@verdaccio/core 8.1.1 → 8.1.4

package/build/index.d.ts

@@ -3,6 +3,7 @@ import * as constants from './constants';
 import * as cryptoUtils from './crypto-utils';
 import * as errorUtils from './error-utils';
 import * as fileUtils from './file-utils';
+import * as ipUtils from './ip-utils';
 import * as pkgUtils from './pkg-utils';
 import * as pluginUtils from './plugin-utils';
 import * as searchUtils from './search-utils';
@@ -13,4 +14,4 @@ import * as validationUtils from './validation-utils';
 import * as warningUtils from './warning-utils';
 export { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';
 export { TOKEN_BASIC, TOKEN_BEARER, HTTP_STATUS, API_MESSAGE, HEADERS, DIST_TAGS, CHARACTER_ENCODING, HEADER_TYPE, LATEST, DEFAULT_PASSWORD_VALIDATION, DEFAULT_USER, ANONYMOUS_USER, USERS, MAINTAINERS, PLUGIN_CATEGORY, PLUGIN_PREFIX, PLUGIN_UI_PREFIX, HtpasswdHashAlgorithm, DEFAULT_DOMAIN, DEFAULT_PORT, DEFAULT_PROTOCOL, } from './constants';
-export { authUtils, cryptoUtils, fileUtils, pkgUtils, searchUtils, streamUtils, errorUtils, validationUtils, stringUtils, constants, pluginUtils, warningUtils, tarballUtils, };
+export { authUtils, cryptoUtils, fileUtils, ipUtils, pkgUtils, searchUtils, streamUtils, errorUtils, validationUtils, stringUtils, constants, pluginUtils, warningUtils, tarballUtils, };

package/build/index.js

@@ -153,7 +153,7 @@ Object.defineProperty(exports, "VerdaccioError", {
     return errorUtils.VerdaccioError;
   }
 });
-exports.warningUtils = exports.validationUtils = exports.tarballUtils = exports.stringUtils = exports.streamUtils = exports.searchUtils = exports.pluginUtils = exports.pkgUtils = exports.fileUtils = exports.errorUtils = exports.cryptoUtils = exports.constants = exports.authUtils = void 0;
+exports.warningUtils = exports.validationUtils = exports.tarballUtils = exports.stringUtils = exports.streamUtils = exports.searchUtils = exports.pluginUtils = exports.pkgUtils = exports.ipUtils = exports.fileUtils = exports.errorUtils = exports.cryptoUtils = exports.constants = exports.authUtils = void 0;
 var authUtils = _interopRequireWildcard(require("./auth-utils"));
 exports.authUtils = authUtils;
 var constants = _interopRequireWildcard(require("./constants"));
@@ -164,6 +164,8 @@ var errorUtils = _interopRequireWildcard(require("./error-utils"));
 exports.errorUtils = errorUtils;
 var fileUtils = _interopRequireWildcard(require("./file-utils"));
 exports.fileUtils = fileUtils;
+var ipUtils = _interopRequireWildcard(require("./ip-utils"));
+exports.ipUtils = ipUtils;
 var pkgUtils = _interopRequireWildcard(require("./pkg-utils"));
 exports.pkgUtils = pkgUtils;
 var pluginUtils = _interopRequireWildcard(require("./plugin-utils"));

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["authUtils","_interopRequireWildcard","require","exports","constants","cryptoUtils","errorUtils","fileUtils","pkgUtils","pluginUtils","searchUtils","streamUtils","stringUtils","tarballUtils","validationUtils","warningUtils","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor"],"sources":["../src/index.ts"],"sourcesContent":["import * as authUtils from './auth-utils';\nimport * as constants from './constants';\nimport * as cryptoUtils from './crypto-utils';\nimport * as errorUtils from './error-utils';\nimport * as fileUtils from './file-utils';\nimport * as pkgUtils from './pkg-utils';\nimport * as pluginUtils from './plugin-utils';\nimport * as searchUtils from './search-utils';\nimport * as streamUtils from './stream-utils';\nimport * as stringUtils from './string-utils';\nimport * as tarballUtils from './tarball-utils';\nimport * as validationUtils from './validation-utils';\nimport * as warningUtils from './warning-utils';\n\nexport { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';\nexport {\n  TOKEN_BASIC,\n  TOKEN_BEARER,\n  HTTP_STATUS,\n  API_MESSAGE,\n  HEADERS,\n  DIST_TAGS,\n  CHARACTER_ENCODING,\n  HEADER_TYPE,\n  LATEST,\n  DEFAULT_PASSWORD_VALIDATION,\n  DEFAULT_USER,\n  ANONYMOUS_USER,\n  USERS,\n  MAINTAINERS,\n  PLUGIN_CATEGORY,\n  PLUGIN_PREFIX,\n  PLUGIN_UI_PREFIX,\n  HtpasswdHashAlgorithm,\n  DEFAULT_DOMAIN,\n  DEFAULT_PORT,\n  DEFAULT_PROTOCOL,\n} from './constants';\nexport {\n  authUtils,\n  cryptoUtils,\n  fileUtils,\n  pkgUtils,\n  searchUtils,\n  streamUtils,\n  errorUtils,\n  validationUtils,\n  stringUtils,\n  constants,\n  pluginUtils,\n  warningUtils,\n  tarballUtils,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,SAAA,GAAAC,uBAAA,CAAAC,OAAA;AAA0CC,OAAA,CAAAH,SAAA,GAAAA,SAAA;AAC1C,IAAAI,SAAA,GAAAH,uBAAA,CAAAC,OAAA;AAAyCC,OAAA,CAAAC,SAAA,GAAAA,SAAA;AACzC,IAAAC,WAAA,GAAAJ,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAE,WAAA,GAAAA,WAAA;AAC9C,IAAAC,UAAA,GAAAL,uBAAA,CAAAC,OAAA;AAA4CC,OAAA,CAAAG,UAAA,GAAAA,UAAA;AAC5C,IAAAC,SAAA,GAAAN,uBAAA,CAAAC,OAAA;AAA0CC,OAAA,CAAAI,SAAA,GAAAA,SAAA;AAC1C,IAAAC,QAAA,GAAAP,uBAAA,CAAAC,OAAA;AAAwCC,OAAA,CAAAK,QAAA,GAAAA,QAAA;AACxC,IAAAC,WAAA,GAAAR,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAM,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAT,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAO,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAV,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAQ,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAX,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAS,WAAA,GAAAA,WAAA;AAC9C,IAAAC,YAAA,GAAAZ,uBAAA,CAAAC,OAAA;AAAgDC,OAAA,CAAAU,YAAA,GAAAA,YAAA;AAChD,IAAAC,eAAA,GAAAb,uBAAA,CAAAC,OAAA;AAAsDC,OAAA,CAAAW,eAAA,GAAAA,eAAA;AACtD,IAAAC,YAAA,GAAAd,uBAAA,CAAAC,OAAA;AAAgDC,OAAA,CAAAY,YAAA,GAAAA,YAAA;AAAA,SAAAd,wBAAAe,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAjB,uBAAA,YAAAA,CAAAe,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["authUtils","_interopRequireWildcard","require","exports","constants","cryptoUtils","errorUtils","fileUtils","ipUtils","pkgUtils","pluginUtils","searchUtils","streamUtils","stringUtils","tarballUtils","validationUtils","warningUtils","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor"],"sources":["../src/index.ts"],"sourcesContent":["import * as authUtils from './auth-utils';\nimport * as constants from './constants';\nimport * as cryptoUtils from './crypto-utils';\nimport * as errorUtils from './error-utils';\nimport * as fileUtils from './file-utils';\nimport * as ipUtils from './ip-utils';\nimport * as pkgUtils from './pkg-utils';\nimport * as pluginUtils from './plugin-utils';\nimport * as searchUtils from './search-utils';\nimport * as streamUtils from './stream-utils';\nimport * as stringUtils from './string-utils';\nimport * as tarballUtils from './tarball-utils';\nimport * as validationUtils from './validation-utils';\nimport * as warningUtils from './warning-utils';\n\nexport { VerdaccioError, API_ERROR, SUPPORT_ERRORS, APP_ERROR } from './error-utils';\nexport {\n  TOKEN_BASIC,\n  TOKEN_BEARER,\n  HTTP_STATUS,\n  API_MESSAGE,\n  HEADERS,\n  DIST_TAGS,\n  CHARACTER_ENCODING,\n  HEADER_TYPE,\n  LATEST,\n  DEFAULT_PASSWORD_VALIDATION,\n  DEFAULT_USER,\n  ANONYMOUS_USER,\n  USERS,\n  MAINTAINERS,\n  PLUGIN_CATEGORY,\n  PLUGIN_PREFIX,\n  PLUGIN_UI_PREFIX,\n  HtpasswdHashAlgorithm,\n  DEFAULT_DOMAIN,\n  DEFAULT_PORT,\n  DEFAULT_PROTOCOL,\n} from './constants';\nexport {\n  authUtils,\n  cryptoUtils,\n  fileUtils,\n  ipUtils,\n  pkgUtils,\n  searchUtils,\n  streamUtils,\n  errorUtils,\n  validationUtils,\n  stringUtils,\n  constants,\n  pluginUtils,\n  warningUtils,\n  tarballUtils,\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,SAAA,GAAAC,uBAAA,CAAAC,OAAA;AAA0CC,OAAA,CAAAH,SAAA,GAAAA,SAAA;AAC1C,IAAAI,SAAA,GAAAH,uBAAA,CAAAC,OAAA;AAAyCC,OAAA,CAAAC,SAAA,GAAAA,SAAA;AACzC,IAAAC,WAAA,GAAAJ,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAE,WAAA,GAAAA,WAAA;AAC9C,IAAAC,UAAA,GAAAL,uBAAA,CAAAC,OAAA;AAA4CC,OAAA,CAAAG,UAAA,GAAAA,UAAA;AAC5C,IAAAC,SAAA,GAAAN,uBAAA,CAAAC,OAAA;AAA0CC,OAAA,CAAAI,SAAA,GAAAA,SAAA;AAC1C,IAAAC,OAAA,GAAAP,uBAAA,CAAAC,OAAA;AAAsCC,OAAA,CAAAK,OAAA,GAAAA,OAAA;AACtC,IAAAC,QAAA,GAAAR,uBAAA,CAAAC,OAAA;AAAwCC,OAAA,CAAAM,QAAA,GAAAA,QAAA;AACxC,IAAAC,WAAA,GAAAT,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAO,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAV,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAQ,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAX,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAS,WAAA,GAAAA,WAAA;AAC9C,IAAAC,WAAA,GAAAZ,uBAAA,CAAAC,OAAA;AAA8CC,OAAA,CAAAU,WAAA,GAAAA,WAAA;AAC9C,IAAAC,YAAA,GAAAb,uBAAA,CAAAC,OAAA;AAAgDC,OAAA,CAAAW,YAAA,GAAAA,YAAA;AAChD,IAAAC,eAAA,GAAAd,uBAAA,CAAAC,OAAA;AAAsDC,OAAA,CAAAY,eAAA,GAAAA,eAAA;AACtD,IAAAC,YAAA,GAAAf,uBAAA,CAAAC,OAAA;AAAgDC,OAAA,CAAAa,YAAA,GAAAA,YAAA;AAAA,SAAAf,wBAAAgB,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAlB,uBAAA,YAAAA,CAAAgB,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA","ignoreList":[]}

package/build/ip-utils.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Trim an address and strip the IPv4-mapped IPv6 prefix (`::ffff:`) so that
+ * mapped addresses are compared as plain IPv4.
+ */
+export declare function normalizeAddress(address?: string): string | undefined;
+/**
+ * Convert a dotted-quad IPv4 address into its unsigned 32-bit integer value.
+ */
+export declare function parseIPv4(address: string): number | undefined;
+/**
+ * Whether an IPv4 `address` falls inside the `range`/`prefix` CIDR block.
+ */
+export declare function isIPv4InCIDR(address: string, range: string, prefix: number): boolean;
+/**
+ * Whether `address` is allowed by the provided `cidr` whitelist. An empty or
+ * missing whitelist allows every address; an unparseable address is rejected.
+ */
+export declare function isAddressAllowed(address: string | undefined, cidr: string[] | undefined): boolean;

package/build/ip-utils.js

@@ -0,0 +1,83 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isAddressAllowed = isAddressAllowed;
+exports.isIPv4InCIDR = isIPv4InCIDR;
+exports.normalizeAddress = normalizeAddress;
+exports.parseIPv4 = parseIPv4;
+var _nodeNet = _interopRequireDefault(require("node:net"));
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+const IPV4_MAPPED_PREFIX = '::ffff:';
+
+/**
+ * Trim an address and strip the IPv4-mapped IPv6 prefix (`::ffff:`) so that
+ * mapped addresses are compared as plain IPv4.
+ */
+function normalizeAddress(address) {
+  if (!address) {
+    return;
+  }
+  const trimmedAddress = address.trim();
+  if (trimmedAddress.startsWith(IPV4_MAPPED_PREFIX)) {
+    return trimmedAddress.slice(IPV4_MAPPED_PREFIX.length);
+  }
+  return trimmedAddress;
+}
+
+/**
+ * Convert a dotted-quad IPv4 address into its unsigned 32-bit integer value.
+ */
+function parseIPv4(address) {
+  if (_nodeNet.default.isIP(address) !== 4) {
+    return;
+  }
+  return address.split('.').map(Number).reduce((accumulator, octet) => (accumulator << 8) + octet, 0) >>> 0;
+}
+
+/**
+ * Whether an IPv4 `address` falls inside the `range`/`prefix` CIDR block.
+ */
+function isIPv4InCIDR(address, range, prefix) {
+  const addressNumber = parseIPv4(address);
+  const rangeNumber = parseIPv4(range);
+  if (addressNumber === undefined || rangeNumber === undefined || prefix < 0 || prefix > 32) {
+    return false;
+  }
+  const mask = prefix === 0 ? 0 : 0xffffffff << 32 - prefix >>> 0;
+  return (addressNumber & mask) === (rangeNumber & mask);
+}
+
+/**
+ * Whether `address` is allowed by the provided `cidr` whitelist. An empty or
+ * missing whitelist allows every address; an unparseable address is rejected.
+ */
+function isAddressAllowed(address, cidr) {
+  if (!cidr || cidr.length === 0) {
+    return true;
+  }
+  const normalizedAddress = normalizeAddress(address);
+  if (!normalizedAddress) {
+    return false;
+  }
+  return cidr.some(entry => {
+    const [range, prefixValue] = entry.split('/');
+    const normalizedRange = normalizeAddress(range);
+    if (!normalizedRange) {
+      return false;
+    }
+    if (typeof prefixValue === 'undefined') {
+      return normalizedAddress === normalizedRange;
+    }
+    const prefix = Number(prefixValue);
+    if (Number.isInteger(prefix) === false) {
+      return false;
+    }
+    if (_nodeNet.default.isIP(normalizedAddress) === 4 && _nodeNet.default.isIP(normalizedRange) === 4) {
+      return isIPv4InCIDR(normalizedAddress, normalizedRange, prefix);
+    }
+    return prefix === 128 && normalizedAddress === normalizedRange;
+  });
+}
+//# sourceMappingURL=ip-utils.js.map

package/build/ip-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-utils.js","names":["_nodeNet","_interopRequireDefault","require","e","__esModule","default","IPV4_MAPPED_PREFIX","normalizeAddress","address","trimmedAddress","trim","startsWith","slice","length","parseIPv4","net","isIP","split","map","Number","reduce","accumulator","octet","isIPv4InCIDR","range","prefix","addressNumber","rangeNumber","undefined","mask","isAddressAllowed","cidr","normalizedAddress","some","entry","prefixValue","normalizedRange","isInteger"],"sources":["../src/ip-utils.ts"],"sourcesContent":["import net from 'node:net';\n\nconst IPV4_MAPPED_PREFIX = '::ffff:';\n\n/**\n * Trim an address and strip the IPv4-mapped IPv6 prefix (`::ffff:`) so that\n * mapped addresses are compared as plain IPv4.\n */\nexport function normalizeAddress(address?: string): string | undefined {\n  if (!address) {\n    return;\n  }\n\n  const trimmedAddress = address.trim();\n\n  if (trimmedAddress.startsWith(IPV4_MAPPED_PREFIX)) {\n    return trimmedAddress.slice(IPV4_MAPPED_PREFIX.length);\n  }\n\n  return trimmedAddress;\n}\n\n/**\n * Convert a dotted-quad IPv4 address into its unsigned 32-bit integer value.\n */\nexport function parseIPv4(address: string): number | undefined {\n  if (net.isIP(address) !== 4) {\n    return;\n  }\n\n  return (\n    address\n      .split('.')\n      .map(Number)\n      .reduce((accumulator, octet) => (accumulator << 8) + octet, 0) >>> 0\n  );\n}\n\n/**\n * Whether an IPv4 `address` falls inside the `range`/`prefix` CIDR block.\n */\nexport function isIPv4InCIDR(address: string, range: string, prefix: number): boolean {\n  const addressNumber = parseIPv4(address);\n  const rangeNumber = parseIPv4(range);\n\n  if (addressNumber === undefined || rangeNumber === undefined || prefix < 0 || prefix > 32) {\n    return false;\n  }\n\n  const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;\n\n  return (addressNumber & mask) === (rangeNumber & mask);\n}\n\n/**\n * Whether `address` is allowed by the provided `cidr` whitelist. An empty or\n * missing whitelist allows every address; an unparseable address is rejected.\n */\nexport function isAddressAllowed(address: string | undefined, cidr: string[] | undefined): boolean {\n  if (!cidr || cidr.length === 0) {\n    return true;\n  }\n\n  const normalizedAddress = normalizeAddress(address);\n\n  if (!normalizedAddress) {\n    return false;\n  }\n\n  return cidr.some((entry) => {\n    const [range, prefixValue] = entry.split('/');\n    const normalizedRange = normalizeAddress(range);\n\n    if (!normalizedRange) {\n      return false;\n    }\n\n    if (typeof prefixValue === 'undefined') {\n      return normalizedAddress === normalizedRange;\n    }\n\n    const prefix = Number(prefixValue);\n\n    if (Number.isInteger(prefix) === false) {\n      return false;\n    }\n\n    if (net.isIP(normalizedAddress) === 4 && net.isIP(normalizedRange) === 4) {\n      return isIPv4InCIDR(normalizedAddress, normalizedRange, prefix);\n    }\n\n    return prefix === 128 && normalizedAddress === normalizedRange;\n  });\n}\n"],"mappings":";;;;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA2B,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE3B,MAAMG,kBAAkB,GAAG,SAAS;;AAEpC;AACA;AACA;AACA;AACO,SAASC,gBAAgBA,CAACC,OAAgB,EAAsB;EACrE,IAAI,CAACA,OAAO,EAAE;IACZ;EACF;EAEA,MAAMC,cAAc,GAAGD,OAAO,CAACE,IAAI,CAAC,CAAC;EAErC,IAAID,cAAc,CAACE,UAAU,CAACL,kBAAkB,CAAC,EAAE;IACjD,OAAOG,cAAc,CAACG,KAAK,CAACN,kBAAkB,CAACO,MAAM,CAAC;EACxD;EAEA,OAAOJ,cAAc;AACvB;;AAEA;AACA;AACA;AACO,SAASK,SAASA,CAACN,OAAe,EAAsB;EAC7D,IAAIO,gBAAG,CAACC,IAAI,CAACR,OAAO,CAAC,KAAK,CAAC,EAAE;IAC3B;EACF;EAEA,OACEA,OAAO,CACJS,KAAK,CAAC,GAAG,CAAC,CACVC,GAAG,CAACC,MAAM,CAAC,CACXC,MAAM,CAAC,CAACC,WAAW,EAAEC,KAAK,KAAK,CAACD,WAAW,IAAI,CAAC,IAAIC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;AAE1E;;AAEA;AACA;AACA;AACO,SAASC,YAAYA,CAACf,OAAe,EAAEgB,KAAa,EAAEC,MAAc,EAAW;EACpF,MAAMC,aAAa,GAAGZ,SAAS,CAACN,OAAO,CAAC;EACxC,MAAMmB,WAAW,GAAGb,SAAS,CAACU,KAAK,CAAC;EAEpC,IAAIE,aAAa,KAAKE,SAAS,IAAID,WAAW,KAAKC,SAAS,IAAIH,MAAM,GAAG,CAAC,IAAIA,MAAM,GAAG,EAAE,EAAE;IACzF,OAAO,KAAK;EACd;EAEA,MAAMI,IAAI,GAAGJ,MAAM,KAAK,CAAC,GAAG,CAAC,GAAI,UAAU,IAAK,EAAE,GAAGA,MAAO,KAAM,CAAC;EAEnE,OAAO,CAACC,aAAa,GAAGG,IAAI,OAAOF,WAAW,GAAGE,IAAI,CAAC;AACxD;;AAEA;AACA;AACA;AACA;AACO,SAASC,gBAAgBA,CAACtB,OAA2B,EAAEuB,IAA0B,EAAW;EACjG,IAAI,CAACA,IAAI,IAAIA,IAAI,CAAClB,MAAM,KAAK,CAAC,EAAE;IAC9B,OAAO,IAAI;EACb;EAEA,MAAMmB,iBAAiB,GAAGzB,gBAAgB,CAACC,OAAO,CAAC;EAEnD,IAAI,CAACwB,iBAAiB,EAAE;IACtB,OAAO,KAAK;EACd;EAEA,OAAOD,IAAI,CAACE,IAAI,CAAEC,KAAK,IAAK;IAC1B,MAAM,CAACV,KAAK,EAAEW,WAAW,CAAC,GAAGD,KAAK,CAACjB,KAAK,CAAC,GAAG,CAAC;IAC7C,MAAMmB,eAAe,GAAG7B,gBAAgB,CAACiB,KAAK,CAAC;IAE/C,IAAI,CAACY,eAAe,EAAE;MACpB,OAAO,KAAK;IACd;IAEA,IAAI,OAAOD,WAAW,KAAK,WAAW,EAAE;MACtC,OAAOH,iBAAiB,KAAKI,eAAe;IAC9C;IAEA,MAAMX,MAAM,GAAGN,MAAM,CAACgB,WAAW,CAAC;IAElC,IAAIhB,MAAM,CAACkB,SAAS,CAACZ,MAAM,CAAC,KAAK,KAAK,EAAE;MACtC,OAAO,KAAK;IACd;IAEA,IAAIV,gBAAG,CAACC,IAAI,CAACgB,iBAAiB,CAAC,KAAK,CAAC,IAAIjB,gBAAG,CAACC,IAAI,CAACoB,eAAe,CAAC,KAAK,CAAC,EAAE;MACxE,OAAOb,YAAY,CAACS,iBAAiB,EAAEI,eAAe,EAAEX,MAAM,CAAC;IACjE;IAEA,OAAOA,MAAM,KAAK,GAAG,IAAIO,iBAAiB,KAAKI,eAAe;EAChE,CAAC,CAAC;AACJ","ignoreList":[]}

package/package.json

@@ -1,34 +1,35 @@
 {
   "name": "@verdaccio/core",
-  "version": "8.1.1",
+  "version": "8.1.4",
   "description": "Verdaccio Core Components",
   "keywords": [
-    "private",
-    "package",
-    "repository",
-    "registry",
     "enterprise",
     "modules",
+    "package",
+    "private",
     "proxy",
+    "registry",
+    "repository",
     "server",
     "verdaccio"
   ],
-  "main": "./build/index.js",
-  "types": "./build/index.d.ts",
-  "author": "Juan Picado <juanpicado19@gmail.com>",
-  "license": "MIT",
   "homepage": "https://verdaccio.org",
-  "engines": {
-    "node": ">=18"
+  "bugs": {
+    "url": "https://github.com/verdaccio/verdaccio/issues"
   },
+  "license": "MIT",
+  "author": "Juan Picado <juanpicado19@gmail.com>",
   "repository": {
     "type": "https",
     "url": "https://github.com/verdaccio/verdaccio",
     "directory": "packages/core/core"
   },
-  "bugs": {
-    "url": "https://github.com/verdaccio/verdaccio/issues"
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/verdaccio"
   },
+  "main": "./build/index.js",
+  "types": "./build/index.d.ts",
   "publishConfig": {
     "access": "public"
   },
@@ -36,19 +37,18 @@
     "ajv": "8.18.0",
     "http-errors": "2.0.1",
     "http-status-codes": "2.3.0",
-    "minimatch": "7.4.9",
+    "minimatch": "10.2.5",
     "process-warning": "1.0.0",
     "semver": "7.7.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "13.0.1",
+    "@verdaccio/types": "13.0.5",
     "express": "4.22.1",
     "typedoc": "0.28.14",
     "vitest": "4.1.2"
   },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
+  "engines": {
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",