@verdaccio/core 9.0.0-next-9.20 → 9.0.0-next-9.22

package/build/ip-utils.mjs

@@ -55,6 +55,6 @@ function isAddressAllowed(address, cidr) {
 	});
 }
 //#endregion
-export { ip_utils_exports };
+export { ip_utils_exports, isAddressAllowed, isIPv4InCIDR, normalizeAddress, parseIPv4 };
 
 //# sourceMappingURL=ip-utils.mjs.map

package/build/ip-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ip-utils.mjs","names":[],"sources":["../src/ip-utils.ts"],"sourcesContent":["import net from 'node:net';\n\nconst IPV4_MAPPED_PREFIX = '::ffff:';\n\n/**\n * Trim an address and strip the IPv4-mapped IPv6 prefix (`::ffff:`) so that\n * mapped addresses are compared as plain IPv4.\n */\nexport function normalizeAddress(address?: string): string | undefined {\n  if (!address) {\n    return;\n  }\n\n  const trimmedAddress = address.trim();\n\n  if (trimmedAddress.startsWith(IPV4_MAPPED_PREFIX)) {\n    return trimmedAddress.slice(IPV4_MAPPED_PREFIX.length);\n  }\n\n  return trimmedAddress;\n}\n\n/**\n * Convert a dotted-quad IPv4 address into its unsigned 32-bit integer value.\n */\nexport function parseIPv4(address: string): number | undefined {\n  if (net.isIP(address) !== 4) {\n    return;\n  }\n\n  return (\n    address\n      .split('.')\n      .map(Number)\n      .reduce((accumulator, octet) => (accumulator << 8) + octet, 0) >>> 0\n  );\n}\n\n/**\n * Whether an IPv4 `address` falls inside the `range`/`prefix` CIDR block.\n */\nexport function isIPv4InCIDR(address: string, range: string, prefix: number): boolean {\n  const addressNumber = parseIPv4(address);\n  const rangeNumber = parseIPv4(range);\n\n  if (addressNumber === undefined || rangeNumber === undefined || prefix < 0 || prefix > 32) {\n    return false;\n  }\n\n  const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;\n\n  return (addressNumber & mask) === (rangeNumber & mask);\n}\n\n/**\n * Whether `address` is allowed by the provided `cidr` whitelist. An empty or\n * missing whitelist allows every address; an unparseable address is rejected.\n */\nexport function isAddressAllowed(address: string | undefined, cidr: string[] | undefined): boolean {\n  if (!cidr || cidr.length === 0) {\n    return true;\n  }\n\n  const normalizedAddress = normalizeAddress(address);\n\n  if (!normalizedAddress) {\n    return false;\n  }\n\n  return cidr.some((entry) => {\n    const [range, prefixValue] = entry.split('/');\n    const normalizedRange = normalizeAddress(range);\n\n    if (!normalizedRange) {\n      return false;\n    }\n\n    if (typeof prefixValue === 'undefined') {\n      return normalizedAddress === normalizedRange;\n    }\n\n    const prefix = Number(prefixValue);\n\n    if (Number.isInteger(prefix) === false) {\n      return false;\n    }\n\n    if (net.isIP(normalizedAddress) === 4 && net.isIP(normalizedRange) === 4) {\n      return isIPv4InCIDR(normalizedAddress, normalizedRange, prefix);\n    }\n\n    return prefix === 128 && normalizedAddress === normalizedRange;\n  });\n}\n"],"mappings":";;;;;;;;;AAEA,IAAM,qBAAqB;;;;;AAM3B,SAAgB,iBAAiB,SAAsC;CACrE,IAAI,CAAC,SACH;CAGF,MAAM,iBAAiB,QAAQ,KAAK;CAEpC,IAAI,eAAe,WAAW,kBAAkB,GAC9C,OAAO,eAAe,MAAM,CAAyB;CAGvD,OAAO;AACT;;;;AAKA,SAAgB,UAAU,SAAqC;CAC7D,IAAI,IAAI,KAAK,OAAO,MAAM,GACxB;CAGF,OACE,QACG,MAAM,GAAG,EACT,IAAI,MAAM,EACV,QAAQ,aAAa,WAAW,eAAe,KAAK,OAAO,CAAC,MAAM;AAEzE;;;;AAKA,SAAgB,aAAa,SAAiB,OAAe,QAAyB;CACpF,MAAM,gBAAgB,UAAU,OAAO;CACvC,MAAM,cAAc,UAAU,KAAK;CAEnC,IAAI,kBAAkB,KAAA,KAAa,gBAAgB,KAAA,KAAa,SAAS,KAAK,SAAS,IACrF,OAAO;CAGT,MAAM,OAAO,WAAW,IAAI,IAAK,cAAe,KAAK,WAAa;CAElE,QAAQ,gBAAgB,WAAW,cAAc;AACnD;;;;;AAMA,SAAgB,iBAAiB,SAA6B,MAAqC;CACjG,IAAI,CAAC,QAAQ,KAAK,WAAW,GAC3B,OAAO;CAGT,MAAM,oBAAoB,iBAAiB,OAAO;CAElD,IAAI,CAAC,mBACH,OAAO;CAGT,OAAO,KAAK,MAAM,UAAU;EAC1B,MAAM,CAAC,OAAO,eAAe,MAAM,MAAM,GAAG;EAC5C,MAAM,kBAAkB,iBAAiB,KAAK;EAE9C,IAAI,CAAC,iBACH,OAAO;EAGT,IAAI,OAAO,gBAAgB,aACzB,OAAO,sBAAsB;EAG/B,MAAM,SAAS,OAAO,WAAW;EAEjC,IAAI,OAAO,UAAU,MAAM,MAAM,OAC/B,OAAO;EAGT,IAAI,IAAI,KAAK,iBAAiB,MAAM,KAAK,IAAI,KAAK,eAAe,MAAM,GACrE,OAAO,aAAa,mBAAmB,iBAAiB,MAAM;EAGhE,OAAO,WAAW,OAAO,sBAAsB;CACjD,CAAC;AACH"}
+{"version":3,"file":"ip-utils.mjs","names":[],"sources":["../src/ip-utils.ts"],"sourcesContent":["import net from 'node:net';\n\nconst IPV4_MAPPED_PREFIX = '::ffff:';\n\n/**\n * Trim an address and strip the IPv4-mapped IPv6 prefix (`::ffff:`) so that\n * mapped addresses are compared as plain IPv4.\n */\nexport function normalizeAddress(address?: string): string | undefined {\n  if (!address) {\n    return;\n  }\n\n  const trimmedAddress = address.trim();\n\n  if (trimmedAddress.startsWith(IPV4_MAPPED_PREFIX)) {\n    return trimmedAddress.slice(IPV4_MAPPED_PREFIX.length);\n  }\n\n  return trimmedAddress;\n}\n\n/**\n * Convert a dotted-quad IPv4 address into its unsigned 32-bit integer value.\n */\nexport function parseIPv4(address: string): number | undefined {\n  if (net.isIP(address) !== 4) {\n    return;\n  }\n\n  return (\n    address\n      .split('.')\n      .map(Number)\n      .reduce((accumulator, octet) => (accumulator << 8) + octet, 0) >>> 0\n  );\n}\n\n/**\n * Whether an IPv4 `address` falls inside the `range`/`prefix` CIDR block.\n */\nexport function isIPv4InCIDR(address: string, range: string, prefix: number): boolean {\n  const addressNumber = parseIPv4(address);\n  const rangeNumber = parseIPv4(range);\n\n  if (addressNumber === undefined || rangeNumber === undefined || prefix < 0 || prefix > 32) {\n    return false;\n  }\n\n  const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;\n\n  return (addressNumber & mask) === (rangeNumber & mask);\n}\n\n/**\n * Whether `address` is allowed by the provided `cidr` whitelist. An empty or\n * missing whitelist allows every address; an unparseable address is rejected.\n */\nexport function isAddressAllowed(address: string | undefined, cidr: string[] | undefined): boolean {\n  if (!cidr || cidr.length === 0) {\n    return true;\n  }\n\n  const normalizedAddress = normalizeAddress(address);\n\n  if (!normalizedAddress) {\n    return false;\n  }\n\n  return cidr.some((entry) => {\n    const [range, prefixValue] = entry.split('/');\n    const normalizedRange = normalizeAddress(range);\n\n    if (!normalizedRange) {\n      return false;\n    }\n\n    if (typeof prefixValue === 'undefined') {\n      return normalizedAddress === normalizedRange;\n    }\n\n    const prefix = Number(prefixValue);\n\n    if (Number.isInteger(prefix) === false) {\n      return false;\n    }\n\n    if (net.isIP(normalizedAddress) === 4 && net.isIP(normalizedRange) === 4) {\n      return isIPv4InCIDR(normalizedAddress, normalizedRange, prefix);\n    }\n\n    return prefix === 128 && normalizedAddress === normalizedRange;\n  });\n}\n"],"mappings":";;;;;;;;;AAEA,IAAM,qBAAqB;;;;;AAM3B,SAAgB,iBAAiB,SAAsC;CACrE,IAAI,CAAC,SACH;CAGF,MAAM,iBAAiB,QAAQ,KAAK;CAEpC,IAAI,eAAe,WAAW,kBAAkB,GAC9C,OAAO,eAAe,MAAM,CAAyB;CAGvD,OAAO;AACT;;;;AAKA,SAAgB,UAAU,SAAqC;CAC7D,IAAI,IAAI,KAAK,OAAO,MAAM,GACxB;CAGF,OACE,QACG,MAAM,GAAG,CAAC,CACV,IAAI,MAAM,CAAC,CACX,QAAQ,aAAa,WAAW,eAAe,KAAK,OAAO,CAAC,MAAM;AAEzE;;;;AAKA,SAAgB,aAAa,SAAiB,OAAe,QAAyB;CACpF,MAAM,gBAAgB,UAAU,OAAO;CACvC,MAAM,cAAc,UAAU,KAAK;CAEnC,IAAI,kBAAkB,KAAA,KAAa,gBAAgB,KAAA,KAAa,SAAS,KAAK,SAAS,IACrF,OAAO;CAGT,MAAM,OAAO,WAAW,IAAI,IAAK,cAAe,KAAK,WAAa;CAElE,QAAQ,gBAAgB,WAAW,cAAc;AACnD;;;;;AAMA,SAAgB,iBAAiB,SAA6B,MAAqC;CACjG,IAAI,CAAC,QAAQ,KAAK,WAAW,GAC3B,OAAO;CAGT,MAAM,oBAAoB,iBAAiB,OAAO;CAElD,IAAI,CAAC,mBACH,OAAO;CAGT,OAAO,KAAK,MAAM,UAAU;EAC1B,MAAM,CAAC,OAAO,eAAe,MAAM,MAAM,GAAG;EAC5C,MAAM,kBAAkB,iBAAiB,KAAK;EAE9C,IAAI,CAAC,iBACH,OAAO;EAGT,IAAI,OAAO,gBAAgB,aACzB,OAAO,sBAAsB;EAG/B,MAAM,SAAS,OAAO,WAAW;EAEjC,IAAI,OAAO,UAAU,MAAM,MAAM,OAC/B,OAAO;EAGT,IAAI,IAAI,KAAK,iBAAiB,MAAM,KAAK,IAAI,KAAK,eAAe,MAAM,GACrE,OAAO,aAAa,mBAAmB,iBAAiB,MAAM;EAGhE,OAAO,WAAW,OAAO,sBAAsB;CACjD,CAAC;AACH"}

package/build/pkg-utils.d.ts

@@ -1,4 +1,4 @@
-import { Manifest } from '@verdaccio/types';
+import type { Manifest } from '@verdaccio/types';
 /**
  * Function filters out bad semver versions and sorts the array.
  * @return {Array} sorted Array

package/build/pkg-utils.js

@@ -51,11 +51,15 @@ function getPackageJson(packagePath, relativePath) {
 	return JSON.parse(node_fs.default.readFileSync(packageJsonPath, "utf8"));
 }
 //#endregion
+exports.getLatest = getLatest;
+exports.getPackageJson = getPackageJson;
 Object.defineProperty(exports, "pkg_utils_exports", {
 	enumerable: true,
 	get: function() {
 		return pkg_utils_exports;
 	}
 });
+exports.semverSanitize = semverSanitize;
+exports.semverSort = semverSort;
 
 //# sourceMappingURL=pkg-utils.js.map

package/build/pkg-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"pkg-utils.js","names":[],"sources":["../src/pkg-utils.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport semver from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\n/**\n * Function filters out bad semver versions and sorts the array.\n * @return {Array} sorted Array\n */\nexport function semverSort(listVersions: string[]): string[] {\n  return listVersions\n    .filter(function (x): boolean {\n      if (!semver.parse(x, true)) {\n        return false;\n      }\n      return true;\n    })\n    .sort(semver.compareLoose)\n    .map(String);\n}\n\n/**\n * Sanitize a version string to a valid semver version.\n * @param version - The version string to sanitize.\n * @returns The sanitized version string.\n */\nexport function semverSanitize(version: string): string {\n  return (\n    semver.valid(version) || semver.coerce(version, { includePrerelease: true })?.version || ''\n  );\n}\n\n/**\n * Get the latest publihsed version of a package.\n * @param package metadata\n **/\nexport function getLatest(pkg: Manifest): string {\n  const listVersions: string[] = Object.keys(pkg.versions);\n  if (listVersions.length < 1) {\n    throw Error('cannot get lastest version of none');\n  }\n\n  const versions: string[] = semverSort(listVersions);\n  const latest: string | undefined = pkg[DIST_TAGS]?.latest ? pkg[DIST_TAGS].latest : versions[0];\n\n  return latest;\n}\n\n/**\n * Get package informations from package.json\n * @param packagePath - The path to the package.json file.\n * @returns The package.json content\n */\nexport function getPackageJson(packagePath: string, relativePath: string): Record<string, unknown> {\n  const packageJsonPath = path.join(packagePath, relativePath, 'package.json');\n  return JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAYA,SAAgB,WAAW,cAAkC;CAC3D,OAAO,aACJ,OAAO,SAAU,GAAY;EAC5B,IAAI,CAAC,OAAA,QAAO,MAAM,GAAG,IAAI,GACvB,OAAO;EAET,OAAO;CACT,CAAC,EACA,KAAK,OAAA,QAAO,YAAY,EACxB,IAAI,MAAM;AACf;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OACE,OAAA,QAAO,MAAM,OAAO,KAAK,OAAA,QAAO,OAAO,SAAS,EAAE,mBAAmB,KAAK,CAAC,GAAG,WAAW;AAE7F;;;;;AAMA,SAAgB,UAAU,KAAuB;CAC/C,MAAM,eAAyB,OAAO,KAAK,IAAI,QAAQ;CACvD,IAAI,aAAa,SAAS,GACxB,MAAM,MAAM,oCAAoC;CAGlD,MAAM,WAAqB,WAAW,YAAY;CAGlD,OAFmC,IAAA,cAAgB,SAAS,IAAI,kBAAA,WAAW,SAAS,SAAS;AAG/F;;;;;;AAOA,SAAgB,eAAe,aAAqB,cAA+C;CACjG,MAAM,kBAAkB,UAAA,QAAK,KAAK,aAAa,cAAc,cAAc;CAC3E,OAAO,KAAK,MAAM,QAAA,QAAG,aAAa,iBAAiB,MAAM,CAAC;AAC5D"}
+{"version":3,"file":"pkg-utils.js","names":[],"sources":["../src/pkg-utils.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport semver from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\n/**\n * Function filters out bad semver versions and sorts the array.\n * @return {Array} sorted Array\n */\nexport function semverSort(listVersions: string[]): string[] {\n  return listVersions\n    .filter(function (x): boolean {\n      if (!semver.parse(x, true)) {\n        return false;\n      }\n      return true;\n    })\n    .sort(semver.compareLoose)\n    .map(String);\n}\n\n/**\n * Sanitize a version string to a valid semver version.\n * @param version - The version string to sanitize.\n * @returns The sanitized version string.\n */\nexport function semverSanitize(version: string): string {\n  return (\n    semver.valid(version) || semver.coerce(version, { includePrerelease: true })?.version || ''\n  );\n}\n\n/**\n * Get the latest publihsed version of a package.\n * @param package metadata\n **/\nexport function getLatest(pkg: Manifest): string {\n  const listVersions: string[] = Object.keys(pkg.versions);\n  if (listVersions.length < 1) {\n    throw Error('cannot get lastest version of none');\n  }\n\n  const versions: string[] = semverSort(listVersions);\n  const latest: string | undefined = pkg[DIST_TAGS]?.latest ? pkg[DIST_TAGS].latest : versions[0];\n\n  return latest;\n}\n\n/**\n * Get package informations from package.json\n * @param packagePath - The path to the package.json file.\n * @returns The package.json content\n */\nexport function getPackageJson(packagePath: string, relativePath: string): Record<string, unknown> {\n  const packageJsonPath = path.join(packagePath, relativePath, 'package.json');\n  return JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAYA,SAAgB,WAAW,cAAkC;CAC3D,OAAO,aACJ,OAAO,SAAU,GAAY;EAC5B,IAAI,CAAC,OAAA,QAAO,MAAM,GAAG,IAAI,GACvB,OAAO;EAET,OAAO;CACT,CAAC,CAAC,CACD,KAAK,OAAA,QAAO,YAAY,CAAC,CACzB,IAAI,MAAM;AACf;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OACE,OAAA,QAAO,MAAM,OAAO,KAAK,OAAA,QAAO,OAAO,SAAS,EAAE,mBAAmB,KAAK,CAAC,CAAC,EAAE,WAAW;AAE7F;;;;;AAMA,SAAgB,UAAU,KAAuB;CAC/C,MAAM,eAAyB,OAAO,KAAK,IAAI,QAAQ;CACvD,IAAI,aAAa,SAAS,GACxB,MAAM,MAAM,oCAAoC;CAGlD,MAAM,WAAqB,WAAW,YAAY;CAGlD,OAFmC,IAAA,YAAc,EAAE,SAAS,IAAI,kBAAA,UAAU,CAAC,SAAS,SAAS;AAG/F;;;;;;AAOA,SAAgB,eAAe,aAAqB,cAA+C;CACjG,MAAM,kBAAkB,UAAA,QAAK,KAAK,aAAa,cAAc,cAAc;CAC3E,OAAO,KAAK,MAAM,QAAA,QAAG,aAAa,iBAAiB,MAAM,CAAC;AAC5D"}

package/build/pkg-utils.mjs

@@ -48,6 +48,6 @@ function getPackageJson(packagePath, relativePath) {
 	return JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
 }
 //#endregion
-export { pkg_utils_exports };
+export { getLatest, getPackageJson, pkg_utils_exports, semverSanitize, semverSort };
 
 //# sourceMappingURL=pkg-utils.mjs.map

package/build/pkg-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pkg-utils.mjs","names":[],"sources":["../src/pkg-utils.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport semver from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\n/**\n * Function filters out bad semver versions and sorts the array.\n * @return {Array} sorted Array\n */\nexport function semverSort(listVersions: string[]): string[] {\n  return listVersions\n    .filter(function (x): boolean {\n      if (!semver.parse(x, true)) {\n        return false;\n      }\n      return true;\n    })\n    .sort(semver.compareLoose)\n    .map(String);\n}\n\n/**\n * Sanitize a version string to a valid semver version.\n * @param version - The version string to sanitize.\n * @returns The sanitized version string.\n */\nexport function semverSanitize(version: string): string {\n  return (\n    semver.valid(version) || semver.coerce(version, { includePrerelease: true })?.version || ''\n  );\n}\n\n/**\n * Get the latest publihsed version of a package.\n * @param package metadata\n **/\nexport function getLatest(pkg: Manifest): string {\n  const listVersions: string[] = Object.keys(pkg.versions);\n  if (listVersions.length < 1) {\n    throw Error('cannot get lastest version of none');\n  }\n\n  const versions: string[] = semverSort(listVersions);\n  const latest: string | undefined = pkg[DIST_TAGS]?.latest ? pkg[DIST_TAGS].latest : versions[0];\n\n  return latest;\n}\n\n/**\n * Get package informations from package.json\n * @param packagePath - The path to the package.json file.\n * @returns The package.json content\n */\nexport function getPackageJson(packagePath: string, relativePath: string): Record<string, unknown> {\n  const packageJsonPath = path.join(packagePath, relativePath, 'package.json');\n  return JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAYA,SAAgB,WAAW,cAAkC;CAC3D,OAAO,aACJ,OAAO,SAAU,GAAY;EAC5B,IAAI,CAAC,OAAO,MAAM,GAAG,IAAI,GACvB,OAAO;EAET,OAAO;CACT,CAAC,EACA,KAAK,OAAO,YAAY,EACxB,IAAI,MAAM;AACf;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OACE,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO,SAAS,EAAE,mBAAmB,KAAK,CAAC,GAAG,WAAW;AAE7F;;;;;AAMA,SAAgB,UAAU,KAAuB;CAC/C,MAAM,eAAyB,OAAO,KAAK,IAAI,QAAQ;CACvD,IAAI,aAAa,SAAS,GACxB,MAAM,MAAM,oCAAoC;CAGlD,MAAM,WAAqB,WAAW,YAAY;CAGlD,OAFmC,IAAA,cAAgB,SAAS,IAAI,WAAW,SAAS,SAAS;AAG/F;;;;;;AAOA,SAAgB,eAAe,aAAqB,cAA+C;CACjG,MAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc,cAAc;CAC3E,OAAO,KAAK,MAAM,GAAG,aAAa,iBAAiB,MAAM,CAAC;AAC5D"}
+{"version":3,"file":"pkg-utils.mjs","names":[],"sources":["../src/pkg-utils.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport semver from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DIST_TAGS } from './constants';\n\n/**\n * Function filters out bad semver versions and sorts the array.\n * @return {Array} sorted Array\n */\nexport function semverSort(listVersions: string[]): string[] {\n  return listVersions\n    .filter(function (x): boolean {\n      if (!semver.parse(x, true)) {\n        return false;\n      }\n      return true;\n    })\n    .sort(semver.compareLoose)\n    .map(String);\n}\n\n/**\n * Sanitize a version string to a valid semver version.\n * @param version - The version string to sanitize.\n * @returns The sanitized version string.\n */\nexport function semverSanitize(version: string): string {\n  return (\n    semver.valid(version) || semver.coerce(version, { includePrerelease: true })?.version || ''\n  );\n}\n\n/**\n * Get the latest publihsed version of a package.\n * @param package metadata\n **/\nexport function getLatest(pkg: Manifest): string {\n  const listVersions: string[] = Object.keys(pkg.versions);\n  if (listVersions.length < 1) {\n    throw Error('cannot get lastest version of none');\n  }\n\n  const versions: string[] = semverSort(listVersions);\n  const latest: string | undefined = pkg[DIST_TAGS]?.latest ? pkg[DIST_TAGS].latest : versions[0];\n\n  return latest;\n}\n\n/**\n * Get package informations from package.json\n * @param packagePath - The path to the package.json file.\n * @returns The package.json content\n */\nexport function getPackageJson(packagePath: string, relativePath: string): Record<string, unknown> {\n  const packageJsonPath = path.join(packagePath, relativePath, 'package.json');\n  return JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAYA,SAAgB,WAAW,cAAkC;CAC3D,OAAO,aACJ,OAAO,SAAU,GAAY;EAC5B,IAAI,CAAC,OAAO,MAAM,GAAG,IAAI,GACvB,OAAO;EAET,OAAO;CACT,CAAC,CAAC,CACD,KAAK,OAAO,YAAY,CAAC,CACzB,IAAI,MAAM;AACf;;;;;;AAOA,SAAgB,eAAe,SAAyB;CACtD,OACE,OAAO,MAAM,OAAO,KAAK,OAAO,OAAO,SAAS,EAAE,mBAAmB,KAAK,CAAC,CAAC,EAAE,WAAW;AAE7F;;;;;AAMA,SAAgB,UAAU,KAAuB;CAC/C,MAAM,eAAyB,OAAO,KAAK,IAAI,QAAQ;CACvD,IAAI,aAAa,SAAS,GACxB,MAAM,MAAM,oCAAoC;CAGlD,MAAM,WAAqB,WAAW,YAAY;CAGlD,OAFmC,IAAA,YAAc,EAAE,SAAS,IAAI,UAAU,CAAC,SAAS,SAAS;AAG/F;;;;;;AAOA,SAAgB,eAAe,aAAqB,cAA+C;CACjG,MAAM,kBAAkB,KAAK,KAAK,aAAa,cAAc,cAAc;CAC3E,OAAO,KAAK,MAAM,GAAG,aAAa,iBAAiB,MAAM,CAAC;AAC5D"}

package/build/plugin-utils.d.ts

@@ -1,7 +1,7 @@
-import { Express, RequestHandler } from 'express';
-import { Readable, Writable } from 'node:stream';
-import { AllowAccess, Callback, Config, Logger, Manifest, PackageAccess, RemoteUser, Token, TokenFilter } from '@verdaccio/types';
-import { VerdaccioError, searchUtils } from '.';
+import type { Express, RequestHandler } from 'express';
+import type { Readable, Writable } from 'node:stream';
+import type { AllowAccess, Callback, Config, Logger, Manifest, PackageAccess, RemoteUser, Token, TokenFilter } from '@verdaccio/types';
+import type { VerdaccioError, searchUtils } from '.';
 export interface PluginOptions {
     config: Config;
     logger: Logger;

package/build/plugin-utils.js

@@ -54,11 +54,16 @@ function filterSanityCheck(plugin) {
 	return typeof plugin.filter_metadata !== "undefined";
 }
 //#endregion
+exports.Plugin = Plugin;
+exports.authSanityCheck = authSanityCheck;
+exports.filterSanityCheck = filterSanityCheck;
+exports.middlewareSanityCheck = middlewareSanityCheck;
 Object.defineProperty(exports, "plugin_utils_exports", {
 	enumerable: true,
 	get: function() {
 		return plugin_utils_exports;
 	}
 });
+exports.storageSanityCheck = storageSanityCheck;
 
 //# sourceMappingURL=plugin-utils.js.map

package/build/plugin-utils.mjs

@@ -55,6 +55,6 @@ function filterSanityCheck(plugin) {
 	return typeof plugin.filter_metadata !== "undefined";
 }
 //#endregion
-export { plugin_utils_exports };
+export { Plugin, authSanityCheck, filterSanityCheck, middlewareSanityCheck, plugin_utils_exports, storageSanityCheck };
 
 //# sourceMappingURL=plugin-utils.mjs.map

package/build/req-utils.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Normalizes a request param that may be a string or array of strings.
+ * Returns a string (first element if array), or empty string if undefined/null.
+ *
+ * @param param - The req.param value which may be string, string[], or undefined.
+ * @returns The normalized string value.
+ */
+export declare function paramToString(param: string | string[] | undefined): string;

package/build/req-utils.js

@@ -0,0 +1,22 @@
+//#region src/req-utils.ts
+var req_utils_exports = /* @__PURE__ */ require("./_virtual/_rolldown/runtime.js").__exportAll({ paramToString: () => paramToString });
+/**
+* Normalizes a request param that may be a string or array of strings.
+* Returns a string (first element if array), or empty string if undefined/null.
+*
+* @param param - The req.param value which may be string, string[], or undefined.
+* @returns The normalized string value.
+*/
+function paramToString(param) {
+	return Array.isArray(param) ? param[0] ?? "" : param ?? "";
+}
+//#endregion
+exports.paramToString = paramToString;
+Object.defineProperty(exports, "req_utils_exports", {
+	enumerable: true,
+	get: function() {
+		return req_utils_exports;
+	}
+});
+
+//# sourceMappingURL=req-utils.js.map

package/build/req-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"req-utils.js","names":[],"sources":["../src/req-utils.ts"],"sourcesContent":["/**\n * Normalizes a request param that may be a string or array of strings.\n * Returns a string (first element if array), or empty string if undefined/null.\n *\n * @param param - The req.param value which may be string, string[], or undefined.\n * @returns The normalized string value.\n */\nexport function paramToString(param: string | string[] | undefined): string {\n  return Array.isArray(param) ? (param[0] ?? '') : (param ?? '');\n}\n"],"mappings":";;;;;;;;;AAOA,SAAgB,cAAc,OAA8C;CAC1E,OAAO,MAAM,QAAQ,KAAK,IAAK,MAAM,MAAM,KAAO,SAAS;AAC7D"}

package/build/req-utils.mjs

@@ -0,0 +1,17 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+//#region src/req-utils.ts
+var req_utils_exports = /* @__PURE__ */ __exportAll({ paramToString: () => paramToString });
+/**
+* Normalizes a request param that may be a string or array of strings.
+* Returns a string (first element if array), or empty string if undefined/null.
+*
+* @param param - The req.param value which may be string, string[], or undefined.
+* @returns The normalized string value.
+*/
+function paramToString(param) {
+	return Array.isArray(param) ? param[0] ?? "" : param ?? "";
+}
+//#endregion
+export { paramToString, req_utils_exports };
+
+//# sourceMappingURL=req-utils.mjs.map

package/build/req-utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"req-utils.mjs","names":[],"sources":["../src/req-utils.ts"],"sourcesContent":["/**\n * Normalizes a request param that may be a string or array of strings.\n * Returns a string (first element if array), or empty string if undefined/null.\n *\n * @param param - The req.param value which may be string, string[], or undefined.\n * @returns The normalized string value.\n */\nexport function paramToString(param: string | string[] | undefined): string {\n  return Array.isArray(param) ? (param[0] ?? '') : (param ?? '');\n}\n"],"mappings":";;;;;;;;;;AAOA,SAAgB,cAAc,OAA8C;CAC1E,OAAO,MAAM,QAAQ,KAAK,IAAK,MAAM,MAAM,KAAO,SAAS;AAC7D"}

package/build/schemes/publish-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish-manifest.js","names":[],"sources":["../../src/schemes/publish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\n// FIXME: this could extend from @verdaccio/types but we need\n// schemas from @verdaccio/types to be able to validate them\ninterface Manifest {\n  name: string;\n  versions: object;\n  _attachments: object;\n}\n\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', maxProperties: 1 },\n    _attachments: { type: 'object', maxProperties: 1 },\n  },\n  required: ['name', 'versions', '_attachments'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validatePublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;AAyBA,IAAM,WAAW,IAtBD,IAAA,QAsBC,EAAI,QAAQ;CAX3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,cAAc;GAAE,MAAM;GAAU,eAAe;EAAE;CACnD;CACA,UAAU;EAAC;EAAQ;EAAY;CAAc;CAC7C,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,6BAA6B,UAAe;CAC1D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}
+{"version":3,"file":"publish-manifest.js","names":[],"sources":["../../src/schemes/publish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\n// FIXME: this could extend from @verdaccio/types but we need\n// schemas from @verdaccio/types to be able to validate them\ninterface Manifest {\n  name: string;\n  versions: object;\n  _attachments: object;\n}\n\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', maxProperties: 1 },\n    _attachments: { type: 'object', maxProperties: 1 },\n  },\n  required: ['name', 'versions', '_attachments'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validatePublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;AAyBA,IAAM,WAAW,IAtBD,IAAA,QAsBC,CAAA,CAAI,QAAQ;CAX3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,cAAc;GAAE,MAAM;GAAU,eAAe;EAAE;CACnD;CACA,UAAU;EAAC;EAAQ;EAAY;CAAc;CAC7C,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,6BAA6B,UAAe;CAC1D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}

package/build/schemes/publish-manifest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish-manifest.mjs","names":[],"sources":["../../src/schemes/publish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\n// FIXME: this could extend from @verdaccio/types but we need\n// schemas from @verdaccio/types to be able to validate them\ninterface Manifest {\n  name: string;\n  versions: object;\n  _attachments: object;\n}\n\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', maxProperties: 1 },\n    _attachments: { type: 'object', maxProperties: 1 },\n  },\n  required: ['name', 'versions', '_attachments'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validatePublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;AAyBA,IAAM,WAAW,IAtBD,IAsBC,EAAI,QAAQ;CAX3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,cAAc;GAAE,MAAM;GAAU,eAAe;EAAE;CACnD;CACA,UAAU;EAAC;EAAQ;EAAY;CAAc;CAC7C,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,6BAA6B,UAAe;CAC1D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}
+{"version":3,"file":"publish-manifest.mjs","names":[],"sources":["../../src/schemes/publish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\n// FIXME: this could extend from @verdaccio/types but we need\n// schemas from @verdaccio/types to be able to validate them\ninterface Manifest {\n  name: string;\n  versions: object;\n  _attachments: object;\n}\n\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', maxProperties: 1 },\n    _attachments: { type: 'object', maxProperties: 1 },\n  },\n  required: ['name', 'versions', '_attachments'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validatePublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;AAyBA,IAAM,WAAW,IAtBD,IAsBC,CAAA,CAAI,QAAQ;CAX3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,cAAc;GAAE,MAAM;GAAU,eAAe;EAAE;CACnD;CACA,UAAU;EAAC;EAAQ;EAAY;CAAc;CAC7C,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,6BAA6B,UAAe;CAC1D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}

package/build/schemes/unpublish-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"unpublish-manifest.js","names":[],"sources":["../../src/schemes/unpublish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\ninterface Manifest {\n  name: string;\n  versions: Record<string, unknown>;\n  _rev: string;\n  _id: string;\n  time: {\n    created: string;\n    modified: string;\n    [key: string]: string; // Allows pattern properties such as version numbers\n  };\n  readme: string;\n  'dist-tags': {\n    latest: string;\n    [key: string]: unknown; // Allows additional properties\n  };\n}\n\n// @ts-ignore\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', minProperties: 1 },\n    _rev: { type: 'string' },\n    _id: { type: 'string' },\n    time: {\n      type: 'object',\n      properties: {\n        created: { type: 'string' },\n        modified: { type: 'string' },\n      },\n      patternProperties: {\n        '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+-\\\\d+$': { type: 'string' },\n      },\n      additionalProperties: true,\n    },\n    readme: { type: 'string' },\n    'dist-tags': {\n      type: 'object',\n      properties: {\n        latest: { type: 'string' },\n      },\n      required: ['latest'],\n      additionalProperties: true,\n    },\n  },\n  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validateUnPublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;AAwDA,IAAM,WAAW,IArDD,IAAA,QAqDC,EAAI,QAAQ;CAhC3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,MAAM,EAAE,MAAM,SAAS;EACvB,KAAK,EAAE,MAAM,SAAS;EACtB,MAAM;GACJ,MAAM;GACN,YAAY;IACV,SAAS,EAAE,MAAM,SAAS;IAC1B,UAAU,EAAE,MAAM,SAAS;GAC7B;GACA,mBAAmB,EACjB,mCAAmC,EAAE,MAAM,SAAS,EACtD;GACA,sBAAsB;EACxB;EACA,QAAQ,EAAE,MAAM,SAAS;EACzB,aAAa;GACX,MAAM;GACN,YAAY,EACV,QAAQ,EAAE,MAAM,SAAS,EAC3B;GACA,UAAU,CAAC,QAAQ;GACnB,sBAAsB;EACxB;CACF;CACA,UAAU;EAAC;EAAQ;EAAY;EAAa;EAAQ;EAAO;EAAU;CAAM;CAC3E,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,+BAA+B,UAAe;CAC5D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}
+{"version":3,"file":"unpublish-manifest.js","names":[],"sources":["../../src/schemes/unpublish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\ninterface Manifest {\n  name: string;\n  versions: Record<string, unknown>;\n  _rev: string;\n  _id: string;\n  time: {\n    created: string;\n    modified: string;\n    [key: string]: string; // Allows pattern properties such as version numbers\n  };\n  readme: string;\n  'dist-tags': {\n    latest: string;\n    [key: string]: unknown; // Allows additional properties\n  };\n}\n\n// @ts-ignore\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', minProperties: 1 },\n    _rev: { type: 'string' },\n    _id: { type: 'string' },\n    time: {\n      type: 'object',\n      properties: {\n        created: { type: 'string' },\n        modified: { type: 'string' },\n      },\n      patternProperties: {\n        '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+-\\\\d+$': { type: 'string' },\n      },\n      additionalProperties: true,\n    },\n    readme: { type: 'string' },\n    'dist-tags': {\n      type: 'object',\n      properties: {\n        latest: { type: 'string' },\n      },\n      required: ['latest'],\n      additionalProperties: true,\n    },\n  },\n  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validateUnPublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;;;AAwDA,IAAM,WAAW,IArDD,IAAA,QAqDC,CAAA,CAAI,QAAQ;CAhC3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,MAAM,EAAE,MAAM,SAAS;EACvB,KAAK,EAAE,MAAM,SAAS;EACtB,MAAM;GACJ,MAAM;GACN,YAAY;IACV,SAAS,EAAE,MAAM,SAAS;IAC1B,UAAU,EAAE,MAAM,SAAS;GAC7B;GACA,mBAAmB,EACjB,mCAAmC,EAAE,MAAM,SAAS,EACtD;GACA,sBAAsB;EACxB;EACA,QAAQ,EAAE,MAAM,SAAS;EACzB,aAAa;GACX,MAAM;GACN,YAAY,EACV,QAAQ,EAAE,MAAM,SAAS,EAC3B;GACA,UAAU,CAAC,QAAQ;GACnB,sBAAsB;EACxB;CACF;CACA,UAAU;EAAC;EAAQ;EAAY;EAAa;EAAQ;EAAO;EAAU;CAAM;CAC3E,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,+BAA+B,UAAe;CAC5D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}

package/build/schemes/unpublish-manifest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"unpublish-manifest.mjs","names":[],"sources":["../../src/schemes/unpublish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\ninterface Manifest {\n  name: string;\n  versions: Record<string, unknown>;\n  _rev: string;\n  _id: string;\n  time: {\n    created: string;\n    modified: string;\n    [key: string]: string; // Allows pattern properties such as version numbers\n  };\n  readme: string;\n  'dist-tags': {\n    latest: string;\n    [key: string]: unknown; // Allows additional properties\n  };\n}\n\n// @ts-ignore\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', minProperties: 1 },\n    _rev: { type: 'string' },\n    _id: { type: 'string' },\n    time: {\n      type: 'object',\n      properties: {\n        created: { type: 'string' },\n        modified: { type: 'string' },\n      },\n      patternProperties: {\n        '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+-\\\\d+$': { type: 'string' },\n      },\n      additionalProperties: true,\n    },\n    readme: { type: 'string' },\n    'dist-tags': {\n      type: 'object',\n      properties: {\n        latest: { type: 'string' },\n      },\n      required: ['latest'],\n      additionalProperties: true,\n    },\n  },\n  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validateUnPublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;AAwDA,IAAM,WAAW,IArDD,IAqDC,EAAI,QAAQ;CAhC3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,MAAM,EAAE,MAAM,SAAS;EACvB,KAAK,EAAE,MAAM,SAAS;EACtB,MAAM;GACJ,MAAM;GACN,YAAY;IACV,SAAS,EAAE,MAAM,SAAS;IAC1B,UAAU,EAAE,MAAM,SAAS;GAC7B;GACA,mBAAmB,EACjB,mCAAmC,EAAE,MAAM,SAAS,EACtD;GACA,sBAAsB;EACxB;EACA,QAAQ,EAAE,MAAM,SAAS;EACzB,aAAa;GACX,MAAM;GACN,YAAY,EACV,QAAQ,EAAE,MAAM,SAAS,EAC3B;GACA,UAAU,CAAC,QAAQ;GACnB,sBAAsB;EACxB;CACF;CACA,UAAU;EAAC;EAAQ;EAAY;EAAa;EAAQ;EAAO;EAAU;CAAM;CAC3E,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,+BAA+B,UAAe;CAC5D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}
+{"version":3,"file":"unpublish-manifest.mjs","names":[],"sources":["../../src/schemes/unpublish-manifest.ts"],"sourcesContent":["import type { JSONSchemaType } from 'ajv';\nimport Ajv from 'ajv';\n\nconst ajv = new Ajv();\n\ninterface Manifest {\n  name: string;\n  versions: Record<string, unknown>;\n  _rev: string;\n  _id: string;\n  time: {\n    created: string;\n    modified: string;\n    [key: string]: string; // Allows pattern properties such as version numbers\n  };\n  readme: string;\n  'dist-tags': {\n    latest: string;\n    [key: string]: unknown; // Allows additional properties\n  };\n}\n\n// @ts-ignore\nconst schema: JSONSchemaType<Manifest> = {\n  type: 'object',\n  properties: {\n    name: { type: 'string' },\n    versions: { type: 'object', minProperties: 1 },\n    _rev: { type: 'string' },\n    _id: { type: 'string' },\n    time: {\n      type: 'object',\n      properties: {\n        created: { type: 'string' },\n        modified: { type: 'string' },\n      },\n      patternProperties: {\n        '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+-\\\\d+$': { type: 'string' },\n      },\n      additionalProperties: true,\n    },\n    readme: { type: 'string' },\n    'dist-tags': {\n      type: 'object',\n      properties: {\n        latest: { type: 'string' },\n      },\n      required: ['latest'],\n      additionalProperties: true,\n    },\n  },\n  required: ['name', 'versions', 'dist-tags', '_rev', '_id', 'readme', 'time'],\n  additionalProperties: true,\n};\n\n// validate is a type guard for MyData - type is inferred from schema type\nconst validate = ajv.compile(schema);\n\n/**\n * Validate if a manifest has the correct structure when a new package\n * is being created. The properties name, versions and _attachments must contain 1 element.\n * @param data a manifest object\n * @returns boolean\n */\nexport function validateUnPublishSingleVersion(manifest: any) {\n  if (!manifest) {\n    return false;\n  }\n  return validate(manifest);\n}\n"],"mappings":";;AAwDA,IAAM,WAAW,IArDD,IAqDC,CAAA,CAAI,QAAQ;CAhC3B,MAAM;CACN,YAAY;EACV,MAAM,EAAE,MAAM,SAAS;EACvB,UAAU;GAAE,MAAM;GAAU,eAAe;EAAE;EAC7C,MAAM,EAAE,MAAM,SAAS;EACvB,KAAK,EAAE,MAAM,SAAS;EACtB,MAAM;GACJ,MAAM;GACN,YAAY;IACV,SAAS,EAAE,MAAM,SAAS;IAC1B,UAAU,EAAE,MAAM,SAAS;GAC7B;GACA,mBAAmB,EACjB,mCAAmC,EAAE,MAAM,SAAS,EACtD;GACA,sBAAsB;EACxB;EACA,QAAQ,EAAE,MAAM,SAAS;EACzB,aAAa;GACX,MAAM;GACN,YAAY,EACV,QAAQ,EAAE,MAAM,SAAS,EAC3B;GACA,UAAU,CAAC,QAAQ;GACnB,sBAAsB;EACxB;CACF;CACA,UAAU;EAAC;EAAQ;EAAY;EAAa;EAAQ;EAAO;EAAU;CAAM;CAC3E,sBAAsB;AAIK,CAAM;;;;;;;AAQnC,SAAgB,+BAA+B,UAAe;CAC5D,IAAI,CAAC,UACH,OAAO;CAET,OAAO,SAAS,QAAQ;AAC1B"}

package/build/search-utils.js

@@ -2,6 +2,7 @@
 var search_utils_exports = /* @__PURE__ */ require("./_virtual/_rolldown/runtime.js").__exportAll({ UNSCOPED: () => UNSCOPED });
 var UNSCOPED = "unscoped";
 //#endregion
+exports.UNSCOPED = UNSCOPED;
 Object.defineProperty(exports, "search_utils_exports", {
 	enumerable: true,
 	get: function() {

package/build/search-utils.mjs

@@ -3,6 +3,6 @@ import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
 var search_utils_exports = /* @__PURE__ */ __exportAll({ UNSCOPED: () => UNSCOPED });
 var UNSCOPED = "unscoped";
 //#endregion
-export { search_utils_exports };
+export { UNSCOPED, search_utils_exports };
 
 //# sourceMappingURL=search-utils.mjs.map

package/build/stream-utils.d.ts

@@ -1,4 +1,5 @@
-import { Readable, Transform } from 'node:stream';
+import type { Readable } from 'node:stream';
+import { Transform } from 'node:stream';
 /**
  * Converts a buffer stream to a string.
  */

package/build/stream-utils.js

@@ -25,11 +25,13 @@ var transformObjectToString = () => {
 	});
 };
 //#endregion
+exports.readableToString = readableToString;
 Object.defineProperty(exports, "stream_utils_exports", {
 	enumerable: true,
 	get: function() {
 		return stream_utils_exports;
 	}
 });
+exports.transformObjectToString = transformObjectToString;
 
 //# sourceMappingURL=stream-utils.js.map

package/build/stream-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"stream-utils.js","names":[],"sources":["../src/stream-utils.ts"],"sourcesContent":["import type { Readable } from 'node:stream';\nimport { Transform } from 'node:stream';\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream: Readable) => {\n  const chunks: Buffer[] = [];\n  for await (const chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { readableToString, transformObjectToString };\n"],"mappings":";;;;;;;;;;AAMA,IAAM,mBAAmB,OAAO,WAAqB;CACnD,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,QACxB,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAIhC,OAFe,OAAO,OAAO,MACjB,EAAO,SAAS,OACrB;AACT;;;;AAKA,IAAM,gCAAgC;CACpC,OAAO,IAAI,YAAA,UAAU;EACnB,YAAY;EACZ,YAAY,OAAO,UAAU,aAAa;GACxC,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;EACtC;CACF,CAAC;AACH"}
+{"version":3,"file":"stream-utils.js","names":[],"sources":["../src/stream-utils.ts"],"sourcesContent":["import type { Readable } from 'node:stream';\nimport { Transform } from 'node:stream';\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream: Readable) => {\n  const chunks: Buffer[] = [];\n  for await (const chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { readableToString, transformObjectToString };\n"],"mappings":";;;;;;;;;;AAMA,IAAM,mBAAmB,OAAO,WAAqB;CACnD,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,QACxB,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAIhC,OAFe,OAAO,OAAO,MACjB,CAAA,CAAO,SAAS,OACrB;AACT;;;;AAKA,IAAM,gCAAgC;CACpC,OAAO,IAAI,YAAA,UAAU;EACnB,YAAY;EACZ,YAAY,OAAO,UAAU,aAAa;GACxC,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;EACtC;CACF,CAAC;AACH"}

package/build/stream-utils.mjs

@@ -25,6 +25,6 @@ var transformObjectToString = () => {
 	});
 };
 //#endregion
-export { stream_utils_exports };
+export { readableToString, stream_utils_exports, transformObjectToString };
 
 //# sourceMappingURL=stream-utils.mjs.map

package/build/stream-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stream-utils.mjs","names":[],"sources":["../src/stream-utils.ts"],"sourcesContent":["import type { Readable } from 'node:stream';\nimport { Transform } from 'node:stream';\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream: Readable) => {\n  const chunks: Buffer[] = [];\n  for await (const chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { readableToString, transformObjectToString };\n"],"mappings":";;;;;;;;;;AAMA,IAAM,mBAAmB,OAAO,WAAqB;CACnD,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,QACxB,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAIhC,OAFe,OAAO,OAAO,MACjB,EAAO,SAAS,OACrB;AACT;;;;AAKA,IAAM,gCAAgC;CACpC,OAAO,IAAI,UAAU;EACnB,YAAY;EACZ,YAAY,OAAO,UAAU,aAAa;GACxC,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;EACtC;CACF,CAAC;AACH"}
+{"version":3,"file":"stream-utils.mjs","names":[],"sources":["../src/stream-utils.ts"],"sourcesContent":["import type { Readable } from 'node:stream';\nimport { Transform } from 'node:stream';\n\n/**\n * Converts a buffer stream to a string.\n */\nconst readableToString = async (stream: Readable) => {\n  const chunks: Buffer[] = [];\n  for await (const chunk of stream) {\n    chunks.push(Buffer.from(chunk));\n  }\n  const buffer = Buffer.concat(chunks);\n  const str = buffer.toString('utf-8');\n  return str;\n};\n\n/**\n * Transform stream object  mode to string\n **/\nconst transformObjectToString = () => {\n  return new Transform({\n    objectMode: true,\n    transform: (chunk, encoding, callback) => {\n      callback(null, JSON.stringify(chunk));\n    },\n  });\n};\n\nexport { readableToString, transformObjectToString };\n"],"mappings":";;;;;;;;;;AAMA,IAAM,mBAAmB,OAAO,WAAqB;CACnD,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,QACxB,OAAO,KAAK,OAAO,KAAK,KAAK,CAAC;CAIhC,OAFe,OAAO,OAAO,MACjB,CAAA,CAAO,SAAS,OACrB;AACT;;;;AAKA,IAAM,gCAAgC;CACpC,OAAO,IAAI,UAAU;EACnB,YAAY;EACZ,YAAY,OAAO,UAAU,aAAa;GACxC,SAAS,MAAM,KAAK,UAAU,KAAK,CAAC;EACtC;CACF,CAAC;AACH"}

package/build/string-utils.js

@@ -25,6 +25,7 @@ function getByQualityPriorityValue(headerValue) {
 	return header[0];
 }
 //#endregion
+exports.getByQualityPriorityValue = getByQualityPriorityValue;
 Object.defineProperty(exports, "string_utils_exports", {
 	enumerable: true,
 	get: function() {

package/build/string-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"string-utils.js","names":[],"sources":["../src/string-utils.ts"],"sourcesContent":["/**\n * Quality values, or q-values and q-factors, are used to describe the order\n * of priority of values in a comma-separated list.\n * It is a special syntax allowed in some HTTP headers and in HTML.\n * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values\n * @param headerValue\n */\nexport function getByQualityPriorityValue(headerValue: string | undefined | null): string {\n  if (typeof headerValue !== 'string') {\n    return '';\n  }\n\n  const split = headerValue.split(',');\n\n  if (split.length <= 1) {\n    const qList = split[0].split(';');\n    return qList[0];\n  }\n\n  const [header] = split\n    .reduce((acc, item: string) => {\n      const qList = item.split(';');\n      if (qList.length > 1) {\n        const [accept, q] = qList;\n        const [, query] = q.split('=');\n        acc.push([accept.trim(), query ? query : 0]);\n      } else {\n        acc.push([qList[0], 0]);\n      }\n      return acc;\n    }, [] as any)\n    .sort(function (a: number[], b: number[]) {\n      return b[1] - a[1];\n    });\n  return header[0];\n}\n"],"mappings":";;;;;;;;;AAOA,SAAgB,0BAA0B,aAAgD;CACxF,IAAI,OAAO,gBAAgB,UACzB,OAAO;CAGT,MAAM,QAAQ,YAAY,MAAM,GAAG;CAEnC,IAAI,MAAM,UAAU,GAElB,OADc,MAAM,GAAG,MAAM,GACtB,EAAM;CAGf,MAAM,CAAC,UAAU,MACd,QAAQ,KAAK,SAAiB;EAC7B,MAAM,QAAQ,KAAK,MAAM,GAAG;EAC5B,IAAI,MAAM,SAAS,GAAG;GACpB,MAAM,CAAC,QAAQ,KAAK;GACpB,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG;GAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,QAAQ,QAAQ,CAAC,CAAC;EAC7C,OACE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;EAExB,OAAO;CACT,GAAG,CAAC,CAAQ,EACX,KAAK,SAAU,GAAa,GAAa;EACxC,OAAO,EAAE,KAAK,EAAE;CAClB,CAAC;CACH,OAAO,OAAO;AAChB"}
+{"version":3,"file":"string-utils.js","names":[],"sources":["../src/string-utils.ts"],"sourcesContent":["/**\n * Quality values, or q-values and q-factors, are used to describe the order\n * of priority of values in a comma-separated list.\n * It is a special syntax allowed in some HTTP headers and in HTML.\n * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values\n * @param headerValue\n */\nexport function getByQualityPriorityValue(headerValue: string | undefined | null): string {\n  if (typeof headerValue !== 'string') {\n    return '';\n  }\n\n  const split = headerValue.split(',');\n\n  if (split.length <= 1) {\n    const qList = split[0].split(';');\n    return qList[0];\n  }\n\n  const [header] = split\n    .reduce((acc, item: string) => {\n      const qList = item.split(';');\n      if (qList.length > 1) {\n        const [accept, q] = qList;\n        const [, query] = q.split('=');\n        acc.push([accept.trim(), query ? query : 0]);\n      } else {\n        acc.push([qList[0], 0]);\n      }\n      return acc;\n    }, [] as any)\n    .sort(function (a: number[], b: number[]) {\n      return b[1] - a[1];\n    });\n  return header[0];\n}\n"],"mappings":";;;;;;;;;AAOA,SAAgB,0BAA0B,aAAgD;CACxF,IAAI,OAAO,gBAAgB,UACzB,OAAO;CAGT,MAAM,QAAQ,YAAY,MAAM,GAAG;CAEnC,IAAI,MAAM,UAAU,GAElB,OADc,MAAM,EAAE,CAAC,MAAM,GACtB,CAAA,CAAM;CAGf,MAAM,CAAC,UAAU,MACd,QAAQ,KAAK,SAAiB;EAC7B,MAAM,QAAQ,KAAK,MAAM,GAAG;EAC5B,IAAI,MAAM,SAAS,GAAG;GACpB,MAAM,CAAC,QAAQ,KAAK;GACpB,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG;GAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,QAAQ,QAAQ,CAAC,CAAC;EAC7C,OACE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;EAExB,OAAO;CACT,GAAG,CAAC,CAAQ,CAAC,CACZ,KAAK,SAAU,GAAa,GAAa;EACxC,OAAO,EAAE,KAAK,EAAE;CAClB,CAAC;CACH,OAAO,OAAO;AAChB"}

package/build/string-utils.mjs

@@ -26,6 +26,6 @@ function getByQualityPriorityValue(headerValue) {
 	return header[0];
 }
 //#endregion
-export { string_utils_exports };
+export { getByQualityPriorityValue, string_utils_exports };
 
 //# sourceMappingURL=string-utils.mjs.map

package/build/string-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"string-utils.mjs","names":[],"sources":["../src/string-utils.ts"],"sourcesContent":["/**\n * Quality values, or q-values and q-factors, are used to describe the order\n * of priority of values in a comma-separated list.\n * It is a special syntax allowed in some HTTP headers and in HTML.\n * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values\n * @param headerValue\n */\nexport function getByQualityPriorityValue(headerValue: string | undefined | null): string {\n  if (typeof headerValue !== 'string') {\n    return '';\n  }\n\n  const split = headerValue.split(',');\n\n  if (split.length <= 1) {\n    const qList = split[0].split(';');\n    return qList[0];\n  }\n\n  const [header] = split\n    .reduce((acc, item: string) => {\n      const qList = item.split(';');\n      if (qList.length > 1) {\n        const [accept, q] = qList;\n        const [, query] = q.split('=');\n        acc.push([accept.trim(), query ? query : 0]);\n      } else {\n        acc.push([qList[0], 0]);\n      }\n      return acc;\n    }, [] as any)\n    .sort(function (a: number[], b: number[]) {\n      return b[1] - a[1];\n    });\n  return header[0];\n}\n"],"mappings":";;;;;;;;;;AAOA,SAAgB,0BAA0B,aAAgD;CACxF,IAAI,OAAO,gBAAgB,UACzB,OAAO;CAGT,MAAM,QAAQ,YAAY,MAAM,GAAG;CAEnC,IAAI,MAAM,UAAU,GAElB,OADc,MAAM,GAAG,MAAM,GACtB,EAAM;CAGf,MAAM,CAAC,UAAU,MACd,QAAQ,KAAK,SAAiB;EAC7B,MAAM,QAAQ,KAAK,MAAM,GAAG;EAC5B,IAAI,MAAM,SAAS,GAAG;GACpB,MAAM,CAAC,QAAQ,KAAK;GACpB,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG;GAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,QAAQ,QAAQ,CAAC,CAAC;EAC7C,OACE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;EAExB,OAAO;CACT,GAAG,CAAC,CAAQ,EACX,KAAK,SAAU,GAAa,GAAa;EACxC,OAAO,EAAE,KAAK,EAAE;CAClB,CAAC;CACH,OAAO,OAAO;AAChB"}
+{"version":3,"file":"string-utils.mjs","names":[],"sources":["../src/string-utils.ts"],"sourcesContent":["/**\n * Quality values, or q-values and q-factors, are used to describe the order\n * of priority of values in a comma-separated list.\n * It is a special syntax allowed in some HTTP headers and in HTML.\n * https://developer.mozilla.org/en-US/docs/Glossary/Quality_values\n * @param headerValue\n */\nexport function getByQualityPriorityValue(headerValue: string | undefined | null): string {\n  if (typeof headerValue !== 'string') {\n    return '';\n  }\n\n  const split = headerValue.split(',');\n\n  if (split.length <= 1) {\n    const qList = split[0].split(';');\n    return qList[0];\n  }\n\n  const [header] = split\n    .reduce((acc, item: string) => {\n      const qList = item.split(';');\n      if (qList.length > 1) {\n        const [accept, q] = qList;\n        const [, query] = q.split('=');\n        acc.push([accept.trim(), query ? query : 0]);\n      } else {\n        acc.push([qList[0], 0]);\n      }\n      return acc;\n    }, [] as any)\n    .sort(function (a: number[], b: number[]) {\n      return b[1] - a[1];\n    });\n  return header[0];\n}\n"],"mappings":";;;;;;;;;;AAOA,SAAgB,0BAA0B,aAAgD;CACxF,IAAI,OAAO,gBAAgB,UACzB,OAAO;CAGT,MAAM,QAAQ,YAAY,MAAM,GAAG;CAEnC,IAAI,MAAM,UAAU,GAElB,OADc,MAAM,EAAE,CAAC,MAAM,GACtB,CAAA,CAAM;CAGf,MAAM,CAAC,UAAU,MACd,QAAQ,KAAK,SAAiB;EAC7B,MAAM,QAAQ,KAAK,MAAM,GAAG;EAC5B,IAAI,MAAM,SAAS,GAAG;GACpB,MAAM,CAAC,QAAQ,KAAK;GACpB,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG;GAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG,QAAQ,QAAQ,CAAC,CAAC;EAC7C,OACE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;EAExB,OAAO;CACT,GAAG,CAAC,CAAQ,CAAC,CACZ,KAAK,SAAU,GAAa,GAAa;EACxC,OAAO,EAAE,KAAK,EAAE;CAClB,CAAC;CACH,OAAO,OAAO;AAChB"}

package/build/tarball-utils.js

@@ -41,6 +41,9 @@ function composeTarballFromPackage(name, version) {
 	else return `${name}-${version}.tgz`;
 }
 //#endregion
+exports.composeTarballFromPackage = composeTarballFromPackage;
+exports.extractTarballFromUrl = extractTarballFromUrl;
+exports.getVersionFromTarball = getVersionFromTarball;
 Object.defineProperty(exports, "tarball_utils_exports", {
 	enumerable: true,
 	get: function() {

package/build/tarball-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"tarball-utils.js","names":[],"sources":["../src/tarball-utils.ts"],"sourcesContent":["import { URL } from 'node:url';\n\n/**\n * Return package version from tarball name\n *\n * test-1.2.4.tgz -> 1.2.4\n * @param {String} fileName\n * @returns {String}\n */\nexport function getVersionFromTarball(fileName: string): string | void {\n  const groups = fileName.replace(/\\.tgz$/, '').match(/^[^/]+-(\\d+\\.\\d+\\.\\d+.*)/);\n\n  return groups !== null ? groups[1] : undefined;\n}\n\n/**\n * Extract the tarball name from a registry dist url\n *\n * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz\n * @param tarball tarball url\n * @returns tarball filename\n */\nexport function extractTarballFromUrl(url: string): string {\n  const urlObject = new URL(url);\n  return urlObject.pathname.replace(/^.*\\//, '');\n}\n\n/**\n * Build the tarball filename from paackage name and version\n *\n * test, 1.2.4 -> test-1.2.4.tgz\n * @scope/name, 1.2.4 -> name-1.2.4.tgz\n * @param name package name\n * @param version package version\n * @returns tarball filename\n */\nexport function composeTarballFromPackage(name: string, version: string): string {\n  if (name.includes('/')) {\n    return `${name.split('/')[1]}-${version}.tgz`;\n  } else {\n    return `${name}-${version}.tgz`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AASA,SAAgB,sBAAsB,UAAiC;CACrE,MAAM,SAAS,SAAS,QAAQ,UAAU,EAAE,EAAE,MAAM,0BAA0B;CAE9E,OAAO,WAAW,OAAO,OAAO,KAAK,KAAA;AACvC;;;;;;;;AASA,SAAgB,sBAAsB,KAAqB;CAEzD,OAAO,IADe,SAAA,IAAI,GACnB,EAAU,SAAS,QAAQ,SAAS,EAAE;AAC/C;;;;;;;;;;AAWA,SAAgB,0BAA0B,MAAc,SAAyB;CAC/E,IAAI,KAAK,SAAS,GAAG,GACnB,OAAO,GAAG,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,QAAQ;MAExC,OAAO,GAAG,KAAK,GAAG,QAAQ;AAE9B"}
+{"version":3,"file":"tarball-utils.js","names":[],"sources":["../src/tarball-utils.ts"],"sourcesContent":["import { URL } from 'node:url';\n\n/**\n * Return package version from tarball name\n *\n * test-1.2.4.tgz -> 1.2.4\n * @param {String} fileName\n * @returns {String}\n */\nexport function getVersionFromTarball(fileName: string): string | void {\n  const groups = fileName.replace(/\\.tgz$/, '').match(/^[^/]+-(\\d+\\.\\d+\\.\\d+.*)/);\n\n  return groups !== null ? groups[1] : undefined;\n}\n\n/**\n * Extract the tarball name from a registry dist url\n *\n * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz\n * @param tarball tarball url\n * @returns tarball filename\n */\nexport function extractTarballFromUrl(url: string): string {\n  const urlObject = new URL(url);\n  return urlObject.pathname.replace(/^.*\\//, '');\n}\n\n/**\n * Build the tarball filename from paackage name and version\n *\n * test, 1.2.4 -> test-1.2.4.tgz\n * @scope/name, 1.2.4 -> name-1.2.4.tgz\n * @param name package name\n * @param version package version\n * @returns tarball filename\n */\nexport function composeTarballFromPackage(name: string, version: string): string {\n  if (name.includes('/')) {\n    return `${name.split('/')[1]}-${version}.tgz`;\n  } else {\n    return `${name}-${version}.tgz`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AASA,SAAgB,sBAAsB,UAAiC;CACrE,MAAM,SAAS,SAAS,QAAQ,UAAU,EAAE,CAAC,CAAC,MAAM,0BAA0B;CAE9E,OAAO,WAAW,OAAO,OAAO,KAAK,KAAA;AACvC;;;;;;;;AASA,SAAgB,sBAAsB,KAAqB;CAEzD,OAAO,IADe,SAAA,IAAI,GACnB,CAAA,CAAU,SAAS,QAAQ,SAAS,EAAE;AAC/C;;;;;;;;;;AAWA,SAAgB,0BAA0B,MAAc,SAAyB;CAC/E,IAAI,KAAK,SAAS,GAAG,GACnB,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,QAAQ;MAExC,OAAO,GAAG,KAAK,GAAG,QAAQ;AAE9B"}

package/build/tarball-utils.mjs

@@ -41,6 +41,6 @@ function composeTarballFromPackage(name, version) {
 	else return `${name}-${version}.tgz`;
 }
 //#endregion
-export { tarball_utils_exports };
+export { composeTarballFromPackage, extractTarballFromUrl, getVersionFromTarball, tarball_utils_exports };
 
 //# sourceMappingURL=tarball-utils.mjs.map

package/build/tarball-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tarball-utils.mjs","names":[],"sources":["../src/tarball-utils.ts"],"sourcesContent":["import { URL } from 'node:url';\n\n/**\n * Return package version from tarball name\n *\n * test-1.2.4.tgz -> 1.2.4\n * @param {String} fileName\n * @returns {String}\n */\nexport function getVersionFromTarball(fileName: string): string | void {\n  const groups = fileName.replace(/\\.tgz$/, '').match(/^[^/]+-(\\d+\\.\\d+\\.\\d+.*)/);\n\n  return groups !== null ? groups[1] : undefined;\n}\n\n/**\n * Extract the tarball name from a registry dist url\n *\n * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz\n * @param tarball tarball url\n * @returns tarball filename\n */\nexport function extractTarballFromUrl(url: string): string {\n  const urlObject = new URL(url);\n  return urlObject.pathname.replace(/^.*\\//, '');\n}\n\n/**\n * Build the tarball filename from paackage name and version\n *\n * test, 1.2.4 -> test-1.2.4.tgz\n * @scope/name, 1.2.4 -> name-1.2.4.tgz\n * @param name package name\n * @param version package version\n * @returns tarball filename\n */\nexport function composeTarballFromPackage(name: string, version: string): string {\n  if (name.includes('/')) {\n    return `${name.split('/')[1]}-${version}.tgz`;\n  } else {\n    return `${name}-${version}.tgz`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AASA,SAAgB,sBAAsB,UAAiC;CACrE,MAAM,SAAS,SAAS,QAAQ,UAAU,EAAE,EAAE,MAAM,0BAA0B;CAE9E,OAAO,WAAW,OAAO,OAAO,KAAK,KAAA;AACvC;;;;;;;;AASA,SAAgB,sBAAsB,KAAqB;CAEzD,OAAO,IADe,IAAI,GACnB,EAAU,SAAS,QAAQ,SAAS,EAAE;AAC/C;;;;;;;;;;AAWA,SAAgB,0BAA0B,MAAc,SAAyB;CAC/E,IAAI,KAAK,SAAS,GAAG,GACnB,OAAO,GAAG,KAAK,MAAM,GAAG,EAAE,GAAG,GAAG,QAAQ;MAExC,OAAO,GAAG,KAAK,GAAG,QAAQ;AAE9B"}
+{"version":3,"file":"tarball-utils.mjs","names":[],"sources":["../src/tarball-utils.ts"],"sourcesContent":["import { URL } from 'node:url';\n\n/**\n * Return package version from tarball name\n *\n * test-1.2.4.tgz -> 1.2.4\n * @param {String} fileName\n * @returns {String}\n */\nexport function getVersionFromTarball(fileName: string): string | void {\n  const groups = fileName.replace(/\\.tgz$/, '').match(/^[^/]+-(\\d+\\.\\d+\\.\\d+.*)/);\n\n  return groups !== null ? groups[1] : undefined;\n}\n\n/**\n * Extract the tarball name from a registry dist url\n *\n * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz\n * @param tarball tarball url\n * @returns tarball filename\n */\nexport function extractTarballFromUrl(url: string): string {\n  const urlObject = new URL(url);\n  return urlObject.pathname.replace(/^.*\\//, '');\n}\n\n/**\n * Build the tarball filename from paackage name and version\n *\n * test, 1.2.4 -> test-1.2.4.tgz\n * @scope/name, 1.2.4 -> name-1.2.4.tgz\n * @param name package name\n * @param version package version\n * @returns tarball filename\n */\nexport function composeTarballFromPackage(name: string, version: string): string {\n  if (name.includes('/')) {\n    return `${name.split('/')[1]}-${version}.tgz`;\n  } else {\n    return `${name}-${version}.tgz`;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AASA,SAAgB,sBAAsB,UAAiC;CACrE,MAAM,SAAS,SAAS,QAAQ,UAAU,EAAE,CAAC,CAAC,MAAM,0BAA0B;CAE9E,OAAO,WAAW,OAAO,OAAO,KAAK,KAAA;AACvC;;;;;;;;AASA,SAAgB,sBAAsB,KAAqB;CAEzD,OAAO,IADe,IAAI,GACnB,CAAA,CAAU,SAAS,QAAQ,SAAS,EAAE;AAC/C;;;;;;;;;;AAWA,SAAgB,0BAA0B,MAAc,SAAyB;CAC/E,IAAI,KAAK,SAAS,GAAG,GACnB,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,QAAQ;MAExC,OAAO,GAAG,KAAK,GAAG,QAAQ;AAE9B"}

package/build/validation-utils.d.ts

@@ -1,4 +1,4 @@
-import { Manifest } from '@verdaccio/types';
+import type { Manifest } from '@verdaccio/types';
 export { validatePublishSingleVersion } from './schemes/publish-manifest';
 export { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';
 export declare function isPackageNameScoped(name: string): boolean;

package/build/validation-utils.js

@@ -96,6 +96,15 @@ function validateUserName(userName, expectedName) {
 	return typeof userName === "string" && userName.split(":")[0] === "org.couchdb.user" && userName.split(":")[1] === expectedName;
 }
 //#endregion
+exports.isObject = isObject;
+exports.isPackageNameScoped = isPackageNameScoped;
+exports.normalizeMetadata = normalizeMetadata;
+exports.validateName = validateName;
+exports.validatePackage = validatePackage;
+exports.validatePassword = validatePassword;
+exports.validatePublishSingleVersion = require_publish_manifest.validatePublishSingleVersion;
+exports.validateUnPublishSingleVersion = require_unpublish_manifest.validateUnPublishSingleVersion;
+exports.validateUserName = validateUserName;
 Object.defineProperty(exports, "validation_utils_exports", {
 	enumerable: true,
 	get: function() {

package/build/validation-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation-utils.js","names":[],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'node:assert';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\nexport { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp | string = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  if (typeof password !== 'string') {\n    return false;\n  }\n\n  let regex: RegExp;\n  if (validation instanceof RegExp) {\n    regex = validation;\n  } else if (typeof validation === 'string') {\n    // YAML config loads `passwordValidationRegex` as a plain string,\n    // so coerce it into a RegExp here. Invalid patterns fall back to false.\n    try {\n      regex = new RegExp(validation);\n    } catch {\n      return false;\n    }\n  } else {\n    return false;\n  }\n\n  return password.match(regex) !== null;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AASA,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,GAAG;AAC5B;;;;;;AAOA,SAAgB,aAAa,MAAuB;CAClD,IAAI,OAAO,SAAS,UAClB,OAAO;CAGT,IAAI,iBAAyB,KAAK,YAAY;CAE9C,MAAM,WAAoB,oBAAoB,IAAI;CAClD,MAAM,aAAa,KAAK,MAAM,KAAK,CAAC,EAAE;CAEtC,IAAI,YAAY,OAAO,eAAe,aACpC,iBAAiB,WAAW,YAAY;;;;;;;;;;;;CAc1C,OAAO,EACL,CAAC,eAAe,MAAM,0BAA0B,KAChD,eAAe,WAAW,GAAG,KAC7B;EAAC;EAAgB;EAAa;CAAa,EAAE,SAAS,cAAc;AAExE;;;;;AAMA,SAAgB,gBAAgB,MAAuB;CACrD,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC;CAClC,IAAI,SAAS,WAAW,GAEtB,OAAO,aAAa,SAAS,EAAE;CAGjC,OAAO,SAAS,GAAG,OAAO,OAAO,aAAa,SAAS,GAAG,MAAM,CAAC,CAAC,KAAK,aAAa,SAAS,EAAE;AACjG;;;;;;;;AASA,SAAgB,kBAAkB,UAAoB,MAAwB;CAC5E,YAAA,QAAO,YAAY,SAAS,MAAM,IAAI;CACtC,MAAM,YAAY,EAAE,GAAG,SAAS;CAEhC,IAAI,CAAC,SAAS,SAAA,YAAmB,GAC/B,UAAU,kBAAA,aAAa,CAAC;CAG1B,IAAI,CAAC,MAAM,QAAQ,SAAA,cAAqB,GACtC,UAAU,kBAAA,eAAe,CAAC;CAI5B,IAAI,CAAC,SAAS,SAAS,WAAW,GAChC,UAAU,cAAc,CAAC;CAG3B,IAAI,CAAC,SAAS,SAAS,OAAO,GAC5B,UAAU,UAAU,CAAC;CAGvB,OAAO;AACT;;;;;;AAOA,SAAgB,SAAS,KAAmB;CAS1C,OAAO,OAAO,UAAU,SAAS,KAAK,GAAG,MAAM;AACjD;AAEA,SAAgB,iBACd,UACA,aAA8B,kBAAA,6BACrB;CACT,IAAI,OAAO,aAAa,UACtB,OAAO;CAGT,IAAI;CACJ,IAAI,sBAAsB,QACxB,QAAQ;MACH,IAAI,OAAO,eAAe,UAG/B,IAAI;EACF,QAAQ,IAAI,OAAO,UAAU;CAC/B,QAAQ;EACN,OAAO;CACT;MAEA,OAAO;CAGT,OAAO,SAAS,MAAM,KAAK,MAAM;AACnC;AAEA,SAAgB,iBAAiB,UAAe,cAA+B;CAC7E,OACE,OAAO,aAAa,YACpB,SAAS,MAAM,GAAG,EAAE,OAAO,sBAC3B,SAAS,MAAM,GAAG,EAAE,OAAO;AAE/B"}
+{"version":3,"file":"validation-utils.js","names":[],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'node:assert';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\nexport { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp | string = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  if (typeof password !== 'string') {\n    return false;\n  }\n\n  let regex: RegExp;\n  if (validation instanceof RegExp) {\n    regex = validation;\n  } else if (typeof validation === 'string') {\n    // YAML config loads `passwordValidationRegex` as a plain string,\n    // so coerce it into a RegExp here. Invalid patterns fall back to false.\n    try {\n      regex = new RegExp(validation);\n    } catch {\n      return false;\n    }\n  } else {\n    return false;\n  }\n\n  return password.match(regex) !== null;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AASA,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,GAAG;AAC5B;;;;;;AAOA,SAAgB,aAAa,MAAuB;CAClD,IAAI,OAAO,SAAS,UAClB,OAAO;CAGT,IAAI,iBAAyB,KAAK,YAAY;CAE9C,MAAM,WAAoB,oBAAoB,IAAI;CAClD,MAAM,aAAa,KAAK,MAAM,KAAK,CAAC,CAAC,CAAC;CAEtC,IAAI,YAAY,OAAO,eAAe,aACpC,iBAAiB,WAAW,YAAY;;;;;;;;;;;;CAc1C,OAAO,EACL,CAAC,eAAe,MAAM,0BAA0B,KAChD,eAAe,WAAW,GAAG,KAC7B;EAAC;EAAgB;EAAa;CAAa,CAAC,CAAC,SAAS,cAAc;AAExE;;;;;AAMA,SAAgB,gBAAgB,MAAuB;CACrD,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC;CAClC,IAAI,SAAS,WAAW,GAEtB,OAAO,aAAa,SAAS,EAAE;CAGjC,OAAO,SAAS,EAAE,CAAC,OAAO,OAAO,aAAa,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,aAAa,SAAS,EAAE;AACjG;;;;;;;;AASA,SAAgB,kBAAkB,UAAoB,MAAwB;CAC5E,YAAA,QAAO,YAAY,SAAS,MAAM,IAAI;CACtC,MAAM,YAAY,EAAE,GAAG,SAAS;CAEhC,IAAI,CAAC,SAAS,SAAA,YAAmB,GAC/B,UAAU,kBAAA,aAAa,CAAC;CAG1B,IAAI,CAAC,MAAM,QAAQ,SAAA,cAAqB,GACtC,UAAU,kBAAA,eAAe,CAAC;CAI5B,IAAI,CAAC,SAAS,SAAS,WAAW,GAChC,UAAU,cAAc,CAAC;CAG3B,IAAI,CAAC,SAAS,SAAS,OAAO,GAC5B,UAAU,UAAU,CAAC;CAGvB,OAAO;AACT;;;;;;AAOA,SAAgB,SAAS,KAAmB;CAS1C,OAAO,OAAO,UAAU,SAAS,KAAK,GAAG,MAAM;AACjD;AAEA,SAAgB,iBACd,UACA,aAA8B,kBAAA,6BACrB;CACT,IAAI,OAAO,aAAa,UACtB,OAAO;CAGT,IAAI;CACJ,IAAI,sBAAsB,QACxB,QAAQ;MACH,IAAI,OAAO,eAAe,UAG/B,IAAI;EACF,QAAQ,IAAI,OAAO,UAAU;CAC/B,QAAQ;EACN,OAAO;CACT;MAEA,OAAO;CAGT,OAAO,SAAS,MAAM,KAAK,MAAM;AACnC;AAEA,SAAgB,iBAAiB,UAAe,cAA+B;CAC7E,OACE,OAAO,aAAa,YACpB,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,sBAC3B,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO;AAE/B"}

package/build/validation-utils.mjs

@@ -95,6 +95,6 @@ function validateUserName(userName, expectedName) {
 	return typeof userName === "string" && userName.split(":")[0] === "org.couchdb.user" && userName.split(":")[1] === expectedName;
 }
 //#endregion
-export { validation_utils_exports };
+export { isObject, isPackageNameScoped, normalizeMetadata, validateName, validatePackage, validatePassword, validatePublishSingleVersion, validateUnPublishSingleVersion, validateUserName, validation_utils_exports };
 
 //# sourceMappingURL=validation-utils.mjs.map

package/build/validation-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validation-utils.mjs","names":[],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'node:assert';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\nexport { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp | string = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  if (typeof password !== 'string') {\n    return false;\n  }\n\n  let regex: RegExp;\n  if (validation instanceof RegExp) {\n    regex = validation;\n  } else if (typeof validation === 'string') {\n    // YAML config loads `passwordValidationRegex` as a plain string,\n    // so coerce it into a RegExp here. Invalid patterns fall back to false.\n    try {\n      regex = new RegExp(validation);\n    } catch {\n      return false;\n    }\n  } else {\n    return false;\n  }\n\n  return password.match(regex) !== null;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AASA,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,GAAG;AAC5B;;;;;;AAOA,SAAgB,aAAa,MAAuB;CAClD,IAAI,OAAO,SAAS,UAClB,OAAO;CAGT,IAAI,iBAAyB,KAAK,YAAY;CAE9C,MAAM,WAAoB,oBAAoB,IAAI;CAClD,MAAM,aAAa,KAAK,MAAM,KAAK,CAAC,EAAE;CAEtC,IAAI,YAAY,OAAO,eAAe,aACpC,iBAAiB,WAAW,YAAY;;;;;;;;;;;;CAc1C,OAAO,EACL,CAAC,eAAe,MAAM,0BAA0B,KAChD,eAAe,WAAW,GAAG,KAC7B;EAAC;EAAgB;EAAa;CAAa,EAAE,SAAS,cAAc;AAExE;;;;;AAMA,SAAgB,gBAAgB,MAAuB;CACrD,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC;CAClC,IAAI,SAAS,WAAW,GAEtB,OAAO,aAAa,SAAS,EAAE;CAGjC,OAAO,SAAS,GAAG,OAAO,OAAO,aAAa,SAAS,GAAG,MAAM,CAAC,CAAC,KAAK,aAAa,SAAS,EAAE;AACjG;;;;;;;;AASA,SAAgB,kBAAkB,UAAoB,MAAwB;CAC5E,OAAO,YAAY,SAAS,MAAM,IAAI;CACtC,MAAM,YAAY,EAAE,GAAG,SAAS;CAEhC,IAAI,CAAC,SAAS,SAAA,YAAmB,GAC/B,UAAU,aAAa,CAAC;CAG1B,IAAI,CAAC,MAAM,QAAQ,SAAA,cAAqB,GACtC,UAAU,eAAe,CAAC;CAI5B,IAAI,CAAC,SAAS,SAAS,WAAW,GAChC,UAAU,cAAc,CAAC;CAG3B,IAAI,CAAC,SAAS,SAAS,OAAO,GAC5B,UAAU,UAAU,CAAC;CAGvB,OAAO;AACT;;;;;;AAOA,SAAgB,SAAS,KAAmB;CAS1C,OAAO,OAAO,UAAU,SAAS,KAAK,GAAG,MAAM;AACjD;AAEA,SAAgB,iBACd,UACA,aAA8B,6BACrB;CACT,IAAI,OAAO,aAAa,UACtB,OAAO;CAGT,IAAI;CACJ,IAAI,sBAAsB,QACxB,QAAQ;MACH,IAAI,OAAO,eAAe,UAG/B,IAAI;EACF,QAAQ,IAAI,OAAO,UAAU;CAC/B,QAAQ;EACN,OAAO;CACT;MAEA,OAAO;CAGT,OAAO,SAAS,MAAM,KAAK,MAAM;AACnC;AAEA,SAAgB,iBAAiB,UAAe,cAA+B;CAC7E,OACE,OAAO,aAAa,YACpB,SAAS,MAAM,GAAG,EAAE,OAAO,sBAC3B,SAAS,MAAM,GAAG,EAAE,OAAO;AAE/B"}
+{"version":3,"file":"validation-utils.mjs","names":[],"sources":["../src/validation-utils.ts"],"sourcesContent":["import assert from 'node:assert';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport { DEFAULT_PASSWORD_VALIDATION, DIST_TAGS, MAINTAINERS } from './constants';\n\nexport { validatePublishSingleVersion } from './schemes/publish-manifest';\nexport { validateUnPublishSingleVersion } from './schemes/unpublish-manifest';\n\nexport function isPackageNameScoped(name: string): boolean {\n  return name.startsWith('@');\n}\n\n/**\n * From normalize-package-data/lib/fixer.js\n * @param {*} name  the package name\n * @return {Boolean} whether is valid or not\n */\nexport function validateName(name: string): boolean {\n  if (typeof name !== 'string') {\n    return false;\n  }\n\n  let normalizedName: string = name.toLowerCase();\n\n  const isScoped: boolean = isPackageNameScoped(name);\n  const scopedName = name.split('/', 2)[1];\n\n  if (isScoped && typeof scopedName !== 'undefined') {\n    normalizedName = scopedName.toLowerCase();\n  }\n\n  /**\n   * Some context about the first regex\n   * - npm used to have a different tarball naming system.\n   * eg: http://registry.npmjs.com/thirty-two\n   * https://registry.npmjs.org/thirty-two/-/thirty-two@0.0.1.tgz\n   * The file name thirty-two@0.0.1.tgz, the version and the pkg name was separated by an at (@)\n   * while nowadays the naming system is based in dashes\n   * https://registry.npmjs.org/verdaccio/-/verdaccio-1.4.0.tgz\n   *\n   * more info here: https://github.com/rlidwka/sinopia/issues/75\n   */\n  return !(\n    !normalizedName.match(/^[-a-zA-Z0-9_.!~*'()@]+$/) ||\n    normalizedName.startsWith('.') || // \".bin\", etc.\n    ['node_modules', '__proto__', 'favicon.ico'].includes(normalizedName)\n  );\n}\n\n/**\n * Validate a package.\n * @return {Boolean} whether the package is valid or not\n */\nexport function validatePackage(name: string): boolean {\n  const nameList = name.split('/', 2);\n  if (nameList.length === 1) {\n    // normal package\n    return validateName(nameList[0]);\n  }\n  // scoped package\n  return nameList[0][0] === '@' && validateName(nameList[0].slice(1)) && validateName(nameList[1]);\n}\n\n/**\n * Validate the package metadata, add additional properties whether are missing within\n * the metadata properties.\n * @param {*} manifest\n * @param {*} name\n * @return {Object} the object with additional properties as dist-tags ad versions\n */\nexport function normalizeMetadata(manifest: Manifest, name: string): Manifest {\n  assert.strictEqual(manifest.name, name);\n  const _manifest = { ...manifest };\n\n  if (!isObject(manifest[DIST_TAGS])) {\n    _manifest[DIST_TAGS] = {};\n  }\n\n  if (!Array.isArray(manifest[MAINTAINERS])) {\n    _manifest[MAINTAINERS] = [];\n  }\n\n  // This may not be needed\n  if (!isObject(manifest['versions'])) {\n    _manifest['versions'] = {};\n  }\n\n  if (!isObject(manifest['time'])) {\n    _manifest['time'] = {};\n  }\n\n  return _manifest;\n}\n\n/**\n * Check whether an element is an Object\n * @param {*} obj the element\n * @return {Boolean}\n */\nexport function isObject(obj: any): boolean {\n  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {\n  //   return false;\n  // }\n\n  // return (\n  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&\n  //   Array.isArray(obj) === false\n  // );\n  return Object.prototype.toString.call(obj) === '[object Object]';\n}\n\nexport function validatePassword(\n  password: string,\n  validation: RegExp | string = DEFAULT_PASSWORD_VALIDATION\n): boolean {\n  if (typeof password !== 'string') {\n    return false;\n  }\n\n  let regex: RegExp;\n  if (validation instanceof RegExp) {\n    regex = validation;\n  } else if (typeof validation === 'string') {\n    // YAML config loads `passwordValidationRegex` as a plain string,\n    // so coerce it into a RegExp here. Invalid patterns fall back to false.\n    try {\n      regex = new RegExp(validation);\n    } catch {\n      return false;\n    }\n  } else {\n    return false;\n  }\n\n  return password.match(regex) !== null;\n}\n\nexport function validateUserName(userName: any, expectedName: string): boolean {\n  return (\n    typeof userName === 'string' &&\n    userName.split(':')[0] === 'org.couchdb.user' &&\n    userName.split(':')[1] === expectedName\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AASA,SAAgB,oBAAoB,MAAuB;CACzD,OAAO,KAAK,WAAW,GAAG;AAC5B;;;;;;AAOA,SAAgB,aAAa,MAAuB;CAClD,IAAI,OAAO,SAAS,UAClB,OAAO;CAGT,IAAI,iBAAyB,KAAK,YAAY;CAE9C,MAAM,WAAoB,oBAAoB,IAAI;CAClD,MAAM,aAAa,KAAK,MAAM,KAAK,CAAC,CAAC,CAAC;CAEtC,IAAI,YAAY,OAAO,eAAe,aACpC,iBAAiB,WAAW,YAAY;;;;;;;;;;;;CAc1C,OAAO,EACL,CAAC,eAAe,MAAM,0BAA0B,KAChD,eAAe,WAAW,GAAG,KAC7B;EAAC;EAAgB;EAAa;CAAa,CAAC,CAAC,SAAS,cAAc;AAExE;;;;;AAMA,SAAgB,gBAAgB,MAAuB;CACrD,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC;CAClC,IAAI,SAAS,WAAW,GAEtB,OAAO,aAAa,SAAS,EAAE;CAGjC,OAAO,SAAS,EAAE,CAAC,OAAO,OAAO,aAAa,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,aAAa,SAAS,EAAE;AACjG;;;;;;;;AASA,SAAgB,kBAAkB,UAAoB,MAAwB;CAC5E,OAAO,YAAY,SAAS,MAAM,IAAI;CACtC,MAAM,YAAY,EAAE,GAAG,SAAS;CAEhC,IAAI,CAAC,SAAS,SAAA,YAAmB,GAC/B,UAAU,aAAa,CAAC;CAG1B,IAAI,CAAC,MAAM,QAAQ,SAAA,cAAqB,GACtC,UAAU,eAAe,CAAC;CAI5B,IAAI,CAAC,SAAS,SAAS,WAAW,GAChC,UAAU,cAAc,CAAC;CAG3B,IAAI,CAAC,SAAS,SAAS,OAAO,GAC5B,UAAU,UAAU,CAAC;CAGvB,OAAO;AACT;;;;;;AAOA,SAAgB,SAAS,KAAmB;CAS1C,OAAO,OAAO,UAAU,SAAS,KAAK,GAAG,MAAM;AACjD;AAEA,SAAgB,iBACd,UACA,aAA8B,6BACrB;CACT,IAAI,OAAO,aAAa,UACtB,OAAO;CAGT,IAAI;CACJ,IAAI,sBAAsB,QACxB,QAAQ;MACH,IAAI,OAAO,eAAe,UAG/B,IAAI;EACF,QAAQ,IAAI,OAAO,UAAU;CAC/B,QAAQ;EACN,OAAO;CACT;MAEA,OAAO;CAGT,OAAO,SAAS,MAAM,KAAK,MAAM;AACnC;AAEA,SAAgB,iBAAiB,UAAe,cAA+B;CAC7E,OACE,OAAO,aAAa,YACpB,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO,sBAC3B,SAAS,MAAM,GAAG,CAAC,CAAC,OAAO;AAE/B"}

package/build/warning-utils.js

@@ -59,6 +59,8 @@ function emit(code, a, b, c) {
 	if (warning) warning(a, b, c);
 }
 //#endregion
+exports.Codes = Codes;
+exports.emit = emit;
 Object.defineProperty(exports, "warning_utils_exports", {
 	enumerable: true,
 	get: function() {

package/build/warning-utils.mjs

@@ -58,6 +58,6 @@ function emit(code, a, b, c) {
 	if (warning) warning(a, b, c);
 }
 //#endregion
-export { warning_utils_exports };
+export { Codes, emit, warning_utils_exports };
 
 //# sourceMappingURL=warning-utils.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "9.0.0-next-9.20",
+  "version": "9.0.0-next-9.22",
   "description": "Verdaccio Core Components",
   "keywords": [
     "private",
@@ -39,15 +39,15 @@
     "minimatch": "10.2.5",
     "process-warning": "5.0.0",
     "sanitize-filename": "1.6.3",
-    "semver": "7.8.1"
+    "semver": "7.8.5"
   },
   "devDependencies": {
     "@verdaccio/types": "14.0.0-next-9.11",
     "express": "5.2.1",
     "rimraf": "6.1.3",
     "typedoc": "0.28.14",
-    "vite": "8.0.14",
-    "vitest": "4.1.7"
+    "vite": "8.1.4",
+    "vitest": "4.1.10"
   },
   "funding": {
     "type": "opencollective",