@verdaccio/e2e-cli 2.6.0 → 2.8.0

package/build/cjs/tests/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/tests/index.ts"],"sourcesContent":["import { TestDefinition } from '../types';\n\nimport { auditTest } from './audit';\nimport { deprecateTest } from './deprecate';\nimport { distTagsTest } from './dist-tags';\nimport { infoTest } from './info';\nimport { installTest } from './install';\nimport { loginTest } from './login';\nimport { pingTest } from './ping';\nimport { publishTest } from './publish';\nimport { searchTest } from './search';\nimport { starTest } from './star';\nimport { unpublishTest } from './unpublish';\n\nexport const allTests: TestDefinition[] = [\n  publishTest,\n  installTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  starTest,\n  unpublishTest,\n];\n\nexport {\n  publishTest,\n  installTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  starTest,\n  unpublishTest,\n};\n"],"mappings":";;;;;;;;;;;;AAcA,IAAa,WAA6B;CACxC,gBAAA;CACA,gBAAA;CACA,cAAA;CACA,aAAA;CACA,kBAAA;CACA,kBAAA;CACA,cAAA;CACA,aAAA;CACA,eAAA;CACA,aAAA;CACA,kBAAA;CACD"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/tests/index.ts"],"sourcesContent":["import { TestDefinition } from '../types';\n\nimport { allScenarios, installMultipleDepsScenario } from '../scenarios';\nimport { auditTest } from './audit';\nimport { ciTest } from './ci';\nimport { deprecateTest } from './deprecate';\nimport { distTagsTest } from './dist-tags';\nimport { infoTest } from './info';\nimport { installTest } from './install';\nimport { loginTest } from './login';\nimport { pingTest } from './ping';\nimport { publishTest } from './publish';\nimport { searchTest } from './search';\nimport { starTest } from './star';\nimport { unpublishTest } from './unpublish';\n\nexport const allTests: TestDefinition[] = [\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  starTest,\n  unpublishTest,\n  // Scenarios (complex, multi-step tests)\n  ...allScenarios,\n];\n\nexport {\n  publishTest,\n  installTest,\n  ciTest,\n  auditTest,\n  infoTest,\n  deprecateTest,\n  distTagsTest,\n  loginTest,\n  pingTest,\n  searchTest,\n  starTest,\n  unpublishTest,\n  // Scenarios\n  installMultipleDepsScenario,\n  allScenarios,\n};\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,IAAa,WAA6B;CACxC,gBAAA;CACA,gBAAA;CACA,WAAA;CACA,cAAA;CACA,aAAA;CACA,kBAAA;CACA,kBAAA;CACA,cAAA;CACA,aAAA;CACA,eAAA;CACA,aAAA;CACA,kBAAA;CAEA,GAAG,cAAA;CACJ"}

package/build/cjs/tests/info.cjs

@@ -21,6 +21,9 @@ async function testInfo(ctx) {
 			}
 		});
 		assert.default.ok(dataLine, "Expected yarn info NDJSON to contain an \"inspect\" entry");
+	} else if (ctx.adapter.type === "deno") {
+		const output = resp.stdout + resp.stderr;
+		assert.default.ok(output.includes("verdaccio"), "Expected deno info output to reference verdaccio");
 	} else {
 		const parsedBody = JSON.parse(resp.stdout);
 		assert.default.strictEqual(parsedBody.name, "verdaccio", "Expected package name \"verdaccio\"");

package/build/cjs/tests/info.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"info.cjs","names":[],"sources":["../../../src/tests/info.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { createTempFolder } from '../utils/project';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nasync function testInfo(ctx: TestContext): Promise<void> {\n  // Create a minimal temp project so yarn modern has a project context\n  // and yarn classic doesn't pick up the repo's packageManager field\n  const tempFolder = await createTempFolder('info-test');\n  await writeFile(join(tempFolder, 'package.json'), JSON.stringify({ name: 'info-test', version: '1.0.0' }));\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    'verdaccio',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (ctx.adapter.type === 'yarn-classic') {\n    const lines = resp.stdout.split('\\n').filter(Boolean);\n    const dataLine = lines.find((l) => {\n      try {\n        const obj = JSON.parse(l);\n        return obj.type === 'inspect';\n      } catch {\n        return false;\n      }\n    });\n    assert.ok(dataLine, 'Expected yarn info NDJSON to contain an \"inspect\" entry');\n  } else {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.strictEqual(parsedBody.name, 'verdaccio', 'Expected package name \"verdaccio\"');\n    assert.ok(parsedBody.dependencies !== undefined, 'Expected \"dependencies\" to be defined');\n  }\n}\n\nexport const infoTest: TestDefinition = {\n  name: 'info',\n  requires: ['info'],\n  run: testInfo,\n};\n"],"mappings":";;;;;;;AAOA,eAAe,SAAS,KAAiC;CAGvD,MAAM,aAAa,MAAM,gBAAA,iBAAiB,YAAY;AACtD,QAAA,GAAA,YAAA,YAAA,GAAA,KAAA,MAAqB,YAAY,eAAe,EAAE,KAAK,UAAU;EAAE,MAAM;EAAa,SAAS;EAAS,CAAC,CAAC;CAE1G,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,aACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAED,KAAI,IAAI,QAAQ,SAAS,gBAAgB;EAEvC,MAAM,WADQ,KAAK,OAAO,MAAM,KAAK,CAAC,OAAO,QAAQ,CAC9B,MAAM,MAAM;AACjC,OAAI;AAEF,WADY,KAAK,MAAM,EAAE,CACd,SAAS;WACd;AACN,WAAO;;IAET;AACF,SAAA,QAAO,GAAG,UAAU,4DAA0D;QACzE;EACL,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,SAAA,QAAO,YAAY,WAAW,MAAM,aAAa,sCAAoC;AACrF,SAAA,QAAO,GAAG,WAAW,iBAAiB,KAAA,GAAW,0CAAwC;;;AAI7F,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;CACN"}
+{"version":3,"file":"info.cjs","names":[],"sources":["../../../src/tests/info.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\nimport { createTempFolder } from '../utils/project';\nimport { writeFile } from 'fs/promises';\nimport { join } from 'path';\n\nasync function testInfo(ctx: TestContext): Promise<void> {\n  // Create a minimal temp project so yarn modern has a project context\n  // and yarn classic doesn't pick up the repo's packageManager field\n  const tempFolder = await createTempFolder('info-test');\n  await writeFile(join(tempFolder, 'package.json'), JSON.stringify({ name: 'info-test', version: '1.0.0' }));\n\n  const resp = await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'info',\n    'verdaccio',\n    '--json',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n\n  if (ctx.adapter.type === 'yarn-classic') {\n    const lines = resp.stdout.split('\\n').filter(Boolean);\n    const dataLine = lines.find((l) => {\n      try {\n        const obj = JSON.parse(l);\n        return obj.type === 'inspect';\n      } catch {\n        return false;\n      }\n    });\n    assert.ok(dataLine, 'Expected yarn info NDJSON to contain an \"inspect\" entry');\n  } else if (ctx.adapter.type === 'deno') {\n    // deno info npm:<pkg> outputs a text dependency tree\n    const output = resp.stdout + resp.stderr;\n    assert.ok(output.includes('verdaccio'), 'Expected deno info output to reference verdaccio');\n  } else {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.strictEqual(parsedBody.name, 'verdaccio', 'Expected package name \"verdaccio\"');\n    assert.ok(parsedBody.dependencies !== undefined, 'Expected \"dependencies\" to be defined');\n  }\n}\n\nexport const infoTest: TestDefinition = {\n  name: 'info',\n  requires: ['info'],\n  run: testInfo,\n};\n"],"mappings":";;;;;;;AAOA,eAAe,SAAS,KAAiC;CAGvD,MAAM,aAAa,MAAM,gBAAA,iBAAiB,YAAY;AACtD,QAAA,GAAA,YAAA,YAAA,GAAA,KAAA,MAAqB,YAAY,eAAe,EAAE,KAAK,UAAU;EAAE,MAAM;EAAa,SAAS;EAAS,CAAC,CAAC;CAE1G,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,aACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAED,KAAI,IAAI,QAAQ,SAAS,gBAAgB;EAEvC,MAAM,WADQ,KAAK,OAAO,MAAM,KAAK,CAAC,OAAO,QAAQ,CAC9B,MAAM,MAAM;AACjC,OAAI;AAEF,WADY,KAAK,MAAM,EAAE,CACd,SAAS;WACd;AACN,WAAO;;IAET;AACF,SAAA,QAAO,GAAG,UAAU,4DAA0D;YACrE,IAAI,QAAQ,SAAS,QAAQ;EAEtC,MAAM,SAAS,KAAK,SAAS,KAAK;AAClC,SAAA,QAAO,GAAG,OAAO,SAAS,YAAY,EAAE,mDAAmD;QACtF;EACL,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,SAAA,QAAO,YAAY,WAAW,MAAM,aAAa,sCAAoC;AACrF,SAAA,QAAO,GAAG,WAAW,iBAAiB,KAAA,GAAW,0CAAwC;;;AAI7F,IAAa,WAA2B;CACtC,MAAM;CACN,UAAU,CAAC,OAAO;CAClB,KAAK;CACN"}

package/build/cjs/tests/install.cjs

@@ -14,7 +14,6 @@ async function testInstall(ctx) {
 	if (isNpm) {
 		const parsedBody = JSON.parse(resp.stdout);
 		assert.default.ok(parsedBody.added !== void 0, "Expected \"added\" field in install response");
-		assert.default.ok(parsedBody.audit !== void 0, "Expected \"audit\" field in install response");
 	} else assert.default.ok(true, "Install completed successfully");
 }
 var installTest = {

package/build/cjs/tests/install.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"install.cjs","names":[],"sources":["../../../src/tests/install.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testInstall(ctx: TestContext): Promise<void> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `install-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { react: '18.2.0' }\n  );\n\n  const isNpm = ctx.adapter.type === 'npm';\n\n  // pnpm doesn't support --json on install\n  const args = isNpm\n    ? ['install', '--json', ...ctx.adapter.registryArg(ctx.registryUrl)]\n    : ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n  if (isNpm) {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.ok(parsedBody.added !== undefined, 'Expected \"added\" field in install response');\n    assert.ok(parsedBody.audit !== undefined, 'Expected \"audit\" field in install response');\n  } else {\n    // for pnpm/yarn just verify it completed without error (exit code 0)\n    assert.ok(true, 'Install completed successfully');\n  }\n}\n\nexport const installTest: TestDefinition = {\n  name: 'install',\n  requires: ['install'],\n  run: testInstall,\n};\n"],"mappings":";;;;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,gBAAgB,IAAI,SACpB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,OAAO,UAAU,CACpB;CAED,MAAM,QAAQ,IAAI,QAAQ,SAAS;CAGnC,MAAM,OAAO,QACT;EAAC;EAAW;EAAU,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;EAAC,GAClE,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;CAE5D,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,KAAK;AAEjE,KAAI,OAAO;EACT,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,SAAA,QAAO,GAAG,WAAW,UAAU,KAAA,GAAW,+CAA6C;AACvF,SAAA,QAAO,GAAG,WAAW,UAAU,KAAA,GAAW,+CAA6C;OAGvF,QAAA,QAAO,GAAG,MAAM,iCAAiC;;AAIrD,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}
+{"version":3,"file":"install.cjs","names":[],"sources":["../../../src/tests/install.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testInstall(ctx: TestContext): Promise<void> {\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    `install-test-${ctx.runId}`,\n    '1.0.0',\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    { react: '18.2.0' }\n  );\n\n  const isNpm = ctx.adapter.type === 'npm';\n\n  // pnpm doesn't support --json on install\n  const args = isNpm\n    ? ['install', '--json', ...ctx.adapter.registryArg(ctx.registryUrl)]\n    : ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n\n  const resp = await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n  if (isNpm) {\n    const parsedBody = JSON.parse(resp.stdout);\n    assert.ok(parsedBody.added !== undefined, 'Expected \"added\" field in install response');\n  } else {\n    // for pnpm/yarn just verify it completed without error (exit code 0)\n    assert.ok(true, 'Install completed successfully');\n  }\n}\n\nexport const installTest: TestDefinition = {\n  name: 'install',\n  requires: ['install'],\n  run: testInstall,\n};\n"],"mappings":";;;;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,gBAAgB,IAAI,SACpB,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,OAAO,UAAU,CACpB;CAED,MAAM,QAAQ,IAAI,QAAQ,SAAS;CAGnC,MAAM,OAAO,QACT;EAAC;EAAW;EAAU,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY;EAAC,GAClE,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;CAE5D,MAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,KAAK;AAEjE,KAAI,OAAO;EACT,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,SAAA,QAAO,GAAG,WAAW,UAAU,KAAA,GAAW,+CAA6C;OAGvF,QAAA,QAAO,GAAG,MAAM,iCAAiC;;AAIrD,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}

package/build/cjs/tests/publish.cjs

@@ -16,6 +16,7 @@ async function testPublish(ctx) {
 		const resp = await ctx.adapter.exec({ cwd: tempFolder }, "publish", "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
 		if (type === "yarn-modern") assert.default.ok(resp.stdout.match(/Package archive published/), `Expected "Package archive published" for ${pkgName} but got "${resp.stdout}"`);
 		else if (type === "yarn-classic") assert.default.ok(resp.stdout.length > 0, `Expected publish output for ${pkgName}`);
+		else if (type === "bun") assert.default.ok(true, `Publish succeeded for ${pkgName}`);
 		else try {
 			const parsedBody = JSON.parse(resp.stdout);
 			assert.default.strictEqual(parsedBody.name, pkgName, `Expected package name "${pkgName}" but got "${parsedBody.name}"`);

package/build/cjs/tests/publish.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish.cjs","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPublish(ctx: TestContext): Promise<void> {\n  const packages = [\n    `verdaccio-memory-${ctx.runId}`,\n    `verdaccio-${ctx.runId}`,\n    `@verdaccio/foo-${ctx.runId}`,\n    `@verdaccio/some-foo-${ctx.runId}`,\n  ];\n\n  const type = ctx.adapter.type;\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n\n    // yarn modern requires install before publish to generate lockfile\n    if (type === 'yarn-modern') {\n      await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'publish',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (type === 'yarn-modern') {\n      assert.ok(\n        resp.stdout.match(/Package archive published/),\n        `Expected \"Package archive published\" for ${pkgName} but got \"${resp.stdout}\"`\n      );\n    } else if (type === 'yarn-classic') {\n      // yarn classic --json outputs NDJSON — just verify no error exit (exit code 0 is enough)\n      assert.ok(resp.stdout.length > 0, `Expected publish output for ${pkgName}`);\n    } else {\n      // npm / pnpm\n      try {\n        const parsedBody = JSON.parse(resp.stdout);\n        assert.strictEqual(parsedBody.name, pkgName, `Expected package name \"${pkgName}\" but got \"${parsedBody.name}\"`);\n        assert.ok(parsedBody.files, `Expected files to be defined for ${pkgName}`);\n      } catch {\n        // pnpm v11+ native publish doesn't output JSON — exit code 0 is sufficient\n        assert.ok(true, `Publish succeeded for ${pkgName}`);\n      }\n    }\n  }\n}\n\nexport const publishTest: TestDefinition = {\n  name: 'publish',\n  requires: ['publish'],\n  run: testPublish,\n};\n"],"mappings":";;;;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,WAAW;EACf,oBAAoB,IAAI;EACxB,aAAa,IAAI;EACjB,kBAAkB,IAAI;EACtB,uBAAuB,IAAI;EAC5B;CAED,MAAM,OAAO,IAAI,QAAQ;AAEzB,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;AAGD,MAAI,SAAS,cACX,OAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;EAGxD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAED,MAAI,SAAS,cACX,QAAA,QAAO,GACL,KAAK,OAAO,MAAM,4BAA4B,EAC9C,4CAA4C,QAAQ,YAAY,KAAK,OAAO,GAC7E;WACQ,SAAS,eAElB,QAAA,QAAO,GAAG,KAAK,OAAO,SAAS,GAAG,+BAA+B,UAAU;MAG3E,KAAI;GACF,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,UAAA,QAAO,YAAY,WAAW,MAAM,SAAS,0BAA0B,QAAQ,aAAa,WAAW,KAAK,GAAG;AAC/G,UAAA,QAAO,GAAG,WAAW,OAAO,oCAAoC,UAAU;UACpE;AAEN,UAAA,QAAO,GAAG,MAAM,yBAAyB,UAAU;;;;AAM3D,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}
+{"version":3,"file":"publish.cjs","names":[],"sources":["../../../src/tests/publish.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testPublish(ctx: TestContext): Promise<void> {\n  const packages = [\n    `verdaccio-memory-${ctx.runId}`,\n    `verdaccio-${ctx.runId}`,\n    `@verdaccio/foo-${ctx.runId}`,\n    `@verdaccio/some-foo-${ctx.runId}`,\n  ];\n\n  const type = ctx.adapter.type;\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token\n    );\n\n    // yarn modern requires install before publish to generate lockfile\n    if (type === 'yarn-modern') {\n      await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'publish',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (type === 'yarn-modern') {\n      assert.ok(\n        resp.stdout.match(/Package archive published/),\n        `Expected \"Package archive published\" for ${pkgName} but got \"${resp.stdout}\"`\n      );\n    } else if (type === 'yarn-classic') {\n      // yarn classic --json outputs NDJSON — just verify no error exit (exit code 0 is enough)\n      assert.ok(resp.stdout.length > 0, `Expected publish output for ${pkgName}`);\n    } else if (type === 'bun') {\n      // bun publish outputs text confirmation — exit code 0 is sufficient\n      assert.ok(true, `Publish succeeded for ${pkgName}`);\n    } else {\n      // npm / pnpm\n      try {\n        const parsedBody = JSON.parse(resp.stdout);\n        assert.strictEqual(parsedBody.name, pkgName, `Expected package name \"${pkgName}\" but got \"${parsedBody.name}\"`);\n        assert.ok(parsedBody.files, `Expected files to be defined for ${pkgName}`);\n      } catch {\n        // pnpm v11+ native publish doesn't output JSON — exit code 0 is sufficient\n        assert.ok(true, `Publish succeeded for ${pkgName}`);\n      }\n    }\n  }\n}\n\nexport const publishTest: TestDefinition = {\n  name: 'publish',\n  requires: ['publish'],\n  run: testPublish,\n};\n"],"mappings":";;;;AAIA,eAAe,YAAY,KAAiC;CAC1D,MAAM,WAAW;EACf,oBAAoB,IAAI;EACxB,aAAa,IAAI;EACjB,kBAAkB,IAAI;EACtB,uBAAuB,IAAI;EAC5B;CAED,MAAM,OAAO,IAAI,QAAQ;AAEzB,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,MACL;AAGD,MAAI,SAAS,cACX,OAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;EAGxD,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,WACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAED,MAAI,SAAS,cACX,QAAA,QAAO,GACL,KAAK,OAAO,MAAM,4BAA4B,EAC9C,4CAA4C,QAAQ,YAAY,KAAK,OAAO,GAC7E;WACQ,SAAS,eAElB,QAAA,QAAO,GAAG,KAAK,OAAO,SAAS,GAAG,+BAA+B,UAAU;WAClE,SAAS,MAElB,QAAA,QAAO,GAAG,MAAM,yBAAyB,UAAU;MAGnD,KAAI;GACF,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,UAAA,QAAO,YAAY,WAAW,MAAM,SAAS,0BAA0B,QAAQ,aAAa,WAAW,KAAK,GAAG;AAC/G,UAAA,QAAO,GAAG,WAAW,OAAO,oCAAoC,UAAU;UACpE;AAEN,UAAA,QAAO,GAAG,MAAM,yBAAyB,UAAU;;;;AAM3D,IAAa,cAA8B;CACzC,MAAM;CACN,UAAU,CAAC,UAAU;CACrB,KAAK;CACN"}

package/build/esm/adapters/bun.js

@@ -0,0 +1,61 @@
+import { exec } from "../utils/process.js";
+import { prepareGenericEmptyProject } from "../utils/project.js";
+import buildDebug from "debug";
+import { execSync } from "child_process";
+//#region src/adapters/bun.ts
+var debug = buildDebug("verdaccio:e2e-cli:bun");
+var BUN_SUPPORTED_COMMANDS = new Set([
+	"publish",
+	"install",
+	"info",
+	"audit"
+]);
+function detectVersion(bin) {
+	try {
+		return execSync(`${bin} --version`, {
+			encoding: "utf8",
+			timeout: 5e3
+		}).trim();
+	} catch {
+		return "unknown";
+	}
+}
+function resolveBunBin(binPath) {
+	if (binPath) return binPath;
+	return "bun";
+}
+function createBunAdapter(binPath, _version) {
+	const bin = resolveBunBin(binPath);
+	const resolved = detectVersion(bin);
+	debug("creating bun adapter with bin: %s (%s)", bin, resolved);
+	return {
+		name: `bun@${resolved}`,
+		type: "bun",
+		bin,
+		supports: BUN_SUPPORTED_COMMANDS,
+		registryArg(url) {
+			return ["--registry", url];
+		},
+		prefixArg(folder) {
+			return ["--cwd", folder];
+		},
+		exec(options, ...args) {
+			if (args[0] === "info") {
+				const pkgName = args[1];
+				return exec(options, bin, [
+					"info",
+					pkgName,
+					...args.slice(2).filter((a) => a !== "--registry").filter((a) => !a.startsWith("http"))
+				]);
+			}
+			return exec(options, bin, args);
+		},
+		async prepareProject(packageName, version, registryUrl, port, token, dependencies = {}, devDependencies = {}) {
+			return prepareGenericEmptyProject(packageName, version, port, token, registryUrl, dependencies, devDependencies);
+		}
+	};
+}
+//#endregion
+export { createBunAdapter };
+
+//# sourceMappingURL=bun.js.map

package/build/esm/adapters/bun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bun.js","names":[],"sources":["../../../src/adapters/bun.ts"],"sourcesContent":["import { SpawnOptions, execSync } from 'child_process';\nimport buildDebug from 'debug';\n\nimport { ExecOutput, PackageManagerAdapter } from '../types';\nimport { exec } from '../utils/process';\nimport { prepareGenericEmptyProject } from '../utils/project';\n\nconst debug = buildDebug('verdaccio:e2e-cli:bun');\n\nconst BUN_SUPPORTED_COMMANDS = new Set([\n  'publish',\n  'install',\n  'info',\n  'audit',\n]);\n\nfunction detectVersion(bin: string): string {\n  try {\n    return execSync(`${bin} --version`, { encoding: 'utf8', timeout: 5000 }).trim();\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction resolveBunBin(binPath?: string): string {\n  if (binPath) return binPath;\n  return 'bun';\n}\n\nexport function createBunAdapter(binPath?: string, _version?: string): PackageManagerAdapter {\n  const bin = resolveBunBin(binPath);\n  const resolved = detectVersion(bin);\n  debug('creating bun adapter with bin: %s (%s)', bin, resolved);\n\n  const adapter: PackageManagerAdapter = {\n    name: `bun@${resolved}`,\n    type: 'bun',\n    bin,\n    supports: BUN_SUPPORTED_COMMANDS,\n\n    registryArg(url: string): string[] {\n      return ['--registry', url];\n    },\n\n    prefixArg(folder: string): string[] {\n      return ['--cwd', folder];\n    },\n\n    exec(options: SpawnOptions, ...args: string[]): Promise<ExecOutput> {\n      const cmd = args[0];\n\n      if (cmd === 'info') {\n        // bun info <pkg> reads registry from .npmrc, strip --registry <url>\n        const pkgName = args[1];\n        const filteredArgs = args.slice(2).filter((a) => a !== '--registry');\n        // also remove the URL that follows --registry\n        const cleaned = filteredArgs.filter((a) => !a.startsWith('http'));\n        return exec(options, bin, ['info', pkgName, ...cleaned]);\n      }\n\n      return exec(options, bin, args);\n    },\n\n    async prepareProject(\n      packageName: string,\n      version: string,\n      registryUrl: string,\n      port: number,\n      token: string,\n      dependencies: Record<string, string> = {},\n      devDependencies: Record<string, string> = {}\n    ): Promise<{ tempFolder: string }> {\n      return prepareGenericEmptyProject(\n        packageName,\n        version,\n        port,\n        token,\n        registryUrl,\n        dependencies,\n        devDependencies\n      );\n    },\n  };\n\n  return adapter;\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,wBAAwB;AAEjD,IAAM,yBAAyB,IAAI,IAAI;CACrC;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,cAAc,KAAqB;AAC1C,KAAI;AACF,SAAO,SAAS,GAAG,IAAI,aAAa;GAAE,UAAU;GAAQ,SAAS;GAAM,CAAC,CAAC,MAAM;SACzE;AACN,SAAO;;;AAIX,SAAS,cAAc,SAA0B;AAC/C,KAAI,QAAS,QAAO;AACpB,QAAO;;AAGT,SAAgB,iBAAiB,SAAkB,UAA0C;CAC3F,MAAM,MAAM,cAAc,QAAQ;CAClC,MAAM,WAAW,cAAc,IAAI;AACnC,OAAM,0CAA0C,KAAK,SAAS;AAoD9D,QAlDuC;EACrC,MAAM,OAAO;EACb,MAAM;EACN;EACA,UAAU;EAEV,YAAY,KAAuB;AACjC,UAAO,CAAC,cAAc,IAAI;;EAG5B,UAAU,QAA0B;AAClC,UAAO,CAAC,SAAS,OAAO;;EAG1B,KAAK,SAAuB,GAAG,MAAqC;AAGlE,OAFY,KAAK,OAEL,QAAQ;IAElB,MAAM,UAAU,KAAK;AAIrB,WAAO,KAAK,SAAS,KAAK;KAAC;KAAQ;KAAS,GAHvB,KAAK,MAAM,EAAE,CAAC,QAAQ,MAAM,MAAM,aAAa,CAEvC,QAAQ,MAAM,CAAC,EAAE,WAAW,OAAO,CAAC;KACV,CAAC;;AAG1D,UAAO,KAAK,SAAS,KAAK,KAAK;;EAGjC,MAAM,eACJ,aACA,SACA,aACA,MACA,OACA,eAAuC,EAAE,EACzC,kBAA0C,EAAE,EACX;AACjC,UAAO,2BACL,aACA,SACA,MACA,OACA,aACA,cACA,gBACD;;EAEJ"}

package/build/esm/adapters/deno.js

@@ -0,0 +1,56 @@
+import { exec } from "../utils/process.js";
+import { prepareGenericEmptyProject } from "../utils/project.js";
+import buildDebug from "debug";
+import { execSync } from "child_process";
+//#region src/adapters/deno.ts
+var debug = buildDebug("verdaccio:e2e-cli:deno");
+var DENO_SUPPORTED_COMMANDS = new Set(["install", "info"]);
+function detectVersion(bin) {
+	try {
+		const match = execSync(`${bin} --version`, {
+			encoding: "utf8",
+			timeout: 5e3
+		}).match(/deno (\S+)/);
+		return match ? match[1] : "unknown";
+	} catch {
+		return "unknown";
+	}
+}
+function resolveDenoBin(binPath) {
+	if (binPath) return binPath;
+	return "deno";
+}
+function createDenoAdapter(binPath, _version) {
+	const bin = resolveDenoBin(binPath);
+	const resolved = detectVersion(bin);
+	debug("creating deno adapter with bin: %s (%s)", bin, resolved);
+	return {
+		name: `deno@${resolved}`,
+		type: "deno",
+		bin,
+		supports: DENO_SUPPORTED_COMMANDS,
+		registryArg(_url) {
+			return [];
+		},
+		prefixArg(folder) {
+			return ["--root", folder];
+		},
+		exec(options, ...args) {
+			const cmd = args[0];
+			if (cmd === "info") return exec(options, bin, [
+				"info",
+				`npm:${args[1]}`,
+				"--node-modules-dir=auto"
+			].concat(args.slice(2).filter((a) => a !== "--json")));
+			if (cmd === "install") return exec(options, bin, ["install"]);
+			return exec(options, bin, args);
+		},
+		async prepareProject(packageName, version, registryUrl, port, token, dependencies = {}, devDependencies = {}) {
+			return prepareGenericEmptyProject(packageName, version, port, token, registryUrl, dependencies, devDependencies);
+		}
+	};
+}
+//#endregion
+export { createDenoAdapter };
+
+//# sourceMappingURL=deno.js.map

package/build/esm/adapters/deno.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deno.js","names":[],"sources":["../../../src/adapters/deno.ts"],"sourcesContent":["import { SpawnOptions, execSync } from 'child_process';\nimport buildDebug from 'debug';\n\nimport { ExecOutput, PackageManagerAdapter } from '../types';\nimport { exec } from '../utils/process';\nimport { prepareGenericEmptyProject } from '../utils/project';\n\nconst debug = buildDebug('verdaccio:e2e-cli:deno');\n\nconst DENO_SUPPORTED_COMMANDS = new Set(['install', 'info']);\n\nfunction detectVersion(bin: string): string {\n  try {\n    const output = execSync(`${bin} --version`, { encoding: 'utf8', timeout: 5000 });\n    const match = output.match(/deno (\\S+)/);\n    return match ? match[1] : 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction resolveDenoBin(binPath?: string): string {\n  if (binPath) return binPath;\n  return 'deno';\n}\n\nexport function createDenoAdapter(binPath?: string, _version?: string): PackageManagerAdapter {\n  const bin = resolveDenoBin(binPath);\n  const resolved = detectVersion(bin);\n  debug('creating deno adapter with bin: %s (%s)', bin, resolved);\n\n  const adapter: PackageManagerAdapter = {\n    name: `deno@${resolved}`,\n    type: 'deno',\n    bin,\n    supports: DENO_SUPPORTED_COMMANDS,\n\n    registryArg(_url: string): string[] {\n      // deno reads the registry from .npmrc (written by prepareProject), no CLI flag needed\n      return [];\n    },\n\n    prefixArg(folder: string): string[] {\n      return ['--root', folder];\n    },\n\n    exec(options: SpawnOptions, ...args: string[]): Promise<ExecOutput> {\n      const cmd = args[0];\n\n      if (cmd === 'info') {\n        // deno info npm:<pkg> --node-modules-dir=auto\n        const pkgName = args[1];\n        const filteredArgs = ['info', `npm:${pkgName}`, '--node-modules-dir=auto'].concat(\n          args.slice(2).filter((a) => a !== '--json')\n        );\n        return exec(options, bin, filteredArgs);\n      }\n\n      if (cmd === 'install') {\n        // deno install — reads registry from .npmrc, no extra flags needed\n        return exec(options, bin, ['install']);\n      }\n\n      return exec(options, bin, args);\n    },\n\n    async prepareProject(\n      packageName: string,\n      version: string,\n      registryUrl: string,\n      port: number,\n      token: string,\n      dependencies: Record<string, string> = {},\n      devDependencies: Record<string, string> = {}\n    ): Promise<{ tempFolder: string }> {\n      return prepareGenericEmptyProject(\n        packageName,\n        version,\n        port,\n        token,\n        registryUrl,\n        dependencies,\n        devDependencies\n      );\n    },\n  };\n\n  return adapter;\n}\n"],"mappings":";;;;;AAOA,IAAM,QAAQ,WAAW,yBAAyB;AAElD,IAAM,0BAA0B,IAAI,IAAI,CAAC,WAAW,OAAO,CAAC;AAE5D,SAAS,cAAc,KAAqB;AAC1C,KAAI;EAEF,MAAM,QADS,SAAS,GAAG,IAAI,aAAa;GAAE,UAAU;GAAQ,SAAS;GAAM,CAAC,CAC3D,MAAM,aAAa;AACxC,SAAO,QAAQ,MAAM,KAAK;SACpB;AACN,SAAO;;;AAIX,SAAS,eAAe,SAA0B;AAChD,KAAI,QAAS,QAAO;AACpB,QAAO;;AAGT,SAAgB,kBAAkB,SAAkB,UAA0C;CAC5F,MAAM,MAAM,eAAe,QAAQ;CACnC,MAAM,WAAW,cAAc,IAAI;AACnC,OAAM,2CAA2C,KAAK,SAAS;AA0D/D,QAxDuC;EACrC,MAAM,QAAQ;EACd,MAAM;EACN;EACA,UAAU;EAEV,YAAY,MAAwB;AAElC,UAAO,EAAE;;EAGX,UAAU,QAA0B;AAClC,UAAO,CAAC,UAAU,OAAO;;EAG3B,KAAK,SAAuB,GAAG,MAAqC;GAClE,MAAM,MAAM,KAAK;AAEjB,OAAI,QAAQ,OAMV,QAAO,KAAK,SAAS,KAHA;IAAC;IAAQ,OADd,KAAK;IAC2B;IAA0B,CAAC,OACzE,KAAK,MAAM,EAAE,CAAC,QAAQ,MAAM,MAAM,SAAS,CAC5C,CACsC;AAGzC,OAAI,QAAQ,UAEV,QAAO,KAAK,SAAS,KAAK,CAAC,UAAU,CAAC;AAGxC,UAAO,KAAK,SAAS,KAAK,KAAK;;EAGjC,MAAM,eACJ,aACA,SACA,aACA,MACA,OACA,eAAuC,EAAE,EACzC,kBAA0C,EAAE,EACX;AACjC,UAAO,2BACL,aACA,SACA,MACA,OACA,aACA,cACA,gBACD;;EAEJ"}

package/build/esm/adapters/index.js

@@ -1,3 +1,5 @@
+import "./bun.js";
+import "./deno.js";
 import "./npm.js";
 import "./pnpm.js";
 import "./yarn-classic.js";

package/build/esm/index.js

@@ -1,8 +1,11 @@
+import { createBunAdapter } from "./adapters/bun.js";
+import { createDenoAdapter } from "./adapters/deno.js";
 import { createNpmAdapter } from "./adapters/npm.js";
 import { createPnpmAdapter } from "./adapters/pnpm.js";
 import { createYarnClassicAdapter } from "./adapters/yarn-classic.js";
 import { createYarnModernAdapter } from "./adapters/yarn-modern.js";
 import "./adapters/index.js";
+import { allScenarios } from "./scenarios/index.js";
 import { allTests } from "./tests/index.js";
 import { createUser, pingRegistry } from "./utils/registry-client.js";
 import { runAll, runSuite } from "./runner.js";
@@ -31,7 +34,9 @@ function parseAdapters(pmFilters) {
 		else if (name === "pnpm") adapters.push(createPnpmAdapter(binPath, version));
 		else if (name === "yarn-classic" || name === "yarn1") adapters.push(createYarnClassicAdapter(binPath, version));
 		else if (name === "yarn-modern" || name === "yarn") adapters.push(createYarnModernAdapter(binPath, version));
-		else throw new Error(`Unknown package manager: "${name}". Supported: npm, pnpm, yarn-classic, yarn-modern[@version]`);
+		else if (name === "bun") adapters.push(createBunAdapter(binPath, version));
+		else if (name === "deno") adapters.push(createDenoAdapter(binPath, version));
+		else throw new Error(`Unknown package manager: "${name}". Supported: npm, pnpm, yarn-classic, yarn-modern, bun, deno`);
 	}
 	return adapters;
 }
@@ -81,18 +86,20 @@ function printHelp() {
 
   Options:
     --pm <name[@version]>   Package manager to test (can be repeated)
-                            Supported: npm, pnpm, yarn-classic, yarn-modern (or yarn)
+                            Supported: npm, pnpm, yarn-classic, yarn-modern (or yarn), bun, deno
                             Examples: --pm npm@10 --pm pnpm@9
                                       --pm yarn-modern@4
                                       --pm yarn-modern@3
                                       --pm yarn-classic
+                                      --pm bun
                                       --pm npm --pm pnpm  (uses system version)
                             Auto-installs the requested yarn version if needed
                             Default: npm
 
     -t, --test <name>       Filter tests by name (can be repeated)
-                            Available: publish, install, audit, info, deprecate,
+                            Available: publish, install, ci, audit, info, deprecate,
                                        dist-tags, ping, search, star, unpublish
+                            Scenarios: scenario:install-multiple-deps
                             Default: all supported by the PM
 
     --token <token>         Auth token (skips user creation)
@@ -140,6 +147,6 @@ async function main(argv = process.argv) {
 	process.exit(exitCode);
 }
 //#endregion
-export { allTests, createNpmAdapter, createPnpmAdapter, createYarnClassicAdapter, createYarnModernAdapter, main, runAll, runSuite };
+export { allScenarios, allTests, createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnClassicAdapter, createYarnModernAdapter, main, runAll, runSuite };
 
 //# sourceMappingURL=index.js.map

package/build/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport {\n  createNpmAdapter,\n  createPnpmAdapter,\n  createYarnClassicAdapter,\n  createYarnModernAdapter,\n} from './adapters';\nimport { allTests } from './tests';\nimport { CliOptions, PackageManagerAdapter } from './types';\nimport { createUser, pingRegistry } from './utils/registry-client';\nimport { runAll } from './runner';\n\nconst debug = buildDebug('verdaccio:e2e-cli');\n\nfunction parsePmSpec(filter: string): { name: string; version?: string; binPath?: string } {\n  // --pm yarn-modern@3, --pm yarn-classic@1.22.22, --pm npm=/path/to/bin\n  const eqIdx = filter.indexOf('=');\n  if (eqIdx !== -1) {\n    return { name: filter.slice(0, eqIdx).toLowerCase(), binPath: filter.slice(eqIdx + 1) };\n  }\n  const atIdx = filter.indexOf('@');\n  if (atIdx !== -1) {\n    return { name: filter.slice(0, atIdx).toLowerCase(), version: filter.slice(atIdx + 1) };\n  }\n  return { name: filter.toLowerCase() };\n}\n\nfunction parseAdapters(pmFilters?: string[]): PackageManagerAdapter[] {\n  if (!pmFilters || pmFilters.length === 0) {\n    return [createNpmAdapter()];\n  }\n\n  const adapters: PackageManagerAdapter[] = [];\n\n  for (const filter of pmFilters) {\n    const { name, version, binPath } = parsePmSpec(filter);\n\n    if (name === 'npm') {\n      adapters.push(createNpmAdapter(binPath, version));\n    } else if (name === 'pnpm') {\n      adapters.push(createPnpmAdapter(binPath, version));\n    } else if (name === 'yarn-classic' || name === 'yarn1') {\n      adapters.push(createYarnClassicAdapter(binPath, version));\n    } else if (name === 'yarn-modern' || name === 'yarn') {\n      adapters.push(createYarnModernAdapter(binPath, version));\n    } else {\n      throw new Error(\n        `Unknown package manager: \"${name}\". Supported: npm, pnpm, yarn-classic, yarn-modern[@version]`\n      );\n    }\n  }\n\n  return adapters;\n}\n\nfunction parseArgs(argv: string[]): CliOptions {\n  const options: CliOptions = {\n    registry: '',\n    pm: [],\n    test: [],\n    concurrency: 1,\n    timeout: 50000,\n    verbose: false,\n  };\n\n  for (let i = 2; i < argv.length; i++) {\n    const arg = argv[i];\n\n    if (arg === '--registry' || arg === '-r') {\n      options.registry = argv[++i];\n    } else if (arg === '--pm') {\n      options.pm!.push(argv[++i]);\n    } else if (arg === '--test' || arg === '-t') {\n      options.test!.push(argv[++i]);\n    } else if (arg === '--concurrency' || arg === '-c') {\n      options.concurrency = parseInt(argv[++i], 10);\n    } else if (arg === '--timeout') {\n      options.timeout = parseInt(argv[++i], 10);\n    } else if (arg === '--token') {\n      options.token = argv[++i];\n    } else if (arg === '--verbose' || arg === '-v') {\n      options.verbose = true;\n    } else if (arg === '--help' || arg === '-h') {\n      printHelp();\n      process.exit(0);\n    } else if (arg.startsWith('--registry=')) {\n      options.registry = arg.split('=')[1];\n    } else if (arg.startsWith('--pm=')) {\n      options.pm!.push(arg.split('=')[1]);\n    } else if (arg.startsWith('--test=')) {\n      options.test!.push(arg.split('=')[1]);\n    } else if (arg.startsWith('--token=')) {\n      options.token = arg.split('=')[1];\n    } else if (arg.startsWith('--timeout=')) {\n      options.timeout = parseInt(arg.split('=')[1], 10);\n    } else {\n      console.error(`Unknown argument: ${arg}`);\n      printHelp();\n      process.exit(1);\n    }\n  }\n\n  return options;\n}\n\nfunction printHelp(): void {\n  console.log(`\n  @verdaccio/e2e-cli - Run Verdaccio e2e tests against any running registry\n\n  Usage:\n    verdaccio-e2e --registry <url> [options]\n\n  Required:\n    -r, --registry <url>    Verdaccio registry URL (e.g. http://localhost:4873)\n\n  Options:\n    --pm <name[@version]>   Package manager to test (can be repeated)\n                            Supported: npm, pnpm, yarn-classic, yarn-modern (or yarn)\n                            Examples: --pm npm@10 --pm pnpm@9\n                                      --pm yarn-modern@4\n                                      --pm yarn-modern@3\n                                      --pm yarn-classic\n                                      --pm npm --pm pnpm  (uses system version)\n                            Auto-installs the requested yarn version if needed\n                            Default: npm\n\n    -t, --test <name>       Filter tests by name (can be repeated)\n                            Available: publish, install, audit, info, deprecate,\n                                       dist-tags, ping, search, star, unpublish\n                            Default: all supported by the PM\n\n    --token <token>         Auth token (skips user creation)\n    --timeout <ms>          Per-test timeout (default: 50000)\n    -v, --verbose           Enable debug output\n    -h, --help              Show this help\n  `);\n}\n\nexport async function main(argv: string[] = process.argv): Promise<void> {\n  const options = parseArgs(argv);\n\n  if (!options.registry) {\n    console.error('Error: --registry is required\\n');\n    printHelp();\n    process.exit(1);\n  }\n\n  // Run from a temp dir to isolate from the host project's packageManager, .yarnrc.yml, etc.\n  const { createTempFolder } = await import('./utils/project');\n  const runDir = await createTempFolder('e2e-run');\n  process.chdir(runDir);\n\n  if (options.verbose) {\n    const { setVerbose } = await import('./utils/process');\n    setVerbose(true);\n  }\n\n  // Ensure registry is reachable\n  console.log(`Checking registry at ${options.registry}...`);\n  const alive = await pingRegistry(options.registry);\n  if (!alive) {\n    console.error(`Error: Registry at ${options.registry} is not reachable`);\n    process.exit(1);\n  }\n  console.log(`Registry is alive.`);\n\n  // Get auth token\n  let token = options.token;\n  if (!token) {\n    console.log('Creating test user...');\n    const auth = await createUser(options.registry);\n    token = auth.token;\n    console.log(`User \"${auth.user}\" created.`);\n  }\n\n  // Build adapter list\n  const adapters = parseAdapters(options.pm);\n  console.log(`Adapters: ${adapters.map((a) => a.name).join(', ')}`);\n\n  // Filter tests\n  const tests = options.test && options.test.length > 0\n    ? allTests.filter((t) => options.test!.includes(t.name))\n    : allTests;\n\n  console.log(`Tests: ${tests.map((t) => t.name).join(', ')}`);\n\n  // Run\n  const { exitCode } = await runAll(adapters, tests, options.registry, token, {\n    timeout: options.timeout,\n    concurrency: options.concurrency,\n    testFilter: options.test,\n  });\n\n  process.exit(exitCode);\n}\n\n// Re-export for programmatic usage\nexport { allTests } from './tests';\nexport { createNpmAdapter, createPnpmAdapter, createYarnClassicAdapter, createYarnModernAdapter } from './adapters';\nexport { runAll, runSuite } from './runner';\nexport type { PackageManagerAdapter, TestDefinition, TestContext, CliOptions } from './types';\n"],"mappings":";;;;;;;;;;AAac,WAAW,oBAAoB;AAE7C,SAAS,YAAY,QAAsE;CAEzF,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACjC,KAAI,UAAU,GACZ,QAAO;EAAE,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC,aAAa;EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;EAAE;CAEzF,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACjC,KAAI,UAAU,GACZ,QAAO;EAAE,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC,aAAa;EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;EAAE;AAEzF,QAAO,EAAE,MAAM,OAAO,aAAa,EAAE;;AAGvC,SAAS,cAAc,WAA+C;AACpE,KAAI,CAAC,aAAa,UAAU,WAAW,EACrC,QAAO,CAAC,kBAAkB,CAAC;CAG7B,MAAM,WAAoC,EAAE;AAE5C,MAAK,MAAM,UAAU,WAAW;EAC9B,MAAM,EAAE,MAAM,SAAS,YAAY,YAAY,OAAO;AAEtD,MAAI,SAAS,MACX,UAAS,KAAK,iBAAiB,SAAS,QAAQ,CAAC;WACxC,SAAS,OAClB,UAAS,KAAK,kBAAkB,SAAS,QAAQ,CAAC;WACzC,SAAS,kBAAkB,SAAS,QAC7C,UAAS,KAAK,yBAAyB,SAAS,QAAQ,CAAC;WAChD,SAAS,iBAAiB,SAAS,OAC5C,UAAS,KAAK,wBAAwB,SAAS,QAAQ,CAAC;MAExD,OAAM,IAAI,MACR,6BAA6B,KAAK,8DACnC;;AAIL,QAAO;;AAGT,SAAS,UAAU,MAA4B;CAC7C,MAAM,UAAsB;EAC1B,UAAU;EACV,IAAI,EAAE;EACN,MAAM,EAAE;EACR,aAAa;EACb,SAAS;EACT,SAAS;EACV;AAED,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AAEjB,MAAI,QAAQ,gBAAgB,QAAQ,KAClC,SAAQ,WAAW,KAAK,EAAE;WACjB,QAAQ,OACjB,SAAQ,GAAI,KAAK,KAAK,EAAE,GAAG;WAClB,QAAQ,YAAY,QAAQ,KACrC,SAAQ,KAAM,KAAK,KAAK,EAAE,GAAG;WACpB,QAAQ,mBAAmB,QAAQ,KAC5C,SAAQ,cAAc,SAAS,KAAK,EAAE,IAAI,GAAG;WACpC,QAAQ,YACjB,SAAQ,UAAU,SAAS,KAAK,EAAE,IAAI,GAAG;WAChC,QAAQ,UACjB,SAAQ,QAAQ,KAAK,EAAE;WACd,QAAQ,eAAe,QAAQ,KACxC,SAAQ,UAAU;WACT,QAAQ,YAAY,QAAQ,MAAM;AAC3C,cAAW;AACX,WAAQ,KAAK,EAAE;aACN,IAAI,WAAW,cAAc,CACtC,SAAQ,WAAW,IAAI,MAAM,IAAI,CAAC;WACzB,IAAI,WAAW,QAAQ,CAChC,SAAQ,GAAI,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG;WAC1B,IAAI,WAAW,UAAU,CAClC,SAAQ,KAAM,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG;WAC5B,IAAI,WAAW,WAAW,CACnC,SAAQ,QAAQ,IAAI,MAAM,IAAI,CAAC;WACtB,IAAI,WAAW,aAAa,CACrC,SAAQ,UAAU,SAAS,IAAI,MAAM,IAAI,CAAC,IAAI,GAAG;OAC5C;AACL,WAAQ,MAAM,qBAAqB,MAAM;AACzC,cAAW;AACX,WAAQ,KAAK,EAAE;;;AAInB,QAAO;;AAGT,SAAS,YAAkB;AACzB,SAAQ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BV;;AAGJ,eAAsB,KAAK,OAAiB,QAAQ,MAAqB;CACvE,MAAM,UAAU,UAAU,KAAK;AAE/B,KAAI,CAAC,QAAQ,UAAU;AACrB,UAAQ,MAAM,kCAAkC;AAChD,aAAW;AACX,UAAQ,KAAK,EAAE;;CAIjB,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,SAAS,MAAM,iBAAiB,UAAU;AAChD,SAAQ,MAAM,OAAO;AAErB,KAAI,QAAQ,SAAS;EACnB,MAAM,EAAE,eAAe,MAAM,OAAO;AACpC,aAAW,KAAK;;AAIlB,SAAQ,IAAI,wBAAwB,QAAQ,SAAS,KAAK;AAE1D,KAAI,CADU,MAAM,aAAa,QAAQ,SAAS,EACtC;AACV,UAAQ,MAAM,sBAAsB,QAAQ,SAAS,mBAAmB;AACxE,UAAQ,KAAK,EAAE;;AAEjB,SAAQ,IAAI,qBAAqB;CAGjC,IAAI,QAAQ,QAAQ;AACpB,KAAI,CAAC,OAAO;AACV,UAAQ,IAAI,wBAAwB;EACpC,MAAM,OAAO,MAAM,WAAW,QAAQ,SAAS;AAC/C,UAAQ,KAAK;AACb,UAAQ,IAAI,SAAS,KAAK,KAAK,YAAY;;CAI7C,MAAM,WAAW,cAAc,QAAQ,GAAG;AAC1C,SAAQ,IAAI,aAAa,SAAS,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,GAAG;CAGlE,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,KAAK,SAAS,IAChD,SAAS,QAAQ,MAAM,QAAQ,KAAM,SAAS,EAAE,KAAK,CAAC,GACtD;AAEJ,SAAQ,IAAI,UAAU,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,GAAG;CAG5D,MAAM,EAAE,aAAa,MAAM,OAAO,UAAU,OAAO,QAAQ,UAAU,OAAO;EAC1E,SAAS,QAAQ;EACjB,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACrB,CAAC;AAEF,SAAQ,KAAK,SAAS"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport {\n  createBunAdapter,\n  createDenoAdapter,\n  createNpmAdapter,\n  createPnpmAdapter,\n  createYarnClassicAdapter,\n  createYarnModernAdapter,\n} from './adapters';\nimport { allTests } from './tests';\nimport { CliOptions, PackageManagerAdapter } from './types';\nimport { createUser, pingRegistry } from './utils/registry-client';\nimport { runAll } from './runner';\n\nconst debug = buildDebug('verdaccio:e2e-cli');\n\nfunction parsePmSpec(filter: string): { name: string; version?: string; binPath?: string } {\n  // --pm yarn-modern@3, --pm yarn-classic@1.22.22, --pm npm=/path/to/bin\n  const eqIdx = filter.indexOf('=');\n  if (eqIdx !== -1) {\n    return { name: filter.slice(0, eqIdx).toLowerCase(), binPath: filter.slice(eqIdx + 1) };\n  }\n  const atIdx = filter.indexOf('@');\n  if (atIdx !== -1) {\n    return { name: filter.slice(0, atIdx).toLowerCase(), version: filter.slice(atIdx + 1) };\n  }\n  return { name: filter.toLowerCase() };\n}\n\nfunction parseAdapters(pmFilters?: string[]): PackageManagerAdapter[] {\n  if (!pmFilters || pmFilters.length === 0) {\n    return [createNpmAdapter()];\n  }\n\n  const adapters: PackageManagerAdapter[] = [];\n\n  for (const filter of pmFilters) {\n    const { name, version, binPath } = parsePmSpec(filter);\n\n    if (name === 'npm') {\n      adapters.push(createNpmAdapter(binPath, version));\n    } else if (name === 'pnpm') {\n      adapters.push(createPnpmAdapter(binPath, version));\n    } else if (name === 'yarn-classic' || name === 'yarn1') {\n      adapters.push(createYarnClassicAdapter(binPath, version));\n    } else if (name === 'yarn-modern' || name === 'yarn') {\n      adapters.push(createYarnModernAdapter(binPath, version));\n    } else if (name === 'bun') {\n      adapters.push(createBunAdapter(binPath, version));\n    } else if (name === 'deno') {\n      adapters.push(createDenoAdapter(binPath, version));\n    } else {\n      throw new Error(\n        `Unknown package manager: \"${name}\". Supported: npm, pnpm, yarn-classic, yarn-modern, bun, deno`\n      );\n    }\n  }\n\n  return adapters;\n}\n\nfunction parseArgs(argv: string[]): CliOptions {\n  const options: CliOptions = {\n    registry: '',\n    pm: [],\n    test: [],\n    concurrency: 1,\n    timeout: 50000,\n    verbose: false,\n  };\n\n  for (let i = 2; i < argv.length; i++) {\n    const arg = argv[i];\n\n    if (arg === '--registry' || arg === '-r') {\n      options.registry = argv[++i];\n    } else if (arg === '--pm') {\n      options.pm!.push(argv[++i]);\n    } else if (arg === '--test' || arg === '-t') {\n      options.test!.push(argv[++i]);\n    } else if (arg === '--concurrency' || arg === '-c') {\n      options.concurrency = parseInt(argv[++i], 10);\n    } else if (arg === '--timeout') {\n      options.timeout = parseInt(argv[++i], 10);\n    } else if (arg === '--token') {\n      options.token = argv[++i];\n    } else if (arg === '--verbose' || arg === '-v') {\n      options.verbose = true;\n    } else if (arg === '--help' || arg === '-h') {\n      printHelp();\n      process.exit(0);\n    } else if (arg.startsWith('--registry=')) {\n      options.registry = arg.split('=')[1];\n    } else if (arg.startsWith('--pm=')) {\n      options.pm!.push(arg.split('=')[1]);\n    } else if (arg.startsWith('--test=')) {\n      options.test!.push(arg.split('=')[1]);\n    } else if (arg.startsWith('--token=')) {\n      options.token = arg.split('=')[1];\n    } else if (arg.startsWith('--timeout=')) {\n      options.timeout = parseInt(arg.split('=')[1], 10);\n    } else {\n      console.error(`Unknown argument: ${arg}`);\n      printHelp();\n      process.exit(1);\n    }\n  }\n\n  return options;\n}\n\nfunction printHelp(): void {\n  console.log(`\n  @verdaccio/e2e-cli - Run Verdaccio e2e tests against any running registry\n\n  Usage:\n    verdaccio-e2e --registry <url> [options]\n\n  Required:\n    -r, --registry <url>    Verdaccio registry URL (e.g. http://localhost:4873)\n\n  Options:\n    --pm <name[@version]>   Package manager to test (can be repeated)\n                            Supported: npm, pnpm, yarn-classic, yarn-modern (or yarn), bun, deno\n                            Examples: --pm npm@10 --pm pnpm@9\n                                      --pm yarn-modern@4\n                                      --pm yarn-modern@3\n                                      --pm yarn-classic\n                                      --pm bun\n                                      --pm npm --pm pnpm  (uses system version)\n                            Auto-installs the requested yarn version if needed\n                            Default: npm\n\n    -t, --test <name>       Filter tests by name (can be repeated)\n                            Available: publish, install, ci, audit, info, deprecate,\n                                       dist-tags, ping, search, star, unpublish\n                            Scenarios: scenario:install-multiple-deps\n                            Default: all supported by the PM\n\n    --token <token>         Auth token (skips user creation)\n    --timeout <ms>          Per-test timeout (default: 50000)\n    -v, --verbose           Enable debug output\n    -h, --help              Show this help\n  `);\n}\n\nexport async function main(argv: string[] = process.argv): Promise<void> {\n  const options = parseArgs(argv);\n\n  if (!options.registry) {\n    console.error('Error: --registry is required\\n');\n    printHelp();\n    process.exit(1);\n  }\n\n  // Run from a temp dir to isolate from the host project's packageManager, .yarnrc.yml, etc.\n  const { createTempFolder } = await import('./utils/project');\n  const runDir = await createTempFolder('e2e-run');\n  process.chdir(runDir);\n\n  if (options.verbose) {\n    const { setVerbose } = await import('./utils/process');\n    setVerbose(true);\n  }\n\n  // Ensure registry is reachable\n  console.log(`Checking registry at ${options.registry}...`);\n  const alive = await pingRegistry(options.registry);\n  if (!alive) {\n    console.error(`Error: Registry at ${options.registry} is not reachable`);\n    process.exit(1);\n  }\n  console.log(`Registry is alive.`);\n\n  // Get auth token\n  let token = options.token;\n  if (!token) {\n    console.log('Creating test user...');\n    const auth = await createUser(options.registry);\n    token = auth.token;\n    console.log(`User \"${auth.user}\" created.`);\n  }\n\n  // Build adapter list\n  const adapters = parseAdapters(options.pm);\n  console.log(`Adapters: ${adapters.map((a) => a.name).join(', ')}`);\n\n  // Filter tests\n  const tests = options.test && options.test.length > 0\n    ? allTests.filter((t) => options.test!.includes(t.name))\n    : allTests;\n\n  console.log(`Tests: ${tests.map((t) => t.name).join(', ')}`);\n\n  // Run\n  const { exitCode } = await runAll(adapters, tests, options.registry, token, {\n    timeout: options.timeout,\n    concurrency: options.concurrency,\n    testFilter: options.test,\n  });\n\n  process.exit(exitCode);\n}\n\n// Re-export for programmatic usage\nexport { allTests } from './tests';\nexport { allScenarios } from './scenarios';\nexport { createBunAdapter, createDenoAdapter, createNpmAdapter, createPnpmAdapter, createYarnClassicAdapter, createYarnModernAdapter } from './adapters';\nexport { runAll, runSuite } from './runner';\nexport type { PackageManagerAdapter, TestDefinition, TestContext, CliOptions } from './types';\n"],"mappings":";;;;;;;;;;;;;AAec,WAAW,oBAAoB;AAE7C,SAAS,YAAY,QAAsE;CAEzF,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACjC,KAAI,UAAU,GACZ,QAAO;EAAE,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC,aAAa;EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;EAAE;CAEzF,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACjC,KAAI,UAAU,GACZ,QAAO;EAAE,MAAM,OAAO,MAAM,GAAG,MAAM,CAAC,aAAa;EAAE,SAAS,OAAO,MAAM,QAAQ,EAAE;EAAE;AAEzF,QAAO,EAAE,MAAM,OAAO,aAAa,EAAE;;AAGvC,SAAS,cAAc,WAA+C;AACpE,KAAI,CAAC,aAAa,UAAU,WAAW,EACrC,QAAO,CAAC,kBAAkB,CAAC;CAG7B,MAAM,WAAoC,EAAE;AAE5C,MAAK,MAAM,UAAU,WAAW;EAC9B,MAAM,EAAE,MAAM,SAAS,YAAY,YAAY,OAAO;AAEtD,MAAI,SAAS,MACX,UAAS,KAAK,iBAAiB,SAAS,QAAQ,CAAC;WACxC,SAAS,OAClB,UAAS,KAAK,kBAAkB,SAAS,QAAQ,CAAC;WACzC,SAAS,kBAAkB,SAAS,QAC7C,UAAS,KAAK,yBAAyB,SAAS,QAAQ,CAAC;WAChD,SAAS,iBAAiB,SAAS,OAC5C,UAAS,KAAK,wBAAwB,SAAS,QAAQ,CAAC;WAC/C,SAAS,MAClB,UAAS,KAAK,iBAAiB,SAAS,QAAQ,CAAC;WACxC,SAAS,OAClB,UAAS,KAAK,kBAAkB,SAAS,QAAQ,CAAC;MAElD,OAAM,IAAI,MACR,6BAA6B,KAAK,+DACnC;;AAIL,QAAO;;AAGT,SAAS,UAAU,MAA4B;CAC7C,MAAM,UAAsB;EAC1B,UAAU;EACV,IAAI,EAAE;EACN,MAAM,EAAE;EACR,aAAa;EACb,SAAS;EACT,SAAS;EACV;AAED,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;AAEjB,MAAI,QAAQ,gBAAgB,QAAQ,KAClC,SAAQ,WAAW,KAAK,EAAE;WACjB,QAAQ,OACjB,SAAQ,GAAI,KAAK,KAAK,EAAE,GAAG;WAClB,QAAQ,YAAY,QAAQ,KACrC,SAAQ,KAAM,KAAK,KAAK,EAAE,GAAG;WACpB,QAAQ,mBAAmB,QAAQ,KAC5C,SAAQ,cAAc,SAAS,KAAK,EAAE,IAAI,GAAG;WACpC,QAAQ,YACjB,SAAQ,UAAU,SAAS,KAAK,EAAE,IAAI,GAAG;WAChC,QAAQ,UACjB,SAAQ,QAAQ,KAAK,EAAE;WACd,QAAQ,eAAe,QAAQ,KACxC,SAAQ,UAAU;WACT,QAAQ,YAAY,QAAQ,MAAM;AAC3C,cAAW;AACX,WAAQ,KAAK,EAAE;aACN,IAAI,WAAW,cAAc,CACtC,SAAQ,WAAW,IAAI,MAAM,IAAI,CAAC;WACzB,IAAI,WAAW,QAAQ,CAChC,SAAQ,GAAI,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG;WAC1B,IAAI,WAAW,UAAU,CAClC,SAAQ,KAAM,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG;WAC5B,IAAI,WAAW,WAAW,CACnC,SAAQ,QAAQ,IAAI,MAAM,IAAI,CAAC;WACtB,IAAI,WAAW,aAAa,CACrC,SAAQ,UAAU,SAAS,IAAI,MAAM,IAAI,CAAC,IAAI,GAAG;OAC5C;AACL,WAAQ,MAAM,qBAAqB,MAAM;AACzC,cAAW;AACX,WAAQ,KAAK,EAAE;;;AAInB,QAAO;;AAGT,SAAS,YAAkB;AACzB,SAAQ,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+BV;;AAGJ,eAAsB,KAAK,OAAiB,QAAQ,MAAqB;CACvE,MAAM,UAAU,UAAU,KAAK;AAE/B,KAAI,CAAC,QAAQ,UAAU;AACrB,UAAQ,MAAM,kCAAkC;AAChD,aAAW;AACX,UAAQ,KAAK,EAAE;;CAIjB,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,SAAS,MAAM,iBAAiB,UAAU;AAChD,SAAQ,MAAM,OAAO;AAErB,KAAI,QAAQ,SAAS;EACnB,MAAM,EAAE,eAAe,MAAM,OAAO;AACpC,aAAW,KAAK;;AAIlB,SAAQ,IAAI,wBAAwB,QAAQ,SAAS,KAAK;AAE1D,KAAI,CADU,MAAM,aAAa,QAAQ,SAAS,EACtC;AACV,UAAQ,MAAM,sBAAsB,QAAQ,SAAS,mBAAmB;AACxE,UAAQ,KAAK,EAAE;;AAEjB,SAAQ,IAAI,qBAAqB;CAGjC,IAAI,QAAQ,QAAQ;AACpB,KAAI,CAAC,OAAO;AACV,UAAQ,IAAI,wBAAwB;EACpC,MAAM,OAAO,MAAM,WAAW,QAAQ,SAAS;AAC/C,UAAQ,KAAK;AACb,UAAQ,IAAI,SAAS,KAAK,KAAK,YAAY;;CAI7C,MAAM,WAAW,cAAc,QAAQ,GAAG;AAC1C,SAAQ,IAAI,aAAa,SAAS,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,GAAG;CAGlE,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,KAAK,SAAS,IAChD,SAAS,QAAQ,MAAM,QAAQ,KAAM,SAAS,EAAE,KAAK,CAAC,GACtD;AAEJ,SAAQ,IAAI,UAAU,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,KAAK,KAAK,GAAG;CAG5D,MAAM,EAAE,aAAa,MAAM,OAAO,UAAU,OAAO,QAAQ,UAAU,OAAO;EAC1E,SAAS,QAAQ;EACjB,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACrB,CAAC;AAEF,SAAQ,KAAK,SAAS"}

package/build/esm/scenarios/index.js

@@ -0,0 +1,7 @@
+import { installMultipleDepsScenario } from "./install-multiple-deps.js";
+//#region src/scenarios/index.ts
+var allScenarios = [installMultipleDepsScenario];
+//#endregion
+export { allScenarios };
+
+//# sourceMappingURL=index.js.map

package/build/esm/scenarios/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/scenarios/index.ts"],"sourcesContent":["import { TestDefinition } from '../types';\n\nimport { installMultipleDepsScenario } from './install-multiple-deps';\n\nexport const allScenarios: TestDefinition[] = [installMultipleDepsScenario];\n\nexport { installMultipleDepsScenario };\n"],"mappings":";;AAIA,IAAa,eAAiC,CAAC,4BAA4B"}

package/build/esm/scenarios/install-multiple-deps.js

@@ -0,0 +1,113 @@
+import buildDebug from "debug";
+import assert from "assert";
+//#region src/scenarios/install-multiple-deps.ts
+var debug = buildDebug("verdaccio:e2e-cli:scenario:install-multiple-deps");
+/**
+* Scenario: install-multiple-deps
+*
+* Publishes several packages to the registry (some scoped, some unscoped,
+* some with inter-dependencies), then creates a consumer project that
+* depends on all of them and runs `install`.
+*
+* This exercises the registry under realistic load:
+*   - many parallel tarball downloads
+*   - metadata resolution for multiple packages
+*   - scoped-package authentication
+*   - transitive dependency resolution
+*/
+var SEED_PACKAGES_COUNT = 5;
+/**
+* Parse `info --json` output across all adapters.
+* Yarn classic wraps the result in NDJSON lines with `{ type: "inspect", data: { ... } }`.
+*/
+function parseInfoOutput(stdout, adapterType) {
+	if (adapterType === "yarn-classic") {
+		const lines = stdout.split("\n").filter(Boolean);
+		for (const line of lines) try {
+			const obj = JSON.parse(line);
+			if (obj.type === "inspect" && obj.data) return obj.data;
+		} catch {}
+		return JSON.parse(stdout);
+	}
+	return JSON.parse(stdout);
+}
+async function publishSeedPackage(ctx, pkgName, version, dependencies = {}) {
+	debug("publishing seed package %s@%s", pkgName, version);
+	const { tempFolder } = await ctx.adapter.prepareProject(pkgName, version, ctx.registryUrl, ctx.port, ctx.token, dependencies);
+	if (ctx.adapter.type === "yarn-modern") await ctx.adapter.exec({ cwd: tempFolder }, "install");
+	await ctx.adapter.exec({ cwd: tempFolder }, "publish", ...ctx.adapter.registryArg(ctx.registryUrl));
+	debug("published %s@%s", pkgName, version);
+}
+async function testInstallMultipleDeps(ctx) {
+	const id = ctx.runId;
+	let projectCwd = "";
+	await ctx.subTest("publish seed packages", async () => {
+		for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) await publishSeedPackage(ctx, `@verdaccio/seed-${id}-${i}`, "1.0.0");
+		const sharedPkg = `@verdaccio/seed-shared-${id}`;
+		await publishSeedPackage(ctx, sharedPkg, "1.0.0");
+		await publishSeedPackage(ctx, `@verdaccio/seed-mid-${id}`, "1.0.0", {
+			[`@verdaccio/seed-${id}-1`]: "1.0.0",
+			[`@verdaccio/seed-${id}-2`]: "1.0.0",
+			[sharedPkg]: "1.0.0"
+		});
+		debug("all seed packages published");
+	});
+	await ctx.subTest("install all dependencies in consumer project", async () => {
+		const consumerDeps = {};
+		for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) consumerDeps[`@verdaccio/seed-${id}-${i}`] = "1.0.0";
+		consumerDeps[`@verdaccio/seed-mid-${id}`] = "1.0.0";
+		consumerDeps[`@verdaccio/seed-shared-${id}`] = "1.0.0";
+		const consumerName = `@verdaccio/consumer-${id}`;
+		const { tempFolder } = await ctx.adapter.prepareProject(consumerName, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, consumerDeps);
+		projectCwd = tempFolder;
+		debug("installing %d dependencies in consumer project", Object.keys(consumerDeps).length);
+		const args = ["install", ...ctx.adapter.registryArg(ctx.registryUrl)];
+		await ctx.adapter.exec({ cwd: tempFolder }, ...args);
+		debug("install completed for consumer project");
+	});
+	await ctx.subTest("verify installed packages", async () => {
+		for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {
+			const name = `@verdaccio/seed-${id}-${i}`;
+			const info = parseInfoOutput((await ctx.adapter.exec({ cwd: projectCwd }, "info", name, "--json", ...ctx.adapter.registryArg(ctx.registryUrl))).stdout, ctx.adapter.type);
+			assert.strictEqual(info.name, name, `Expected package name "${name}"`);
+			assert.strictEqual(info.version, "1.0.0", `Expected version 1.0.0 for ${name}`);
+		}
+		const midName = `@verdaccio/seed-mid-${id}`;
+		const midInfo = parseInfoOutput((await ctx.adapter.exec({ cwd: projectCwd }, "info", midName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl))).stdout, ctx.adapter.type);
+		assert.strictEqual(midInfo.name, midName);
+		const deps = midInfo.dependencies || {};
+		assert.strictEqual(deps[`@verdaccio/seed-${id}-1`], "1.0.0", "Intermediate should depend on seed-1");
+		assert.strictEqual(deps[`@verdaccio/seed-${id}-2`], "1.0.0", "Intermediate should depend on seed-2");
+		assert.strictEqual(deps[`@verdaccio/seed-shared-${id}`], "1.0.0", "Intermediate should depend on shared");
+		debug("all packages verified");
+	});
+	await ctx.subTest("update and re-install", async () => {
+		const leafName = `@verdaccio/seed-${id}-1`;
+		await publishSeedPackage(ctx, leafName, "2.0.0");
+		const sharedName = `@verdaccio/seed-shared-${id}`;
+		await publishSeedPackage(ctx, sharedName, "2.0.0");
+		const consumerDeps = {
+			[leafName]: "^1.0.0",
+			[sharedName]: "^1.0.0"
+		};
+		const consumerName = `@verdaccio/consumer-update-${id}`;
+		const { tempFolder } = await ctx.adapter.prepareProject(consumerName, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, consumerDeps);
+		await ctx.adapter.exec({ cwd: tempFolder }, "install", ...ctx.adapter.registryArg(ctx.registryUrl));
+		const leafInfo = parseInfoOutput((await ctx.adapter.exec({ cwd: tempFolder }, "info", leafName, "--json", ...ctx.adapter.registryArg(ctx.registryUrl))).stdout, ctx.adapter.type);
+		assert.strictEqual(leafInfo["dist-tags"]?.latest ?? leafInfo.version, "2.0.0", `Expected latest version of ${leafName} to be 2.0.0`);
+		debug("update and re-install verified");
+	});
+}
+var installMultipleDepsScenario = {
+	name: "scenario:install-multiple-deps",
+	requires: [
+		"publish",
+		"install",
+		"info"
+	],
+	run: testInstallMultipleDeps
+};
+//#endregion
+export { installMultipleDepsScenario };
+
+//# sourceMappingURL=install-multiple-deps.js.map

package/build/esm/scenarios/install-multiple-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-multiple-deps.js","names":[],"sources":["../../../src/scenarios/install-multiple-deps.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:scenario:install-multiple-deps');\n\n/**\n * Scenario: install-multiple-deps\n *\n * Publishes several packages to the registry (some scoped, some unscoped,\n * some with inter-dependencies), then creates a consumer project that\n * depends on all of them and runs `install`.\n *\n * This exercises the registry under realistic load:\n *   - many parallel tarball downloads\n *   - metadata resolution for multiple packages\n *   - scoped-package authentication\n *   - transitive dependency resolution\n */\n\nconst SEED_PACKAGES_COUNT = 5;\n\n/**\n * Parse `info --json` output across all adapters.\n * Yarn classic wraps the result in NDJSON lines with `{ type: \"inspect\", data: { ... } }`.\n */\nfunction parseInfoOutput(stdout: string, adapterType: string): any {\n  if (adapterType === 'yarn-classic') {\n    // Yarn classic outputs NDJSON — find the \"inspect\" line that holds package data\n    const lines = stdout.split('\\n').filter(Boolean);\n    for (const line of lines) {\n      try {\n        const obj = JSON.parse(line);\n        if (obj.type === 'inspect' && obj.data) {\n          return obj.data;\n        }\n      } catch {\n        // skip non-JSON lines\n      }\n    }\n    // Fallback: try parsing the whole output\n    return JSON.parse(stdout);\n  }\n  return JSON.parse(stdout);\n}\n\nasync function publishSeedPackage(\n  ctx: TestContext,\n  pkgName: string,\n  version: string,\n  dependencies: Record<string, string> = {}\n): Promise<void> {\n  debug('publishing seed package %s@%s', pkgName, version);\n  const { tempFolder } = await ctx.adapter.prepareProject(\n    pkgName,\n    version,\n    ctx.registryUrl,\n    ctx.port,\n    ctx.token,\n    dependencies\n  );\n\n  if (ctx.adapter.type === 'yarn-modern') {\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install');\n  }\n\n  await ctx.adapter.exec(\n    { cwd: tempFolder },\n    'publish',\n    ...ctx.adapter.registryArg(ctx.registryUrl)\n  );\n  debug('published %s@%s', pkgName, version);\n}\n\nasync function testInstallMultipleDeps(ctx: TestContext): Promise<void> {\n  const id = ctx.runId;\n\n  // Shared project folder used as cwd for info commands across subtests.\n  // Yarn modern requires a project context (package.json + .yarnrc.yml) for `yarn npm info`.\n  let projectCwd = '';\n\n  // --- Phase 1: Publish a tree of seed packages ---\n  await ctx.subTest('publish seed packages', async () => {\n    // Leaf packages (no dependencies of their own)\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      await publishSeedPackage(ctx, name, '1.0.0');\n    }\n\n    // A \"shared\" package that multiple consumers will pull in\n    const sharedPkg = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedPkg, '1.0.0');\n\n    // An intermediate package that depends on some leaf packages + shared\n    const intermediatePkg = `@verdaccio/seed-mid-${id}`;\n    await publishSeedPackage(ctx, intermediatePkg, '1.0.0', {\n      [`@verdaccio/seed-${id}-1`]: '1.0.0',\n      [`@verdaccio/seed-${id}-2`]: '1.0.0',\n      [sharedPkg]: '1.0.0',\n    });\n\n    debug('all seed packages published');\n  });\n\n  // --- Phase 2: Create a consumer project that depends on everything ---\n  await ctx.subTest('install all dependencies in consumer project', async () => {\n    const consumerDeps: Record<string, string> = {};\n\n    // Direct deps on all leaf packages\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      consumerDeps[`@verdaccio/seed-${id}-${i}`] = '1.0.0';\n    }\n\n    // Also depend on the intermediate (pulls in transitive deps)\n    consumerDeps[`@verdaccio/seed-mid-${id}`] = '1.0.0';\n\n    // And the shared package directly (already a transitive dep of mid)\n    consumerDeps[`@verdaccio/seed-shared-${id}`] = '1.0.0';\n\n    const consumerName = `@verdaccio/consumer-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    projectCwd = tempFolder;\n\n    debug('installing %d dependencies in consumer project', Object.keys(consumerDeps).length);\n\n    const args = ['install', ...ctx.adapter.registryArg(ctx.registryUrl)];\n    await ctx.adapter.exec({ cwd: tempFolder }, ...args);\n\n    debug('install completed for consumer project');\n  });\n\n  // --- Phase 3: Verify all packages resolved correctly ---\n  await ctx.subTest('verify installed packages', async () => {\n    // Check that each seed package is retrievable via `info`\n    for (let i = 1; i <= SEED_PACKAGES_COUNT; i++) {\n      const name = `@verdaccio/seed-${id}-${i}`;\n      const resp = await ctx.adapter.exec(\n        { cwd: projectCwd },\n        'info',\n        name,\n        '--json',\n        ...ctx.adapter.registryArg(ctx.registryUrl)\n      );\n      const info = parseInfoOutput(resp.stdout, ctx.adapter.type);\n      assert.strictEqual(info.name, name, `Expected package name \"${name}\"`);\n      assert.strictEqual(info.version, '1.0.0', `Expected version 1.0.0 for ${name}`);\n    }\n\n    // Verify intermediate package has correct dependencies in registry metadata\n    const midName = `@verdaccio/seed-mid-${id}`;\n    const resp = await ctx.adapter.exec(\n      { cwd: projectCwd },\n      'info',\n      midName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const midInfo = parseInfoOutput(resp.stdout, ctx.adapter.type);\n    assert.strictEqual(midInfo.name, midName);\n\n    const deps = midInfo.dependencies || {};\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-1`],\n      '1.0.0',\n      'Intermediate should depend on seed-1'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-${id}-2`],\n      '1.0.0',\n      'Intermediate should depend on seed-2'\n    );\n    assert.strictEqual(\n      deps[`@verdaccio/seed-shared-${id}`],\n      '1.0.0',\n      'Intermediate should depend on shared'\n    );\n\n    debug('all packages verified');\n  });\n\n  // --- Phase 4: Publish updated versions and re-install ---\n  await ctx.subTest('update and re-install', async () => {\n    // Publish v2 of a leaf and the shared package\n    const leafName = `@verdaccio/seed-${id}-1`;\n    await publishSeedPackage(ctx, leafName, '2.0.0');\n\n    const sharedName = `@verdaccio/seed-shared-${id}`;\n    await publishSeedPackage(ctx, sharedName, '2.0.0');\n\n    // Create a new consumer that uses ^ ranges — should pick up 2.0.0\n    const consumerDeps: Record<string, string> = {\n      [leafName]: '^1.0.0',\n      [sharedName]: '^1.0.0',\n    };\n\n    const consumerName = `@verdaccio/consumer-update-${id}`;\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      consumerName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      consumerDeps\n    );\n\n    await ctx.adapter.exec({ cwd: tempFolder }, 'install', ...ctx.adapter.registryArg(ctx.registryUrl));\n\n    // Verify that the registry now serves both versions\n    const leafResp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'info',\n      leafName,\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n    const leafInfo = parseInfoOutput(leafResp.stdout, ctx.adapter.type);\n\n    // dist-tags.latest should be 2.0.0\n    assert.strictEqual(\n      leafInfo['dist-tags']?.latest ?? leafInfo.version,\n      '2.0.0',\n      `Expected latest version of ${leafName} to be 2.0.0`\n    );\n\n    debug('update and re-install verified');\n  });\n}\n\nexport const installMultipleDepsScenario: TestDefinition = {\n  name: 'scenario:install-multiple-deps',\n  requires: ['publish', 'install', 'info'],\n  run: testInstallMultipleDeps,\n};\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,mDAAmD;;;;;;;;;;;;;;AAgB5E,IAAM,sBAAsB;;;;;AAM5B,SAAS,gBAAgB,QAAgB,aAA0B;AACjE,KAAI,gBAAgB,gBAAgB;EAElC,MAAM,QAAQ,OAAO,MAAM,KAAK,CAAC,OAAO,QAAQ;AAChD,OAAK,MAAM,QAAQ,MACjB,KAAI;GACF,MAAM,MAAM,KAAK,MAAM,KAAK;AAC5B,OAAI,IAAI,SAAS,aAAa,IAAI,KAChC,QAAO,IAAI;UAEP;AAKV,SAAO,KAAK,MAAM,OAAO;;AAE3B,QAAO,KAAK,MAAM,OAAO;;AAG3B,eAAe,mBACb,KACA,SACA,SACA,eAAuC,EAAE,EAC1B;AACf,OAAM,iCAAiC,SAAS,QAAQ;CACxD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;AAED,KAAI,IAAI,QAAQ,SAAS,cACvB,OAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,UAAU;AAGxD,OAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AACD,OAAM,mBAAmB,SAAS,QAAQ;;AAG5C,eAAe,wBAAwB,KAAiC;CACtE,MAAM,KAAK,IAAI;CAIf,IAAI,aAAa;AAGjB,OAAM,IAAI,QAAQ,yBAAyB,YAAY;AAErD,OAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,IAExC,OAAM,mBAAmB,KADZ,mBAAmB,GAAG,GAAG,KACF,QAAQ;EAI9C,MAAM,YAAY,0BAA0B;AAC5C,QAAM,mBAAmB,KAAK,WAAW,QAAQ;AAIjD,QAAM,mBAAmB,KADD,uBAAuB,MACA,SAAS;IACrD,mBAAmB,GAAG,MAAM;IAC5B,mBAAmB,GAAG,MAAM;IAC5B,YAAY;GACd,CAAC;AAEF,QAAM,8BAA8B;GACpC;AAGF,OAAM,IAAI,QAAQ,gDAAgD,YAAY;EAC5E,MAAM,eAAuC,EAAE;AAG/C,OAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,IACxC,cAAa,mBAAmB,GAAG,GAAG,OAAO;AAI/C,eAAa,uBAAuB,QAAQ;AAG5C,eAAa,0BAA0B,QAAQ;EAE/C,MAAM,eAAe,uBAAuB;EAC5C,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;AAED,eAAa;AAEb,QAAM,kDAAkD,OAAO,KAAK,aAAa,CAAC,OAAO;EAEzF,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;AACrE,QAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,GAAG,KAAK;AAEpD,QAAM,yCAAyC;GAC/C;AAGF,OAAM,IAAI,QAAQ,6BAA6B,YAAY;AAEzD,OAAK,IAAI,IAAI,GAAG,KAAK,qBAAqB,KAAK;GAC7C,MAAM,OAAO,mBAAmB,GAAG,GAAG;GAQtC,MAAM,OAAO,iBAPA,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,MACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACiC,QAAQ,IAAI,QAAQ,KAAK;AAC3D,UAAO,YAAY,KAAK,MAAM,MAAM,0BAA0B,KAAK,GAAG;AACtE,UAAO,YAAY,KAAK,SAAS,SAAS,8BAA8B,OAAO;;EAIjF,MAAM,UAAU,uBAAuB;EAQvC,MAAM,UAAU,iBAPH,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,QACA,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACoC,QAAQ,IAAI,QAAQ,KAAK;AAC9D,SAAO,YAAY,QAAQ,MAAM,QAAQ;EAEzC,MAAM,OAAO,QAAQ,gBAAgB,EAAE;AACvC,SAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,uCACD;AACD,SAAO,YACL,KAAK,mBAAmB,GAAG,MAC3B,SACA,uCACD;AACD,SAAO,YACL,KAAK,0BAA0B,OAC/B,SACA,uCACD;AAED,QAAM,wBAAwB;GAC9B;AAGF,OAAM,IAAI,QAAQ,yBAAyB,YAAY;EAErD,MAAM,WAAW,mBAAmB,GAAG;AACvC,QAAM,mBAAmB,KAAK,UAAU,QAAQ;EAEhD,MAAM,aAAa,0BAA0B;AAC7C,QAAM,mBAAmB,KAAK,YAAY,QAAQ;EAGlD,MAAM,eAAuC;IAC1C,WAAW;IACX,aAAa;GACf;EAED,MAAM,eAAe,8BAA8B;EACnD,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,cACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,aACD;AAED,QAAM,IAAI,QAAQ,KAAK,EAAE,KAAK,YAAY,EAAE,WAAW,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAAC;EAUnG,MAAM,WAAW,iBAPA,MAAM,IAAI,QAAQ,KACjC,EAAE,KAAK,YAAY,EACnB,QACA,UACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C,EACyC,QAAQ,IAAI,QAAQ,KAAK;AAGnE,SAAO,YACL,SAAS,cAAc,UAAU,SAAS,SAC1C,SACA,8BAA8B,SAAS,cACxC;AAED,QAAM,iCAAiC;GACvC;;AAGJ,IAAa,8BAA8C;CACzD,MAAM;CACN,UAAU;EAAC;EAAW;EAAW;EAAO;CACxC,KAAK;CACN"}

package/build/esm/tests/audit.js

@@ -1,17 +1,36 @@
+import buildDebug from "debug";
 import assert from "assert";
 //#region src/tests/audit.ts
+var debug = buildDebug("verdaccio:e2e-cli:test:audit");
 async function testAudit(ctx) {
+	if (ctx.adapter.type !== "npm" && ctx.adapter.type !== "bun") {
+		debug("skipping audit test for %s (npm/bun only)", ctx.adapter.type);
+		return;
+	}
 	const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];
 	for (const pkgName of packages) {
 		const { tempFolder } = await ctx.adapter.prepareProject(pkgName, "1.0.0", ctx.registryUrl, ctx.port, ctx.token, { jquery: "3.6.1" });
 		await ctx.adapter.exec({ cwd: tempFolder }, "install", ...ctx.adapter.registryArg(ctx.registryUrl));
+		try {
+			if ((await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: "{}"
+			})).status === 404) {
+				debug("audit endpoint not supported by this registry (404), skipping");
+				return;
+			}
+		} catch {
+			debug("audit endpoint probe failed, skipping");
+			return;
+		}
 		const resp = await ctx.adapter.exec({ cwd: tempFolder }, "audit", "--json", ...ctx.adapter.registryArg(ctx.registryUrl));
-		const parsedBody = JSON.parse(resp.stdout);
-		if (ctx.adapter.type === "npm") {
-			assert.ok(parsedBody.metadata !== void 0, "Expected \"metadata\" in audit response");
+		if (ctx.adapter.type === "bun") assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, "Expected audit output");
+		else {
+			const parsedBody = JSON.parse(resp.stdout);
 			assert.ok(parsedBody.auditReportVersion !== void 0, "Expected \"auditReportVersion\" in audit response");
 			assert.ok(parsedBody.vulnerabilities !== void 0, "Expected \"vulnerabilities\" in audit response");
-		} else assert.ok(parsedBody !== void 0, "Expected audit JSON response");
+		}
 	}
 }
 var auditTest = {

package/build/esm/tests/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","names":[],"sources":["../../../src/tests/audit.ts"],"sourcesContent":["import assert from 'assert';\n\nimport { TestContext, TestDefinition } from '../types';\n\nasync function testAudit(ctx: TestContext): Promise<void> {\n  const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      { jquery: '3.6.1' }\n    );\n\n    // install is required to create package lock file\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'audit',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    const parsedBody = JSON.parse(resp.stdout);\n\n    if (ctx.adapter.type === 'npm') {\n      assert.ok(parsedBody.metadata !== undefined, 'Expected \"metadata\" in audit response');\n      assert.ok(\n        parsedBody.auditReportVersion !== undefined,\n        'Expected \"auditReportVersion\" in audit response'\n      );\n      assert.ok(\n        parsedBody.vulnerabilities !== undefined,\n        'Expected \"vulnerabilities\" in audit response'\n      );\n    } else {\n      // pnpm audit --json returns advisories-based format\n      assert.ok(parsedBody !== undefined, 'Expected audit JSON response');\n    }\n  }\n}\n\nexport const auditTest: TestDefinition = {\n  name: 'audit',\n  requires: ['audit'],\n  run: testAudit,\n};\n"],"mappings":";;AAIA,eAAe,UAAU,KAAiC;CACxD,MAAM,WAAW,CAAC,mBAAmB,IAAI,SAAS,oBAAoB,IAAI,QAAQ;AAElF,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,QAAQ,SAAS,CACpB;AAGD,QAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAED,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;EAED,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAE1C,MAAI,IAAI,QAAQ,SAAS,OAAO;AAC9B,UAAO,GAAG,WAAW,aAAa,KAAA,GAAW,0CAAwC;AACrF,UAAO,GACL,WAAW,uBAAuB,KAAA,GAClC,oDACD;AACD,UAAO,GACL,WAAW,oBAAoB,KAAA,GAC/B,iDACD;QAGD,QAAO,GAAG,eAAe,KAAA,GAAW,+BAA+B;;;AAKzE,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,QAAQ;CACnB,KAAK;CACN"}
+{"version":3,"file":"audit.js","names":[],"sources":["../../../src/tests/audit.ts"],"sourcesContent":["import assert from 'assert';\nimport buildDebug from 'debug';\n\nimport { TestContext, TestDefinition } from '../types';\n\nconst debug = buildDebug('verdaccio:e2e-cli:test:audit');\n\nasync function testAudit(ctx: TestContext): Promise<void> {\n  // Audit is only reliable with npm and bun — pnpm/yarn audit output varies too much\n  if (ctx.adapter.type !== 'npm' && ctx.adapter.type !== 'bun') {\n    debug('skipping audit test for %s (npm/bun only)', ctx.adapter.type);\n    return;\n  }\n\n  const packages = [`verdaccio-audit-${ctx.runId}`, `@verdaccio/audit-${ctx.runId}`];\n\n  for (const pkgName of packages) {\n    const { tempFolder } = await ctx.adapter.prepareProject(\n      pkgName,\n      '1.0.0',\n      ctx.registryUrl,\n      ctx.port,\n      ctx.token,\n      { jquery: '3.6.1' }\n    );\n\n    // install is required to create package lock file\n    await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'install',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    // npm audit exits with code 1 both when vulnerabilities are found AND when\n    // the endpoint is unavailable. We need to distinguish between the two.\n    // Probe the audit endpoint first to avoid false failures on registries\n    // that don't support it (e.g. verdaccio next-7+).\n    try {\n      const probe = await fetch(`${ctx.registryUrl}/-/npm/v1/security/audits/quick`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: '{}',\n      });\n      if (probe.status === 404) {\n        debug('audit endpoint not supported by this registry (404), skipping');\n        return;\n      }\n    } catch {\n      debug('audit endpoint probe failed, skipping');\n      return;\n    }\n\n    const resp = await ctx.adapter.exec(\n      { cwd: tempFolder },\n      'audit',\n      '--json',\n      ...ctx.adapter.registryArg(ctx.registryUrl)\n    );\n\n    if (ctx.adapter.type === 'bun') {\n      // bun audit output may differ — exit code 0 is sufficient for basic validation\n      assert.ok(resp.stdout.length > 0 || resp.stderr.length > 0, 'Expected audit output');\n    } else {\n      const parsedBody = JSON.parse(resp.stdout);\n      assert.ok(parsedBody.auditReportVersion !== undefined, 'Expected \"auditReportVersion\" in audit response');\n      assert.ok(parsedBody.vulnerabilities !== undefined, 'Expected \"vulnerabilities\" in audit response');\n    }\n  }\n}\n\nexport const auditTest: TestDefinition = {\n  name: 'audit',\n  requires: ['audit'],\n  run: testAudit,\n};\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,+BAA+B;AAExD,eAAe,UAAU,KAAiC;AAExD,KAAI,IAAI,QAAQ,SAAS,SAAS,IAAI,QAAQ,SAAS,OAAO;AAC5D,QAAM,6CAA6C,IAAI,QAAQ,KAAK;AACpE;;CAGF,MAAM,WAAW,CAAC,mBAAmB,IAAI,SAAS,oBAAoB,IAAI,QAAQ;AAElF,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,EAAE,eAAe,MAAM,IAAI,QAAQ,eACvC,SACA,SACA,IAAI,aACJ,IAAI,MACJ,IAAI,OACJ,EAAE,QAAQ,SAAS,CACpB;AAGD,QAAM,IAAI,QAAQ,KAChB,EAAE,KAAK,YAAY,EACnB,WACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAMD,MAAI;AAMF,QALc,MAAM,MAAM,GAAG,IAAI,YAAY,kCAAkC;IAC7E,QAAQ;IACR,SAAS,EAAE,gBAAgB,oBAAoB;IAC/C,MAAM;IACP,CAAC,EACQ,WAAW,KAAK;AACxB,UAAM,gEAAgE;AACtE;;UAEI;AACN,SAAM,wCAAwC;AAC9C;;EAGF,MAAM,OAAO,MAAM,IAAI,QAAQ,KAC7B,EAAE,KAAK,YAAY,EACnB,SACA,UACA,GAAG,IAAI,QAAQ,YAAY,IAAI,YAAY,CAC5C;AAED,MAAI,IAAI,QAAQ,SAAS,MAEvB,QAAO,GAAG,KAAK,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG,wBAAwB;OAC/E;GACL,MAAM,aAAa,KAAK,MAAM,KAAK,OAAO;AAC1C,UAAO,GAAG,WAAW,uBAAuB,KAAA,GAAW,oDAAkD;AACzG,UAAO,GAAG,WAAW,oBAAoB,KAAA,GAAW,iDAA+C;;;;AAKzG,IAAa,YAA4B;CACvC,MAAM;CACN,UAAU,CAAC,QAAQ;CACnB,KAAK;CACN"}