@verdaccio/core 8.0.0-next-8.11 → 8.0.0-next-8.13

package/src/string-utils.ts

@@ -1,36 +0,0 @@
-/**
- * Quality values, or q-values and q-factors, are used to describe the order
- * of priority of values in a comma-separated list.
- * It is a special syntax allowed in some HTTP headers and in HTML.
- * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values
- * @param headerValue
- */
-export function getByQualityPriorityValue(headerValue: string | undefined | null): string {
-  if (typeof headerValue !== 'string') {
-    return '';
-  }
-
-  const split = headerValue.split(',');
-
-  if (split.length <= 1) {
-    const qList = split[0].split(';');
-    return qList[0];
-  }
-
-  let [header] = split
-    .reduce((acc, item: string) => {
-      const qList = item.split(';');
-      if (qList.length > 1) {
-        const [accept, q] = qList;
-        const [, query] = q.split('=');
-        acc.push([accept.trim(), query ? query : 0]);
-      } else {
-        acc.push([qList[0], 0]);
-      }
-      return acc;
-    }, [] as any)
-    .sort(function (a: number[], b: number[]) {
-      return b[1] - a[1];
-    });
-  return header[0];
-}

package/src/tarball-utils.ts

@@ -1,43 +0,0 @@
-import { URL } from 'url';
-
-/**
- * Return package version from tarball name
- *
- * test-1.2.4.tgz -> 1.2.4
- * @param {String} fileName
- * @returns {String}
- */
-export function getVersionFromTarball(fileName: string): string | void {
-  const groups = fileName.replace(/\.tgz$/, '').match(/^[^/]+-(\d+\.\d+\.\d+.*)/);
-
-  return groups !== null ? groups[1] : undefined;
-}
-
-/**
- * Extract the tarball name from a registry dist url
- *
- * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz
- * @param tarball tarball url
- * @returns tarball filename
- */
-export function extractTarballFromUrl(url: string): string {
-  const urlObject = new URL(url);
-  return urlObject.pathname.replace(/^.*\//, '');
-}
-
-/**
- * Build the tarball filename from paackage name and version
- *
- * test, 1.2.4 -> test-1.2.4.tgz
- * @scope/name, 1.2.4 -> name-1.2.4.tgz
- * @param name package name
- * @param version package version
- * @returns tarball filename
- */
-export function composeTarballFromPackage(name: string, version: string): string {
-  if (name.includes('/')) {
-    return `${name.split('/')[1]}-${version}.tgz`;
-  } else {
-    return `${name}-${version}.tgz`;
-  }
-}

package/src/validation-utils.ts

@@ -1,128 +0,0 @@
-import assert from 'assert';
-
-import { Manifest } from '@verdaccio/types';
-
-import { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';
-
-export { validatePublishSingleVersion } from './schemes/publish-manifest';
-export { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';
-
-export function isPackageNameScoped(name: string): boolean {
-  return name.startsWith('@');
-}
-
-/**
- * From normalize-package-data/lib/fixer.js
- * @param {*} name  the package name
- * @return {Boolean} whether is valid or not
- */
-export function validateName(name: string): boolean {
-  if (typeof name !== 'string') {
-    return false;
-  }
-
-  let normalizedName: string = name.toLowerCase();
-
-  const isScoped: boolean = isPackageNameScoped(name);
-  const scopedName = name.split('/', 2)[1];
-
-  if (isScoped && typeof scopedName !== 'undefined') {
-    normalizedName = scopedName.toLowerCase();
-  }
-
-  /**
-   * Some context about the first regex
-   * - npm used to have a different tarball naming system.
-   * eg: http://registry.npmjs.com/thirty-two
-   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz
-   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)
-   * while nowadays the naming system is based in dashes
-   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz
-   *
-   * more info here: https://github.com/rlidwka/sinopia/issues/75
-   */
-  return !(
-    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||
-    normalizedName.startsWith('.') || // ".bin", etc.
-    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)
-  );
-}
-
-/**
- * Validate a package.
- * @return {Boolean} whether the package is valid or not
- */
-export function validatePackage(name: string): boolean {
-  const nameList = name.split('/', 2);
-  if (nameList.length === 1) {
-    // normal package
-    return validateName(nameList[0]);
-  }
-  // scoped package
-  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);
-}
-
-/**
- * Validate the package metadata, add additional properties whether are missing within
- * the metadata properties.
- * @param {*} manifest
- * @param {*} name
- * @return {Object} the object with additional properties as dist-tags ad versions
- */
-export function normalizeMetadata(manifest: Manifest, name: string): Manifest {
-  assert.strictEqual(manifest.name, name);
-  const _manifest = { ...manifest };
-
-  if (!isObject(manifest[DIST_TAGS])) {
-    _manifest[DIST_TAGS] = {};
-  }
-
-  if (!Array.isArray(manifest[MAINTAINERS])) {
-    _manifest[MAINTAINERS] = [];
-  }
-
-  // This may not be needed
-  if (!isObject(manifest['versions'])) {
-    _manifest['versions'] = {};
-  }
-
-  if (!isObject(manifest['time'])) {
-    _manifest['time'] = {};
-  }
-
-  return _manifest;
-}
-
-/**
- * Check whether an element is an Object
- * @param {*} obj the element
- * @return {Boolean}
- */
-export function isObject(obj: any): boolean {
-  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {
-  //   return false;
-  // }
-
-  // return (
-  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&
-  //   Array.isArray(obj) === false
-  // );
-  return Object.prototype.toString.call(obj) === '[object Object]';
-}
-
-export function validatePassword(
-  password: string,
-  validation: RegExp = DEFAULT_PASSWORD_VALIDATION
-): boolean {
-  return typeof password === 'string' && validation instanceof RegExp
-    ? password.match(validation) !== null
-    : false;
-}
-
-export function validateUserName(userName: any, expectedName: string): boolean {
-  return (
-    typeof userName === 'string' &&
-    userName.split(':')[0] === 'org.couchdb.user' &&
-    userName.split(':')[1] === expectedName
-  );
-}

package/src/warning-utils.ts

@@ -1,69 +0,0 @@
-import warning from 'process-warning';
-
-const warningInstance = warning();
-const verdaccioWarning = 'VerdaccioWarning';
-const verdaccioDeprecation = 'VerdaccioDeprecation';
-
-export enum Codes {
-  VERWAR001 = 'VERWAR001',
-  VERWAR002 = 'VERWAR002',
-  VERWAR003 = 'VERWAR003',
-  VERWAR004 = 'VERWAR004',
-  // deprecation warnings
-  VERDEP003 = 'VERDEP003',
-  VERWAR006 = 'VERWAR006',
-  VERWAR007 = 'VERWAR007',
-}
-
-/* general warnings */
-
-warningInstance.create(
-  verdaccioWarning,
-  Codes.VERWAR001,
-  `Verdaccio doesn't need superuser privileges. don't run it under root`
-);
-
-warningInstance.create(
-  verdaccioWarning,
-  Codes.VERWAR002,
-  `The configuration property "logs" has been deprecated, please rename to "log" for future compatibility`
-);
-
-warningInstance.create(
-  verdaccioWarning,
-  Codes.VERWAR003,
-  'rotating-file type is not longer supported, consider use [logrotate] instead'
-);
-
-warningInstance.create(
-  verdaccioWarning,
-  Codes.VERWAR004,
-  `invalid address - %s, we expect a port (e.g. "4873"), 
-host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")
-https://verdaccio.org/docs/en/configuration#listen-port`
-);
-
-warningInstance.create(
-  verdaccioDeprecation,
-  Codes.VERWAR006,
-  'the auth plugin method "add_user" in the auth plugin is deprecated and will be removed in next major release, rename to "adduser"'
-);
-
-warningInstance.create(
-  verdaccioDeprecation,
-  Codes.VERWAR007,
-  `the secret length is too long, it must be 32 characters long, please consider generate a new one 
-  Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db`
-);
-
-/* deprecation warnings */
-
-warningInstance.create(
-  verdaccioDeprecation,
-  Codes.VERDEP003,
-  'multiple addresses will be deprecated in the next major, only use one'
-);
-
-export function emit(code: string, a?: string, b?: string, c?: string) {
-  warningInstance.emit(code, a, b, c);
-}

package/test/errors.spec.ts

@@ -1,109 +0,0 @@
-import _ from 'lodash';
-import { describe, expect, test } from 'vitest';
-
-import { HTTP_STATUS } from '../src/constants';
-import {
-  API_ERROR,
-  VerdaccioError,
-  getBadData,
-  getCode,
-  getConflict,
-  getForbidden,
-  getInternalError,
-  getNotFound,
-  getServiceUnavailable,
-  getUnauthorized,
-} from '../src/error-utils';
-
-describe('testing errors', () => {
-  test('should qualify as an native error', () => {
-    expect(_.isError(getNotFound())).toBeTruthy();
-    expect(_.isError(getConflict())).toBeTruthy();
-    expect(_.isError(getBadData())).toBeTruthy();
-    expect(_.isError(getInternalError())).toBeTruthy();
-    expect(_.isError(getUnauthorized())).toBeTruthy();
-    expect(_.isError(getForbidden())).toBeTruthy();
-    expect(_.isError(getServiceUnavailable())).toBeTruthy();
-    expect(_.isError(getCode(400, 'fooError'))).toBeTruthy();
-  });
-
-  test('should test not found', () => {
-    const err: VerdaccioError = getNotFound('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.NOT_FOUND);
-    expect(err.statusCode).toEqual(HTTP_STATUS.NOT_FOUND);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test conflict', () => {
-    const err: VerdaccioError = getConflict('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.CONFLICT);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test bad data', () => {
-    const err: VerdaccioError = getBadData('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.BAD_DATA);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test internal error custom message', () => {
-    const err: VerdaccioError = getInternalError('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.INTERNAL_ERROR);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test internal error', () => {
-    const err: VerdaccioError = getInternalError();
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.INTERNAL_ERROR);
-    expect(err.message).toEqual(API_ERROR.UNKNOWN_ERROR);
-  });
-
-  test('should test Unauthorized message', () => {
-    const err: VerdaccioError = getUnauthorized('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.UNAUTHORIZED);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test forbidden message', () => {
-    const err: VerdaccioError = getForbidden('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.FORBIDDEN);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test service unavailable message', () => {
-    const err: VerdaccioError = getServiceUnavailable('foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.SERVICE_UNAVAILABLE);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test custom code error message', () => {
-    const err: VerdaccioError = getCode(HTTP_STATUS.NOT_FOUND, 'foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.NOT_FOUND);
-    expect(err.message).toEqual('foo');
-  });
-
-  test('should test custom code ok message', () => {
-    const err: VerdaccioError = getCode(HTTP_STATUS.OK, 'foo');
-
-    expect(err.code).toBeDefined();
-    expect(err.code).toEqual(HTTP_STATUS.OK);
-  });
-});

package/test/merge.dist.tags.spec.ts

@@ -1,64 +0,0 @@
-import { describe, expect, test } from 'vitest';
-
-import { mergeVersions, semverSort } from '../src/pkg-utils';
-
-describe('Storage._merge_versions versions', () => {
-  test('simple', () => {
-    let pkg = {
-      versions: { a: 1, b: 1, c: 1 },
-      'dist-tags': {},
-    };
-
-    // @ts-ignore
-    mergeVersions(pkg, { versions: { a: 2, q: 2 } });
-
-    expect(pkg).toStrictEqual({
-      versions: { a: 1, b: 1, c: 1, q: 2 },
-      'dist-tags': {},
-    });
-  });
-
-  test('dist-tags - compat', () => {
-    let pkg = {
-      versions: {},
-      'dist-tags': { q: '1.1.1', w: '2.2.2' },
-    };
-
-    // @ts-ignore
-    mergeVersions(pkg, { 'dist-tags': { q: '2.2.2', w: '3.3.3', t: '4.4.4' } });
-
-    expect(pkg).toStrictEqual({
-      versions: {},
-      'dist-tags': { q: '2.2.2', w: '3.3.3', t: '4.4.4' },
-    });
-  });
-
-  test('dist-tags - staging', () => {
-    let pkg = {
-      versions: {},
-      // we've been locally publishing 1.1.x in preparation for the next
-      // public release
-      'dist-tags': { q: '1.1.10', w: '2.2.2' },
-    };
-    // 1.1.2 is the latest public release, but we want to continue testing
-    // against our local 1.1.10, which may end up published as 1.1.3 in the
-    // future
-
-    // @ts-ignore
-    mergeVersions(pkg, { 'dist-tags': { q: '1.1.2', w: '3.3.3', t: '4.4.4' } });
-
-    expect(pkg).toStrictEqual({
-      versions: {},
-      'dist-tags': { q: '1.1.10', w: '3.3.3', t: '4.4.4' },
-    });
-  });
-
-  test('semverSort', () => {
-    expect(semverSort(['1.2.3', '1.2', '1.2.3a', '1.2.3c', '1.2.3-b'])).toStrictEqual([
-      '1.2.3a',
-      '1.2.3-b',
-      '1.2.3c',
-      '1.2.3',
-    ]);
-  });
-});

package/test/mystreams.spec.ts

@@ -1,18 +0,0 @@
-import { Stream } from 'stream';
-import { describe, expect, test } from 'vitest';
-
-import { readableToString } from '../src/stream-utils';
-
-describe('mystreams', () => {
-  test('readableToString single string', async () => {
-    expect(await readableToString(Stream.Readable.from('foo'))).toEqual('foo');
-  });
-
-  test('readableToString single object', async () => {
-    expect(
-      JSON.parse(await readableToString(Stream.Readable.from(JSON.stringify({ foo: 1 }))))
-    ).toEqual({
-      foo: 1,
-    });
-  });
-});

package/test/pkg-utils.spec.ts

@@ -1,28 +0,0 @@
-import { describe, expect, test } from 'vitest';
-
-import { DIST_TAGS, pkgUtils } from '../src';
-
-describe('pkg-utils', () => {
-  test('getLatest fails if no versions', () => {
-    expect(() =>
-      // @ts-expect-error
-      pkgUtils.getLatest({
-        versions: {},
-      })
-    ).toThrow('cannot get lastest version of none');
-  });
-
-  test('getLatest get latest', () => {
-    expect(
-      pkgUtils.getLatest({
-        versions: {
-          // @ts-expect-error
-          '1.0.0': {},
-        },
-        [DIST_TAGS]: {
-          latest: '1.0.0',
-        },
-      })
-    ).toBe('1.0.0');
-  });
-});

package/test/publish-manifest.spec.ts

@@ -1,61 +0,0 @@
-import { describe, expect, test } from 'vitest';
-
-import { validatePublishSingleVersion } from '../src/schemes/publish-manifest';
-
-describe('validatePublishSingleVersion', () => {
-  describe('valid cases', () => {
-    test('should validate a manifest when name and versions are present, even with extra properties', () => {
-      const manifest = {
-        name: 'foo-pkg',
-        _attachments: { '2': {} },
-        versions: { '1': {} },
-        something: 'else',
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(true);
-    });
-  });
-
-  describe('invalid cases', () => {
-    test('should invalidate a manifest when name is missing', () => {
-      const manifest = {
-        _attachments: { '2': {} },
-        versions: { '1': {} },
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(false);
-    });
-
-    test('should invalidate a manifest when _attachments is missing', () => {
-      const manifest = {
-        name: 'foo-pkg',
-        versions: { '1': {} },
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(false);
-    });
-
-    test('should invalidate a manifest when versions is missing', () => {
-      const manifest = {
-        name: 'foo-pkg',
-        _attachments: { '1': {} },
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(false);
-    });
-
-    test('should invalidate a manifest when versions contains more than one entry', () => {
-      const manifest = {
-        name: 'foo-pkg',
-        versions: { '1': {}, '2': {} },
-        _attachments: { '1': {} },
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(false);
-    });
-
-    test('should invalidate a manifest when _attachments contains more than one entry', () => {
-      const manifest = {
-        name: 'foo-pkg',
-        _attachments: { '1': {}, '2': {} },
-        versions: { '1': {} },
-      };
-      expect(validatePublishSingleVersion(manifest)).toBe(false);
-    });
-  });
-});

package/test/string-utils.spec.ts

@@ -1,42 +0,0 @@
-import { describe, expect, test } from 'vitest';
-
-import { stringUtils } from '../src';
-
-describe('string-utils', () => {
-  test('getByQualityPriorityValue', () => {
-    expect(stringUtils.getByQualityPriorityValue('')).toEqual('');
-    expect(stringUtils.getByQualityPriorityValue(null)).toEqual('');
-    expect(stringUtils.getByQualityPriorityValue(undefined)).toEqual('');
-    expect(stringUtils.getByQualityPriorityValue('something')).toEqual('something');
-    expect(stringUtils.getByQualityPriorityValue('something,')).toEqual('something');
-    expect(stringUtils.getByQualityPriorityValue('0,')).toEqual('0');
-    expect(stringUtils.getByQualityPriorityValue('application/json')).toEqual('application/json');
-    expect(stringUtils.getByQualityPriorityValue('application/json; q=1')).toEqual(
-      'application/json'
-    );
-    expect(stringUtils.getByQualityPriorityValue('application/json; q=')).toEqual(
-      'application/json'
-    );
-    expect(stringUtils.getByQualityPriorityValue('application/json;')).toEqual('application/json');
-    expect(
-      stringUtils.getByQualityPriorityValue(
-        'application/json; q=1.0, application/vnd.npm.install-v1+json; q=0.9, */*'
-      )
-    ).toEqual('application/json');
-    expect(
-      stringUtils.getByQualityPriorityValue(
-        'application/json; q=1.0, application/vnd.npm.install-v1+json; q=, */*'
-      )
-    ).toEqual('application/json');
-    expect(
-      stringUtils.getByQualityPriorityValue(
-        'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.9, */*'
-      )
-    ).toEqual('application/vnd.npm.install-v1+json');
-    expect(
-      stringUtils.getByQualityPriorityValue(
-        'application/vnd.npm.install-v1+json; q=, application/json; q=0.9, */*'
-      )
-    ).toEqual('application/json');
-  });
-});

package/test/tarball-utils.spec.ts

@@ -1,81 +0,0 @@
-import { describe, expect, test } from 'vitest';
-
-import {
-  composeTarballFromPackage,
-  extractTarballFromUrl,
-  getVersionFromTarball,
-} from '../src/tarball-utils';
-
-describe('Utilities', () => {
-  describe('getVersionFromTarball', () => {
-    test('should get the right version', () => {
-      const simpleName = 'test-name-4.2.12.tgz';
-      const complexName = 'test-5.6.4-beta.2.tgz';
-      const otherComplexName = 'test-3.5.0-6.tgz';
-      expect(getVersionFromTarball(simpleName)).toEqual('4.2.12');
-      expect(getVersionFromTarball(complexName)).toEqual('5.6.4-beta.2');
-      expect(getVersionFromTarball(otherComplexName)).toEqual('3.5.0-6');
-    });
-
-    test('should fail at incorrect tarball name', () => {
-      expect(getVersionFromTarball('incorrectName')).toBeUndefined();
-      expect(getVersionFromTarball('test-1.2.tgz')).toBeUndefined();
-    });
-  });
-});
-
-describe('extractTarballFromUrl', () => {
-  const metadata: any = {
-    name: 'npm_test',
-    versions: {
-      '1.0.0': {
-        dist: {
-          tarball: 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz',
-        },
-      },
-      '1.0.1': {
-        dist: {
-          tarball: 'https://localhost:4873/npm_test/-/npm_test-1.0.1.tgz',
-        },
-      },
-      '1.0.2': {
-        dist: {
-          tarball: 'https://localhost/npm_test-1.0.2.tgz',
-        },
-      },
-      '1.0.3': {
-        dist: {
-          tarball: 'http://registry.org/@org/npm_test/-/npm_test-1.0.3.tgz',
-        },
-      },
-    },
-  };
-
-  test('should return only name of tarball', () => {
-    expect(extractTarballFromUrl(metadata.versions['1.0.0'].dist.tarball)).toEqual(
-      'npm_test-1.0.0.tgz'
-    );
-    expect(extractTarballFromUrl(metadata.versions['1.0.1'].dist.tarball)).toEqual(
-      'npm_test-1.0.1.tgz'
-    );
-    expect(extractTarballFromUrl(metadata.versions['1.0.2'].dist.tarball)).toEqual(
-      'npm_test-1.0.2.tgz'
-    );
-    expect(extractTarballFromUrl(metadata.versions['1.0.3'].dist.tarball)).toEqual(
-      'npm_test-1.0.3.tgz'
-    );
-  });
-
-  test('without tarball should not fails', () => {
-    expect(extractTarballFromUrl('https://registry.npmjs.org/')).toBe('');
-  });
-
-  test('fails with incomplete URL', () => {
-    expect(() => extractTarballFromUrl('xxxxregistry.npmjs.org/test/-/test-0.0.2.tgz')).toThrow();
-  });
-});
-
-test('composeTarballFromPackage - should return filename of tarball', () => {
-  expect(composeTarballFromPackage('npm_test', '1.0.0')).toEqual('npm_test-1.0.0.tgz');
-  expect(composeTarballFromPackage('@mbtools/npm_test', '1.0.1')).toEqual('npm_test-1.0.1.tgz');
-});