};

package/src/error-utils.ts

@@ -1,4 +1,5 @@
 import createError, { HttpError } from 'http-errors';
+
 import { DEFAULT_MIN_LIMIT_PASSWORD, HTTP_STATUS } from './constants';
 
 export const API_ERROR = {
@@ -19,10 +20,12 @@ export const API_ERROR = {
   NOT_PACKAGE_UPLINK: 'package does not exist on uplink',
   UPLINK_OFFLINE_PUBLISH: 'one of the uplinks is down, refuse to publish',
   UPLINK_OFFLINE: 'uplink is offline',
+  NOT_MODIFIED_NO_DATA: 'no data',
   CONTENT_MISMATCH: 'content length mismatch',
   NOT_FILE_UPLINK: "file doesn't exist on uplink",
   MAX_USERS_REACHED: 'maximum amount of users reached',
   VERSION_NOT_EXIST: "this version doesn't exist",
+  NO_SUCH_FILE: 'no such file available',
   UNSUPORTED_REGISTRY_CALL: 'unsupported registry call',
   FILE_NOT_FOUND: 'File not found',
   REGISTRATION_DISABLED: 'user registration disabled',

package/src/file-utils.ts

@@ -1,3 +1,29 @@
+import { mkdir, mkdtemp } from 'fs/promises';
+import os from 'os';
+import path from 'path';
+
 export const Files = {
   DatabaseName: '.verdaccio-db.json',
 };
+
+/**
+ * Create a temporary folder.
+ * @param prefix The prefix of the folder name.
+ * @returns string
+ */
+export async function createTempFolder(prefix: string): Promise<string> {
+  return await mkdtemp(path.join(os.tmpdir(), prefix));
+}
+
+/**
+ * Create temporary folder for an asset.
+ * @param prefix
+ * @param folder name
+ * @returns
+ */
+export async function createTempStorageFolder(prefix: string, folder = 'storage'): Promise<string> {
+  const tempFolder = await createTempFolder(prefix);
+  const storageFolder = path.join(tempFolder, folder);
+  await mkdir(storageFolder);
+  return storageFolder;
+}

package/src/index.ts

@@ -1,11 +1,11 @@
-import * as searchUtils from './search-utils';
-import * as streamUtils from './stream-utils';
-import * as errorUtils from './error-utils';
-import * as validatioUtils from './validation-utils';
 import * as constants from './constants';
-import * as pluginUtils from './plugin-utils';
+import * as errorUtils from './error-utils';
 import * as fileUtils from './file-utils';
 import * as pkgUtils from './pkg-utils';
+import * as pluginUtils from './plugin-utils';
+import * as searchUtils from './search-utils';
+import * as streamUtils from './stream-utils';
+import * as validatioUtils from './validation-utils';
 import * as warningUtils from './warning-utils';
 
 export { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';
@@ -23,14 +23,16 @@ export {
   DEFAULT_USER,
   USERS,
 } from './constants';
-
+const validationUtils = validatioUtils;
 export {
   fileUtils,
   pkgUtils,
   searchUtils,
   streamUtils,
   errorUtils,
+  // TODO: remove this typo
   validatioUtils,
+  validationUtils,
   constants,
   pluginUtils,
   warningUtils,

package/src/pkg-utils.ts

@@ -1,7 +1,22 @@
-import { Package } from '@verdaccio/types';
 import semver from 'semver';
+import { URL } from 'url';
+
+import { Manifest } from '@verdaccio/types';
+
 import { DIST_TAGS } from './constants';
 
+/**
+ * Extract the tarball name from a registry dist url
+ * 'https://registry.npmjs.org/test/-/test-0.0.2.tgz'
+ * @param tarball tarball url
+ * @returns tarball filename
+ */
+export function extractTarballName(tarball: string) {
+  const urlObject: any = new URL(tarball);
+  const filename = urlObject.pathname.replace(/^.*\//, '');
+  return filename;
+}
+
 /**
  * Function filters out bad semver versions and sorts the array.
  * @return {Array} sorted Array
@@ -22,7 +37,7 @@ export function semverSort(listVersions: string[]): string[] {
  * Get the latest publihsed version of a package.
  * @param package metadata
  **/
-export function getLatest(pkg: Package): string {
+export function getLatest(pkg: Manifest): string {
   const listVersions: string[] = Object.keys(pkg.versions);
   if (listVersions.length < 1) {
     throw Error('cannot get lastest version of none');
@@ -40,8 +55,10 @@ export function getLatest(pkg: Package): string {
   * @param {*} local
   * @param {*} upstream
   * @param {*} config sds
+  * @deprecated use @verdaccio/storage mergeVersions method
   */
-export function mergeVersions(local: Package, upstream: Package) {
+// @deprecated
+export function mergeVersions(local: Manifest, upstream: Manifest) {
   // copy new versions to a cache
   // NOTE: if a certain version was updated, we can't refresh it reliably
   for (const i in upstream.versions) {