@verdaccio/package-filter 13.0.3 → 13.0.5

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/config/parser.ts","../src/filtering/types.ts","../src/filtering/matcher.ts","../src/filtering/packageVersion.ts","../src/filtering/publishDate.ts","../src/utils/jsonUtils.ts","../src/utils/manifestUtils.ts","../src/packageFilter.ts","../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n","import type { PackageScopeLevel, ParsedConfigRule } from '../config/types';\n\nexport enum MatchType {\n  SCOPE = 'scope',\n  PACKAGE = 'package',\n  VERSIONS = 'versions',\n}\n\nexport interface MatchResultVersions {\n  versions: string[];\n}\n\nexport interface MatchScopeResult extends MatchResultVersions {\n  type: MatchType.SCOPE;\n  rule: PackageScopeLevel;\n  scope: string;\n}\n\nexport interface MatchPackageResult extends MatchResultVersions {\n  type: MatchType.PACKAGE;\n  rule: PackageScopeLevel;\n  package: string;\n}\n\nexport interface MatchVersionsResult extends MatchResultVersions {\n  type: MatchType.VERSIONS;\n  rule: ParsedConfigRule;\n}\n\nexport type MatchResult = MatchScopeResult | MatchPackageResult | MatchVersionsResult;\n","import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n","import buildDebug from 'debug';\nimport { Range, satisfies } from 'semver';\n\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport type { ParsedConfigRule, ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all blocked package versions.\n * If package or scope is blocked, then block all versions.\n *\n * TODO: consider adding a `prerelease` filter option to block/allow\n * prerelease versions independently. Currently prereleases are matched by\n * semver ranges with `includePrerelease: true`, but there's no dedicated toggle.\n *\n * Example config (not yet implemented):\n *   block:\n *     - package: 'foo'\n *       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0\n *     - package: 'bar'\n *       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1\n *\n * Today the only workaround is using awkward ranges like \">=1.0.0-0 <1.0.0\".\n */\nexport function filterBlockedVersions(\n  manifest: Manifest,\n  blockRules: Map<string, ParsedRule>,\n  allowRules: Map<string, ParsedRule>,\n  logger: Logger\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    logger.trace({ name: manifest.name }, 'package @{name} is allow-listed, skipping block rules');\n    return manifest;\n  }\n\n  const blockMatch = matchRules(manifest, blockRules);\n  if (!blockMatch) {\n    // No rule is blocking this package\n    return manifest;\n  }\n\n  logger.trace(\n    { name: manifest.name, type: blockMatch.type },\n    'block rule matched for @{name} (type: @{type})'\n  );\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  let blockRule: ParsedConfigRule = {\n    versions: [new Range('*')],\n    strategy: 'block',\n  };\n\n  if (blockMatch.type === MatchType.SCOPE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (scope %s blocked)', manifest.name, blockMatch.scope);\n      logger.trace(\n        { name: manifest.name, scope: blockMatch.scope },\n        'all versions of @{name} blocked (scope @{scope})'\n      );\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All packages in scope ${blockMatch.scope} are blocked by rule`,\n      };\n    }\n  } else if (blockMatch.type === MatchType.PACKAGE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (package blocked)', manifest.name);\n      logger.trace({ name: manifest.name }, 'all versions of @{name} blocked (package rule)');\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All package versions are blocked by rule`,\n      };\n    }\n  } else {\n    blockRule = { ...blockRule, ...blockMatch.rule };\n  }\n\n  const versionRanges = blockRule.versions;\n\n  if (blockRule.strategy === 'block') {\n    const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));\n    for (const version of blockedVersions) {\n      delete manifest.versions[version];\n    }\n\n    if (blockedVersions.length > 0) {\n      debug(\n        'blocked %d versions of %s: %o',\n        blockedVersions.length,\n        manifest.name,\n        blockedVersions\n      );\n      logger.trace(\n        {\n          name: manifest.name,\n          count: blockedVersions.length,\n          versions: blockedVersions.join(', '),\n        },\n        '@{count} versions of @{name} blocked: @{versions}'\n      );\n      // Add debug info for devs\n      manifest.readme =\n        (manifest.readme || '') +\n        `\\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map(\n          (range) => range.raw\n        )}`;\n    }\n\n    return manifest;\n  }\n\n  // Process block rule strategy 'replace'.\n  // We assume that the order of versions is already sorted.\n  const nonBlockedVersions = { ...manifest.versions };\n  const newVersionsMapping: Record<string, string | null> = {};\n\n  versionRanges.forEach((versionRange) => {\n    const allVersions = Object.keys(nonBlockedVersions);\n\n    let lastNonBlockedVersion: string | null = null;\n\n    allVersions.forEach((version) => {\n      if (\n        !whitelistedVersions.includes(version) &&\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        delete nonBlockedVersions[version];\n        newVersionsMapping[version] = lastNonBlockedVersion;\n      } else {\n        lastNonBlockedVersion = version;\n      }\n    });\n  });\n\n  debug('replacing versions for %s: %o', manifest.name, newVersionsMapping);\n\n  const removedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace === null\n  ) as [string, null][];\n  const replacedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace !== null\n  ) as [string, string][];\n\n  removedVersions.forEach(([version]) => {\n    debug('no version to replace %s in %s', version, manifest.name);\n    logger.trace(\n      { name: manifest.name, version },\n      'version @{version} of @{name} removed (no replacement available)'\n    );\n    delete manifest.versions[version];\n  });\n\n  replacedVersions.forEach(([version, replaceVersion]) => {\n    logger.trace(\n      { name: manifest.name, version, replaceVersion },\n      'version @{version} of @{name} replaced with @{replaceVersion}'\n    );\n    manifest.versions[version] = {\n      ...manifest.versions[replaceVersion],\n      version,\n    };\n  });\n\n  if (removedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}):` +\n      ` ${removedVersions.map((a) => a[0])}`;\n  }\n\n  if (replacedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package are replaced by other(${replacedVersions.length}):` +\n      ` ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;\n  }\n\n  return manifest;\n}\n","import buildDebug from 'debug';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all package versions that were published after dateThreshold.\n */\nexport function filterVersionsByPublishDate(\n  manifest: Manifest,\n  dateThreshold: Date,\n  allowRules: Map<string, ParsedRule>\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    return manifest;\n  }\n\n  const { versions, time, name } = manifest;\n\n  if (!time) {\n    throw new TypeError(`Time of publication was not provided for package ${name}`);\n  }\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  const clearVersions: string[] = [];\n\n  Object.keys(versions).forEach((version) => {\n    if (whitelistedVersions.includes(version)) {\n      return;\n    }\n\n    const publishTime = time[version];\n\n    if (!publishTime) {\n      throw new TypeError(\n        `Time of publication was not provided for package ${name}, version ${version}`\n      );\n    }\n\n    if (new Date(publishTime) > dateThreshold) {\n      // clear untrusted version\n      clearVersions.push(version);\n    }\n  });\n\n  // delete version from versions\n  clearVersions.forEach((version) => {\n    delete manifest.versions[version];\n  });\n\n  if (clearVersions.length > 0) {\n    debug(\n      'date filter removed %d versions from %s: %o',\n      clearVersions.length,\n      manifest.name,\n      clearVersions\n    );\n  }\n\n  return manifest;\n}\n","import { Range } from 'semver';\n\nexport function jsonLogReplacer(_key: string, value: unknown) {\n  if (value instanceof Map) {\n    return Object.fromEntries(value);\n  }\n\n  if (value instanceof Range) {\n    return value.range;\n  }\n\n  return value;\n}\n","import buildDebug from 'debug';\nimport semver from 'semver';\n\nimport { DIST_TAGS } from '@verdaccio/core';\nimport type { Manifest } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:manifest');\n\n/**\n * Delete `dist-tags` entries corresponding to missing versions.\n */\nexport function cleanupTags(manifest: Manifest): void {\n  const distTags = manifest[DIST_TAGS];\n  Object.entries(distTags).forEach(([tag, tagVersion]) => {\n    if (!manifest.versions[tagVersion]) {\n      debug('removing orphaned dist-tag %s -> %s from %s', tag, tagVersion, manifest.name);\n      delete distTags[tag];\n    }\n  });\n}\n\n/**\n * Delete `time` entries corresponding to missing versions.\n */\nexport function cleanupTime(manifest: Manifest): void {\n  const time = manifest.time;\n  if (!time) {\n    return;\n  }\n\n  Object.keys(time).forEach((version) => {\n    if (!manifest.versions[version]) {\n      delete time[version];\n    }\n  });\n}\n\n/**\n * Get the latest version from a list of versions,\n * ordered by time of their publication stored in the manifest.\n */\nexport function getLatestVersion(manifest: Manifest, versions: string[]): string | undefined {\n  const time = manifest.time;\n  if (!time) {\n    // No time information, it's the best we can do\n    const sortedVersions = versions.sort(semver.rcompare);\n    return sortedVersions[0];\n  }\n\n  const timedVersions = versions\n    .map((v) => ({\n      version: v,\n      time: time[v],\n    }))\n    .filter((v) => v.time);\n\n  if (timedVersions.length === 0) {\n    return undefined;\n  }\n\n  const timeOrderedVersions = timedVersions.sort(\n    (a, b) => new Date(b.time).getTime() - new Date(a.time).getTime()\n  );\n  return timeOrderedVersions[0].version;\n}\n\n/**\n * Set the latest tag if dist-tags/latest is missing.\n * The last stable version available is used when possible.\n * Otherwise, it uses the latest version not found in dist-tags.\n */\nexport function setupLatestTag(manifest: Manifest): void {\n  const distTags = manifest[DIST_TAGS];\n  if (distTags.latest) {\n    // Tag 'latest' must only be fixed when latest version was blocked\n    return;\n  }\n\n  const versions = Object.keys(manifest.versions);\n  if (versions.length === 0) {\n    return;\n  }\n\n  const distTagsVersions = Object.values(distTags);\n  const untaggedVersions = versions.filter((v) => semver.valid(v) && !distTagsVersions.includes(v));\n  if (untaggedVersions.length === 0) {\n    return;\n  }\n\n  // Try stable versions first (no \"-next\" or \"-beta\", etc.)\n  const stableVersions = untaggedVersions.filter((v) => !semver.prerelease(v));\n  const latestStableVersion = getLatestVersion(manifest, stableVersions);\n  if (latestStableVersion) {\n    debug('reassigned latest tag to stable version %s for %s', latestStableVersion, manifest.name);\n    distTags.latest = latestStableVersion;\n    return;\n  }\n\n  // Fallback to all untagged versions\n  const latestVersion = getLatestVersion(manifest, untaggedVersions);\n  if (!latestVersion) {\n    return;\n  }\n\n  debug('reassigned latest tag to pre-release version %s for %s', latestVersion, manifest.name);\n  distTags.latest = latestVersion;\n}\n\n/**\n * Set the created and modified times.\n */\nexport function setupCreatedAndModified(manifest: Manifest): void {\n  const time = manifest.time;\n  if (!time) {\n    return;\n  }\n\n  const times = Object.values(time);\n  if (times.length === 0) {\n    return;\n  }\n\n  // Single O(n) pass for the earliest/latest publication time instead of an\n  // O(n log n) sort — the result is identical but cheaper on large manifests.\n  let earliest = times[0];\n  let latest = times[0];\n  let earliestMs = new Date(earliest).getTime();\n  let latestMs = earliestMs;\n  for (let i = 1; i < times.length; i++) {\n    const currentMs = new Date(times[i]).getTime();\n    if (currentMs < earliestMs) {\n      earliestMs = currentMs;\n      earliest = times[i];\n    }\n    if (currentMs > latestMs) {\n      latestMs = currentMs;\n      latest = times[i];\n    }\n  }\n  time.created = earliest;\n  time.modified = latest;\n}\n\n/**\n * Remove `_distfiles` entries which are not used by any version.\n */\nexport function cleanupDistFiles(manifest: Manifest): void {\n  const distFiles = manifest._distfiles;\n  // Build a Set of active tarball URLs in one pass — O(n) instead of O(n²)\n  const activeTarballs = new Set(\n    Object.values(manifest.versions)\n      .map((v) => v.dist?.tarball)\n      .filter((tarball): tarball is string => typeof tarball === 'string')\n  );\n  Object.keys(distFiles).forEach((key) => {\n    if (!activeTarballs.has(distFiles[key].url)) {\n      delete distFiles[key];\n    }\n  });\n}\n\n/**\n * Creates a copy of a manifest suitable for safe, localized mutation.\n *\n * The returned object is shallow-cloned, except for `versions`, `dist-tags`,\n * `time`, and `_distfiles`, which are cloned as independent maps so they can be\n * filtered or modified without affecting the original manifest.\n */\nexport function getManifestClone(manifest: Readonly<Manifest>): Manifest {\n  return {\n    ...manifest,\n    versions: {\n      ...manifest.versions,\n    },\n    [DIST_TAGS]: {\n      ...manifest[DIST_TAGS],\n    },\n    time: {\n      ...manifest.time,\n    },\n    _distfiles: {\n      ...manifest._distfiles,\n    },\n  };\n}\n","import buildDebug from 'debug';\n\nimport { pluginUtils } from '@verdaccio/core';\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport { parseConfig } from './config/parser';\nimport type { ParsedConfig, PluginConfig } from './config/types';\nimport { filterBlockedVersions } from './filtering/packageVersion';\nimport { filterVersionsByPublishDate } from './filtering/publishDate';\nimport { jsonLogReplacer } from './utils/jsonUtils';\nimport {\n  cleanupDistFiles,\n  cleanupTags,\n  cleanupTime,\n  getManifestClone,\n  setupCreatedAndModified,\n  setupLatestTag,\n} from './utils/manifestUtils';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter');\n\nexport class PackageFilterPlugin\n  extends pluginUtils.Plugin<PluginConfig>\n  implements pluginUtils.ManifestFilter<PluginConfig>\n{\n  public readonly config: PluginConfig;\n  private readonly parsedConfig: ParsedConfig;\n  protected readonly logger: Logger;\n\n  public constructor(config: PluginConfig, options: pluginUtils.PluginOptions) {\n    super(config, options);\n    this.config = config ?? {};\n    this.logger = options.logger;\n    this.parsedConfig = parseConfig(this.config);\n\n    debug(\n      'plugin loaded: block rules: %d, allow rules: %d',\n      this.parsedConfig.blockRules.size,\n      this.parsedConfig.allowRules.size\n    );\n    this.logger.debug(\n      { config: JSON.stringify(this.parsedConfig, jsonLogReplacer) },\n      'package-filter loaded with config: @{config}'\n    );\n    this.logger.trace(\n      {\n        blockRules: this.parsedConfig.blockRules.size,\n        allowRules: this.parsedConfig.allowRules.size,\n      },\n      'package-filter plugin initialized: @{blockRules} block rules, @{allowRules} allow rules'\n    );\n    if (this.parsedConfig.dateThreshold) {\n      debug('date threshold: %s', this.parsedConfig.dateThreshold.toISOString());\n      this.logger.trace(\n        { dateThreshold: this.parsedConfig.dateThreshold.toISOString() },\n        'package-filter date threshold: @{dateThreshold}'\n      );\n    }\n    if (this.parsedConfig.minAgeMs) {\n      const minAgeDays = this.parsedConfig.minAgeMs / (24 * 60 * 60 * 1000);\n      debug('min age: %d days', minAgeDays);\n      this.logger.trace({ minAgeDays }, 'package-filter min age: @{minAgeDays} days');\n    }\n  }\n\n  public async filter_metadata(manifest: Readonly<Manifest>): Promise<Manifest> {\n    const { dateThreshold, minAgeMs, blockRules, allowRules } = this.parsedConfig;\n    const versionCount = Object.keys(manifest.versions ?? {}).length;\n    debug('filtering manifest for %s (%d versions)', manifest.name, versionCount);\n    this.logger.trace(\n      { name: manifest.name, versionCount },\n      'package-filter processing @{name} (@{versionCount} versions)'\n    );\n\n    let earliestDateThreshold: Date | null = null;\n    if (minAgeMs) {\n      earliestDateThreshold = new Date(Date.now() - minAgeMs);\n    }\n\n    if (dateThreshold && (!earliestDateThreshold || dateThreshold < earliestDateThreshold)) {\n      earliestDateThreshold = dateThreshold;\n    }\n\n    // Fast path: when neither block rules nor a date threshold are configured there\n    // is nothing this filter can change. Returning the manifest untouched avoids the\n    // clone and the cleanup passes below. This matters most for `npm search`, which\n    // invokes filter_metadata once per matched package (see issue #5837).\n    if (blockRules.size === 0 && !earliestDateThreshold) {\n      debug('no filters configured, returning manifest untouched for %s', manifest.name);\n      return manifest as Manifest;\n    }\n\n    let newManifest = getManifestClone(manifest);\n    if (blockRules.size > 0) {\n      newManifest = filterBlockedVersions(newManifest, blockRules, allowRules, this.logger);\n    }\n\n    if (earliestDateThreshold) {\n      debug(\n        'applying date filter for %s, threshold: %s',\n        manifest.name,\n        earliestDateThreshold.toISOString()\n      );\n      this.logger.trace(\n        { name: manifest.name, threshold: earliestDateThreshold.toISOString() },\n        'applying date filter for @{name}, cutoff: @{threshold}'\n      );\n      newManifest = filterVersionsByPublishDate(newManifest, earliestDateThreshold, allowRules);\n    }\n\n    const filteredCount = Object.keys(newManifest.versions).length;\n    const removedCount = versionCount - filteredCount;\n    // The cleanup passes only repair inconsistencies introduced by filtering:\n    // orphaned dist-tags/time/_distfiles entries and a `latest` tag pointing at a\n    // removed version. When the filters left the manifest untouched (no version\n    // removed or replaced) it is already consistent, so the passes are skipped.\n    // `readme` changing is the signal that the (count-preserving) replace strategy\n    // rewrote version content and the cleanup still needs to run.\n    const wasModified = removedCount > 0 || newManifest.readme !== manifest.readme;\n    if (wasModified) {\n      cleanupTags(newManifest);\n      setupLatestTag(newManifest);\n      cleanupTime(newManifest);\n      setupCreatedAndModified(newManifest);\n      cleanupDistFiles(newManifest);\n    }\n\n    if (removedCount > 0) {\n      debug(\n        'filtered %s: %d -> %d versions (%d removed)',\n        manifest.name,\n        versionCount,\n        filteredCount,\n        removedCount\n      );\n      this.logger.trace(\n        { name: manifest.name, before: versionCount, after: filteredCount, removed: removedCount },\n        'package-filter @{name}: @{before} -> @{after} versions (@{removed} removed)'\n      );\n    } else {\n      debug('no versions filtered for %s', manifest.name);\n    }\n\n    return newManifest;\n  }\n}\n","import { PackageFilterPlugin } from './packageFilter';\n\nexport { PackageFilterPlugin };\nexport default PackageFilterPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAM,WAAA,GAAA,MAAA,SAAmB,yCAAyC;AAElE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,KAAyB;AAC7C,MAAK,MAAM,QAAQ,aAAa;AAC9B,MAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;AACrD,OAAI,CAAC,KAAK,MAAM,WAAW,IAAI,CAC7B,OAAM,IAAI,UAAU,yCAAyC,KAAK,QAAQ;AAG5E,WAAQ,IAAI,KAAK,OAAO,QAAQ;AAChC;;AAGF,MAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;AAC9C,WAAQ,IAAI,KAAK,SAAS,UAAU;AACpC;;AAGF,MAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,QAAQ,IAAI,EAAE,UAAU,EAAE,EAAE;AAEpE,OAAI,OAAO,mBAAmB,SAC5B,OAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,iBACxE;GAIH,MAAM,QAAQ,IAAI,OAAA,MAAM,KAAK,SAAS;AACtC,WAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,MAAM;IAC7C,UAAU,KAAK,YAAY;IAC5B,CAAC;AAEF;;AAGF,QAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,EAAE,GAAG;;AAG9E,QAAO;;AAGT,SAAgB,YAAY,QAAoC;AAC9D,SAAM,sBAAsB,OAAO;CACnC,MAAM,WAAW,iBAAiB,OAAO,SAAS,EAAE,CAAC;CACrD,MAAM,WAAW,iBAAiB,OAAO,SAAS,EAAE,CAAC;AACrD,SAAM,yCAAyC,SAAS,MAAM,SAAS,KAAK;CAC5E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,cAAc,GAAG;AAC9E,KAAI,iBAAiB,MAAM,cAAc,SAAS,CAAC,CACjD,OAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,iCAAiC;CAG5F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,WAAW,GAAG;CACnE,IAAI,WAA0B;AAC9B,KAAI,eAAe,MAAM;AACvB,MAAI,MAAM,WAAW,IAAI,aAAa,EACpC,OAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,8BAA8B;AAGxF,aAAW,aAAa,KAAK,KAAK,KAAK;;AAGzC,QAAO;EACL;EACA;EACA,YAAY;EACZ,YAAY;EACb;;;;ACxEH,IAAY,YAAL,yBAAA,WAAA;AACL,WAAA,WAAA;AACA,WAAA,aAAA;AACA,WAAA,cAAA;;KACD;;;ACGD,IAAM,WAAA,GAAA,MAAA,SAAmB,yCAAyC;;;;AAKlE,SAAS,UAAU,MAAgD;AACjE,KAAI,CAAC,KACH,QAAO,EAAE,MAAM,IAAI;CAGrB,MAAM,QAAQ,KAAK,MAAM,IAAI;AAE7B,KAAI,MAAM,SAAS,EACjB,QAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;EACb;KAED,QAAO,EACL,MAAM,MAAM,IACb;;;;;;AAQL,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,KAAK;AAC1C,KAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,MAAM;AAC7B,MAAI,SAAS,SAAS;AACpB,WAAM,uCAAuC,SAAS,MAAM,MAAM;AAClE,UAAO;IACL,MAAM,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,SAAS;IACzC;;;CAIL,MAAM,OAAO,MAAM,IAAI,SAAS,KAAK;AACrC,KAAI,CAAC,KAEH;AAGF,KAAI,SAAS,WAAW;AACtB,UAAM,qBAAqB,SAAS,KAAK;AACzC,SAAO;GACL,MAAM,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,SAAS;GACzC;;AAGH,KAAI,SAAS,QACX,OAAM,IAAI,MAAM,+DAA6D;CAG/E,MAAM,gBAAgB,KAAK;AAC3B,KAAI,cAAc,WAAW,EAE3B;CAGF,MAAM,kBAA4B,EAAE;AACpC,QAAO,KAAK,SAAS,SAAS,CAAC,SAAS,YAAY;AAClD,gBAAc,SAAS,iBAAiB;AACtC,QAAA,GAAA,OAAA,WACY,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;IACR,CAAC,CAEF,iBAAgB,KAAK,QAAQ;IAE/B;GACF;AAEF,KAAI,gBAAgB,SAAS,EAC3B,SACE,6CACA,SAAS,MACT,gBAAgB,QAChB,gBACD;AAGH,QAAO;EACL,MAAM,UAAU;EAChB;EACA,UAAU;EACX;;;;ACnGH,IAAM,WAAA,GAAA,MAAA,SAAmB,yCAAyC;;;;;;;;;;;;;;;;;;AAmBlE,SAAgB,sBACd,UACA,YACA,YACA,QACU;CACV,MAAM,aAAa,WAAW,UAAU,WAAW;AACnD,KACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,UACtE;AAEA,SAAO,MAAM,EAAE,MAAM,SAAS,MAAM,EAAE,wDAAwD;AAC9F,SAAO;;CAGT,MAAM,aAAa,WAAW,UAAU,WAAW;AACnD,KAAI,CAAC,WAEH,QAAO;AAGT,QAAO,MACL;EAAE,MAAM,SAAS;EAAM,MAAM,WAAW;EAAM,EAC9C,iDACD;CAED,MAAM,sBAAgC,aAAa,WAAW,WAAW,EAAE;CAC3E,IAAI,YAA8B;EAChC,UAAU,CAAC,IAAI,OAAA,MAAM,IAAI,CAAC;EAC1B,UAAU;EACX;AAED,KAAI,WAAW,SAAS,UAAU;MAC5B,oBAAoB,WAAW,GAAG;AACpC,WAAM,kDAAkD,SAAS,MAAM,WAAW,MAAM;AACxF,UAAO,MACL;IAAE,MAAM,SAAS;IAAM,OAAO,WAAW;IAAO,EAChD,mDACD;AACD,UAAO;IACL,GAAG;IACH,UAAU,EAAE;IACZ,QAAQ,yBAAyB,WAAW,MAAM;IACnD;;YAEM,WAAW,SAAS,UAAU;MACnC,oBAAoB,WAAW,GAAG;AACpC,WAAM,iDAAiD,SAAS,KAAK;AACrE,UAAO,MAAM,EAAE,MAAM,SAAS,MAAM,EAAE,iDAAiD;AACvF,UAAO;IACL,GAAG;IACH,UAAU,EAAE;IACZ,QAAQ;IACT;;OAGH,aAAY;EAAE,GAAG;EAAW,GAAG,WAAW;EAAM;CAGlD,MAAM,gBAAgB,UAAU;AAEhC,KAAI,UAAU,aAAa,SAAS;EAClC,MAAM,kBAAkB,WAAW,SAAS,QAAQ,MAAM,CAAC,oBAAoB,SAAS,EAAE,CAAC;AAC3F,OAAK,MAAM,WAAW,gBACpB,QAAO,SAAS,SAAS;AAG3B,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WACE,iCACA,gBAAgB,QAChB,SAAS,MACT,gBACD;AACD,UAAO,MACL;IACE,MAAM,SAAS;IACf,OAAO,gBAAgB;IACvB,UAAU,gBAAgB,KAAK,KAAK;IACrC,EACD,oDACD;AAED,YAAS,UACN,SAAS,UAAU,MACpB,mBAAmB,gBAAgB,OAAO,qCAAqC,cAAc,KAC1F,UAAU,MAAM,IAClB;;AAGL,SAAO;;CAKT,MAAM,qBAAqB,EAAE,GAAG,SAAS,UAAU;CACnD,MAAM,qBAAoD,EAAE;AAE5D,eAAc,SAAS,iBAAiB;EACtC,MAAM,cAAc,OAAO,KAAK,mBAAmB;EAEnD,IAAI,wBAAuC;AAE3C,cAAY,SAAS,YAAY;AAC/B,OACE,CAAC,oBAAoB,SAAS,QAAQ,KAAA,GAAA,OAAA,WAC5B,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;IACR,CAAC,EACF;AACA,WAAO,mBAAmB;AAC1B,uBAAmB,WAAW;SAE9B,yBAAwB;IAE1B;GACF;AAEF,SAAM,iCAAiC,SAAS,MAAM,mBAAmB;CAEzE,MAAM,kBAAkB,OAAO,QAAQ,mBAAmB,CAAC,QACxD,CAAC,GAAG,aAAa,YAAY,KAC/B;CACD,MAAM,mBAAmB,OAAO,QAAQ,mBAAmB,CAAC,QACzD,CAAC,GAAG,aAAa,YAAY,KAC/B;AAED,iBAAgB,SAAS,CAAC,aAAa;AACrC,UAAM,kCAAkC,SAAS,SAAS,KAAK;AAC/D,SAAO,MACL;GAAE,MAAM,SAAS;GAAM;GAAS,EAChC,mEACD;AACD,SAAO,SAAS,SAAS;GACzB;AAEF,kBAAiB,SAAS,CAAC,SAAS,oBAAoB;AACtD,SAAO,MACL;GAAE,MAAM,SAAS;GAAM;GAAS;GAAgB,EAChD,gEACD;AACD,WAAS,SAAS,WAAW;GAC3B,GAAG,SAAS,SAAS;GACrB;GACD;GACD;AAEF,KAAI,gBAAgB,SAAS,EAC3B,UAAS,UACP,gFAAgF,gBAAgB,OAAO,KACnG,gBAAgB,KAAK,MAAM,EAAE,GAAG;AAGxC,KAAI,iBAAiB,SAAS,EAC5B,UAAS,UACP,oDAAoD,iBAAiB,OAAO,KACxE,iBAAiB,KAAK,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK;AAGzD,QAAO;;;;ACrLT,IAAM,WAAA,GAAA,MAAA,SAAmB,yCAAyC;;;;AAKlE,SAAgB,4BACd,UACA,eACA,YACU;CACV,MAAM,aAAa,WAAW,UAAU,WAAW;AACnD,KACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,SAGtE,QAAO;CAGT,MAAM,EAAE,UAAU,MAAM,SAAS;AAEjC,KAAI,CAAC,KACH,OAAM,IAAI,UAAU,oDAAoD,OAAO;CAGjF,MAAM,sBAAgC,aAAa,WAAW,WAAW,EAAE;CAC3E,MAAM,gBAA0B,EAAE;AAElC,QAAO,KAAK,SAAS,CAAC,SAAS,YAAY;AACzC,MAAI,oBAAoB,SAAS,QAAQ,CACvC;EAGF,MAAM,cAAc,KAAK;AAEzB,MAAI,CAAC,YACH,OAAM,IAAI,UACR,oDAAoD,KAAK,YAAY,UACtE;AAGH,MAAI,IAAI,KAAK,YAAY,GAAG,cAE1B,eAAc,KAAK,QAAQ;GAE7B;AAGF,eAAc,SAAS,YAAY;AACjC,SAAO,SAAS,SAAS;GACzB;AAEF,KAAI,cAAc,SAAS,EACzB,SACE,+CACA,cAAc,QACd,SAAS,MACT,cACD;AAGH,QAAO;;;;ACnET,SAAgB,gBAAgB,MAAc,OAAgB;AAC5D,KAAI,iBAAiB,IACnB,QAAO,OAAO,YAAY,MAAM;AAGlC,KAAI,iBAAiB,OAAA,MACnB,QAAO,MAAM;AAGf,QAAO;;;;ACLT,IAAM,WAAA,GAAA,MAAA,SAAmB,2CAA2C;;;;AAKpE,SAAgB,YAAY,UAA0B;CACpD,MAAM,WAAW,SAAS,gBAAA;AAC1B,QAAO,QAAQ,SAAS,CAAC,SAAS,CAAC,KAAK,gBAAgB;AACtD,MAAI,CAAC,SAAS,SAAS,aAAa;AAClC,WAAM,+CAA+C,KAAK,YAAY,SAAS,KAAK;AACpF,UAAO,SAAS;;GAElB;;;;;AAMJ,SAAgB,YAAY,UAA0B;CACpD,MAAM,OAAO,SAAS;AACtB,KAAI,CAAC,KACH;AAGF,QAAO,KAAK,KAAK,CAAC,SAAS,YAAY;AACrC,MAAI,CAAC,SAAS,SAAS,SACrB,QAAO,KAAK;GAEd;;;;;;AAOJ,SAAgB,iBAAiB,UAAoB,UAAwC;CAC3F,MAAM,OAAO,SAAS;AACtB,KAAI,CAAC,KAGH,QADuB,SAAS,KAAK,OAAA,QAAO,SAAS,CAC/B;CAGxB,MAAM,gBAAgB,SACnB,KAAK,OAAO;EACX,SAAS;EACT,MAAM,KAAK;EACZ,EAAE,CACF,QAAQ,MAAM,EAAE,KAAK;AAExB,KAAI,cAAc,WAAW,EAC3B;AAMF,QAH4B,cAAc,MACvC,GAAG,MAAM,IAAI,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,KAAK,CAAC,SAAS,CAClE,CAC0B,GAAG;;;;;;;AAQhC,SAAgB,eAAe,UAA0B;CACvD,MAAM,WAAW,SAAS,gBAAA;AAC1B,KAAI,SAAS,OAEX;CAGF,MAAM,WAAW,OAAO,KAAK,SAAS,SAAS;AAC/C,KAAI,SAAS,WAAW,EACtB;CAGF,MAAM,mBAAmB,OAAO,OAAO,SAAS;CAChD,MAAM,mBAAmB,SAAS,QAAQ,MAAM,OAAA,QAAO,MAAM,EAAE,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC;AACjG,KAAI,iBAAiB,WAAW,EAC9B;CAKF,MAAM,sBAAsB,iBAAiB,UADtB,iBAAiB,QAAQ,MAAM,CAAC,OAAA,QAAO,WAAW,EAAE,CAAC,CACN;AACtE,KAAI,qBAAqB;AACvB,UAAM,qDAAqD,qBAAqB,SAAS,KAAK;AAC9F,WAAS,SAAS;AAClB;;CAIF,MAAM,gBAAgB,iBAAiB,UAAU,iBAAiB;AAClE,KAAI,CAAC,cACH;AAGF,SAAM,0DAA0D,eAAe,SAAS,KAAK;AAC7F,UAAS,SAAS;;;;;AAMpB,SAAgB,wBAAwB,UAA0B;CAChE,MAAM,OAAO,SAAS;AACtB,KAAI,CAAC,KACH;CAGF,MAAM,QAAQ,OAAO,OAAO,KAAK;AACjC,KAAI,MAAM,WAAW,EACnB;CAKF,IAAI,WAAW,MAAM;CACrB,IAAI,SAAS,MAAM;CACnB,IAAI,aAAa,IAAI,KAAK,SAAS,CAAC,SAAS;CAC7C,IAAI,WAAW;AACf,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,YAAY,IAAI,KAAK,MAAM,GAAG,CAAC,SAAS;AAC9C,MAAI,YAAY,YAAY;AAC1B,gBAAa;AACb,cAAW,MAAM;;AAEnB,MAAI,YAAY,UAAU;AACxB,cAAW;AACX,YAAS,MAAM;;;AAGnB,MAAK,UAAU;AACf,MAAK,WAAW;;;;;AAMlB,SAAgB,iBAAiB,UAA0B;CACzD,MAAM,YAAY,SAAS;CAE3B,MAAM,iBAAiB,IAAI,IACzB,OAAO,OAAO,SAAS,SAAS,CAC7B,KAAK,MAAM,EAAE,MAAM,QAAQ,CAC3B,QAAQ,YAA+B,OAAO,YAAY,SAAS,CACvE;AACD,QAAO,KAAK,UAAU,CAAC,SAAS,QAAQ;AACtC,MAAI,CAAC,eAAe,IAAI,UAAU,KAAK,IAAI,CACzC,QAAO,UAAU;GAEnB;;;;;;;;;AAUJ,SAAgB,iBAAiB,UAAwC;AACvE,QAAO;EACL,GAAG;EACH,UAAU,EACR,GAAG,SAAS,UACb;GACA,gBAAA,YAAY,EACX,GAAG,SAAS,gBAAA,YACb;EACD,MAAM,EACJ,GAAG,SAAS,MACb;EACD,YAAY,EACV,GAAG,SAAS,YACb;EACF;;;;ACpKH,IAAM,WAAA,GAAA,MAAA,SAAmB,kCAAkC;AAE3D,IAAa,sBAAb,cACU,gBAAA,YAAY,OAEtB;CACE;CACA;CACA;CAEA,YAAmB,QAAsB,SAAoC;AAC3E,QAAM,QAAQ,QAAQ;AACtB,OAAK,SAAS,UAAU,EAAE;AAC1B,OAAK,SAAS,QAAQ;AACtB,OAAK,eAAe,YAAY,KAAK,OAAO;AAE5C,UACE,mDACA,KAAK,aAAa,WAAW,MAC7B,KAAK,aAAa,WAAW,KAC9B;AACD,OAAK,OAAO,MACV,EAAE,QAAQ,KAAK,UAAU,KAAK,cAAc,gBAAgB,EAAE,EAC9D,+CACD;AACD,OAAK,OAAO,MACV;GACE,YAAY,KAAK,aAAa,WAAW;GACzC,YAAY,KAAK,aAAa,WAAW;GAC1C,EACD,0FACD;AACD,MAAI,KAAK,aAAa,eAAe;AACnC,WAAM,sBAAsB,KAAK,aAAa,cAAc,aAAa,CAAC;AAC1E,QAAK,OAAO,MACV,EAAE,eAAe,KAAK,aAAa,cAAc,aAAa,EAAE,EAChE,kDACD;;AAEH,MAAI,KAAK,aAAa,UAAU;GAC9B,MAAM,aAAa,KAAK,aAAa,YAAY,OAAU,KAAK;AAChE,WAAM,oBAAoB,WAAW;AACrC,QAAK,OAAO,MAAM,EAAE,YAAY,EAAE,6CAA6C;;;CAInF,MAAa,gBAAgB,UAAiD;EAC5E,MAAM,EAAE,eAAe,UAAU,YAAY,eAAe,KAAK;EACjE,MAAM,eAAe,OAAO,KAAK,SAAS,YAAY,EAAE,CAAC,CAAC;AAC1D,UAAM,2CAA2C,SAAS,MAAM,aAAa;AAC7E,OAAK,OAAO,MACV;GAAE,MAAM,SAAS;GAAM;GAAc,EACrC,+DACD;EAED,IAAI,wBAAqC;AACzC,MAAI,SACF,yBAAwB,IAAI,KAAK,KAAK,KAAK,GAAG,SAAS;AAGzD,MAAI,kBAAkB,CAAC,yBAAyB,gBAAgB,uBAC9D,yBAAwB;AAO1B,MAAI,WAAW,SAAS,KAAK,CAAC,uBAAuB;AACnD,WAAM,8DAA8D,SAAS,KAAK;AAClF,UAAO;;EAGT,IAAI,cAAc,iBAAiB,SAAS;AAC5C,MAAI,WAAW,OAAO,EACpB,eAAc,sBAAsB,aAAa,YAAY,YAAY,KAAK,OAAO;AAGvF,MAAI,uBAAuB;AACzB,WACE,8CACA,SAAS,MACT,sBAAsB,aAAa,CACpC;AACD,QAAK,OAAO,MACV;IAAE,MAAM,SAAS;IAAM,WAAW,sBAAsB,aAAa;IAAE,EACvE,yDACD;AACD,iBAAc,4BAA4B,aAAa,uBAAuB,WAAW;;EAG3F,MAAM,gBAAgB,OAAO,KAAK,YAAY,SAAS,CAAC;EACxD,MAAM,eAAe,eAAe;AAQpC,MADoB,eAAe,KAAK,YAAY,WAAW,SAAS,QACvD;AACf,eAAY,YAAY;AACxB,kBAAe,YAAY;AAC3B,eAAY,YAAY;AACxB,2BAAwB,YAAY;AACpC,oBAAiB,YAAY;;AAG/B,MAAI,eAAe,GAAG;AACpB,WACE,+CACA,SAAS,MACT,cACA,eACA,aACD;AACD,QAAK,OAAO,MACV;IAAE,MAAM,SAAS;IAAM,QAAQ;IAAc,OAAO;IAAe,SAAS;IAAc,EAC1F,8EACD;QAED,SAAM,+BAA+B,SAAS,KAAK;AAGrD,SAAO;;;;;AC5IX,IAAA,cAAe"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/config/parser.ts","../src/filtering/types.ts","../src/filtering/matcher.ts","../src/filtering/packageVersion.ts","../src/filtering/publishDate.ts","../src/utils/jsonUtils.ts","../src/utils/manifestUtils.ts","../src/packageFilter.ts","../src/index.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n","import type { PackageScopeLevel, ParsedConfigRule } from '../config/types';\n\nexport enum MatchType {\n  SCOPE = 'scope',\n  PACKAGE = 'package',\n  VERSIONS = 'versions',\n}\n\nexport interface MatchResultVersions {\n  versions: string[];\n}\n\nexport interface MatchScopeResult extends MatchResultVersions {\n  type: MatchType.SCOPE;\n  rule: PackageScopeLevel;\n  scope: string;\n}\n\nexport interface MatchPackageResult extends MatchResultVersions {\n  type: MatchType.PACKAGE;\n  rule: PackageScopeLevel;\n  package: string;\n}\n\nexport interface MatchVersionsResult extends MatchResultVersions {\n  type: MatchType.VERSIONS;\n  rule: ParsedConfigRule;\n}\n\nexport type MatchResult = MatchScopeResult | MatchPackageResult | MatchVersionsResult;\n","import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n","import buildDebug from 'debug';\nimport { Range, satisfies } from 'semver';\n\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport type { ParsedConfigRule, ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all blocked package versions.\n * If package or scope is blocked, then block all versions.\n *\n * TODO: consider adding a `prerelease` filter option to block/allow\n * prerelease versions independently. Currently prereleases are matched by\n * semver ranges with `includePrerelease: true`, but there's no dedicated toggle.\n *\n * Example config (not yet implemented):\n *   block:\n *     - package: 'foo'\n *       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0\n *     - package: 'bar'\n *       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1\n *\n * Today the only workaround is using awkward ranges like \">=1.0.0-0 <1.0.0\".\n */\nexport function filterBlockedVersions(\n  manifest: Manifest,\n  blockRules: Map<string, ParsedRule>,\n  allowRules: Map<string, ParsedRule>,\n  logger: Logger\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    logger.trace({ name: manifest.name }, 'package @{name} is allow-listed, skipping block rules');\n    return manifest;\n  }\n\n  const blockMatch = matchRules(manifest, blockRules);\n  if (!blockMatch) {\n    // No rule is blocking this package\n    return manifest;\n  }\n\n  logger.trace(\n    { name: manifest.name, type: blockMatch.type },\n    'block rule matched for @{name} (type: @{type})'\n  );\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  let blockRule: ParsedConfigRule = {\n    versions: [new Range('*')],\n    strategy: 'block',\n  };\n\n  if (blockMatch.type === MatchType.SCOPE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (scope %s blocked)', manifest.name, blockMatch.scope);\n      logger.trace(\n        { name: manifest.name, scope: blockMatch.scope },\n        'all versions of @{name} blocked (scope @{scope})'\n      );\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All packages in scope ${blockMatch.scope} are blocked by rule`,\n      };\n    }\n  } else if (blockMatch.type === MatchType.PACKAGE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (package blocked)', manifest.name);\n      logger.trace({ name: manifest.name }, 'all versions of @{name} blocked (package rule)');\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All package versions are blocked by rule`,\n      };\n    }\n  } else {\n    blockRule = { ...blockRule, ...blockMatch.rule };\n  }\n\n  const versionRanges = blockRule.versions;\n\n  if (blockRule.strategy === 'block') {\n    const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));\n    for (const version of blockedVersions) {\n      delete manifest.versions[version];\n    }\n\n    if (blockedVersions.length > 0) {\n      debug(\n        'blocked %d versions of %s: %o',\n        blockedVersions.length,\n        manifest.name,\n        blockedVersions\n      );\n      logger.trace(\n        {\n          name: manifest.name,\n          count: blockedVersions.length,\n          versions: blockedVersions.join(', '),\n        },\n        '@{count} versions of @{name} blocked: @{versions}'\n      );\n      // Add debug info for devs\n      manifest.readme =\n        (manifest.readme || '') +\n        `\\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map(\n          (range) => range.raw\n        )}`;\n    }\n\n    return manifest;\n  }\n\n  // Process block rule strategy 'replace'.\n  // We assume that the order of versions is already sorted.\n  const nonBlockedVersions = { ...manifest.versions };\n  const newVersionsMapping: Record<string, string | null> = {};\n\n  versionRanges.forEach((versionRange) => {\n    const allVersions = Object.keys(nonBlockedVersions);\n\n    let lastNonBlockedVersion: string | null = null;\n\n    allVersions.forEach((version) => {\n      if (\n        !whitelistedVersions.includes(version) &&\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        delete nonBlockedVersions[version];\n        newVersionsMapping[version] = lastNonBlockedVersion;\n      } else {\n        lastNonBlockedVersion = version;\n      }\n    });\n  });\n\n  debug('replacing versions for %s: %o', manifest.name, newVersionsMapping);\n\n  const removedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace === null\n  ) as [string, null][];\n  const replacedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace !== null\n  ) as [string, string][];\n\n  removedVersions.forEach(([version]) => {\n    debug('no version to replace %s in %s', version, manifest.name);\n    logger.trace(\n      { name: manifest.name, version },\n      'version @{version} of @{name} removed (no replacement available)'\n    );\n    delete manifest.versions[version];\n  });\n\n  replacedVersions.forEach(([version, replaceVersion]) => {\n    logger.trace(\n      { name: manifest.name, version, replaceVersion },\n      'version @{version} of @{name} replaced with @{replaceVersion}'\n    );\n    manifest.versions[version] = {\n      ...manifest.versions[replaceVersion],\n      version,\n    };\n  });\n\n  if (removedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}):` +\n      ` ${removedVersions.map((a) => a[0])}`;\n  }\n\n  if (replacedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package are replaced by other(${replacedVersions.length}):` +\n      ` ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;\n  }\n\n  return manifest;\n}\n","import buildDebug from 'debug';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all package versions that were published after dateThreshold.\n */\nexport function filterVersionsByPublishDate(\n  manifest: Manifest,\n  dateThreshold: Date,\n  allowRules: Map<string, ParsedRule>\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    return manifest;\n  }\n\n  const { versions, time, name } = manifest;\n\n  if (!time) {\n    throw new TypeError(`Time of publication was not provided for package ${name}`);\n  }\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  const clearVersions: string[] = [];\n\n  Object.keys(versions).forEach((version) => {\n    if (whitelistedVersions.includes(version)) {\n      return;\n    }\n\n    const publishTime = time[version];\n\n    if (!publishTime) {\n      throw new TypeError(\n        `Time of publication was not provided for package ${name}, version ${version}`\n      );\n    }\n\n    if (new Date(publishTime) > dateThreshold) {\n      // clear untrusted version\n      clearVersions.push(version);\n    }\n  });\n\n  // delete version from versions\n  clearVersions.forEach((version) => {\n    delete manifest.versions[version];\n  });\n\n  if (clearVersions.length > 0) {\n    debug(\n      'date filter removed %d versions from %s: %o',\n      clearVersions.length,\n      manifest.name,\n      clearVersions\n    );\n  }\n\n  return manifest;\n}\n","import { Range } from 'semver';\n\nexport function jsonLogReplacer(_key: string, value: unknown) {\n  if (value instanceof Map) {\n    return Object.fromEntries(value);\n  }\n\n  if (value instanceof Range) {\n    return value.range;\n  }\n\n  return value;\n}\n","import buildDebug from 'debug';\nimport semver from 'semver';\n\nimport { DIST_TAGS } from '@verdaccio/core';\nimport type { Manifest } from '@verdaccio/types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:manifest');\n\n/**\n * Delete `dist-tags` entries corresponding to missing versions.\n */\nexport function cleanupTags(manifest: Manifest): void {\n  const distTags = manifest[DIST_TAGS];\n  Object.entries(distTags).forEach(([tag, tagVersion]) => {\n    if (!manifest.versions[tagVersion]) {\n      debug('removing orphaned dist-tag %s -> %s from %s', tag, tagVersion, manifest.name);\n      delete distTags[tag];\n    }\n  });\n}\n\n/**\n * Delete `time` entries corresponding to missing versions.\n */\nexport function cleanupTime(manifest: Manifest): void {\n  const time = manifest.time;\n  if (!time) {\n    return;\n  }\n\n  Object.keys(time).forEach((version) => {\n    if (!manifest.versions[version]) {\n      delete time[version];\n    }\n  });\n}\n\n/**\n * Get the latest version from a list of versions,\n * ordered by time of their publication stored in the manifest.\n */\nexport function getLatestVersion(manifest: Manifest, versions: string[]): string | undefined {\n  const time = manifest.time;\n  if (!time) {\n    // No time information, it's the best we can do\n    const sortedVersions = versions.sort(semver.rcompare);\n    return sortedVersions[0];\n  }\n\n  const timedVersions = versions\n    .map((v) => ({\n      version: v,\n      time: time[v],\n    }))\n    .filter((v) => v.time);\n\n  if (timedVersions.length === 0) {\n    return undefined;\n  }\n\n  const timeOrderedVersions = timedVersions.sort(\n    (a, b) => new Date(b.time).getTime() - new Date(a.time).getTime()\n  );\n  return timeOrderedVersions[0].version;\n}\n\n/**\n * Set the latest tag if dist-tags/latest is missing.\n * The last stable version available is used when possible.\n * Otherwise, it uses the latest version not found in dist-tags.\n */\nexport function setupLatestTag(manifest: Manifest): void {\n  const distTags = manifest[DIST_TAGS];\n  if (distTags.latest) {\n    // Tag 'latest' must only be fixed when latest version was blocked\n    return;\n  }\n\n  const versions = Object.keys(manifest.versions);\n  if (versions.length === 0) {\n    return;\n  }\n\n  const distTagsVersions = Object.values(distTags);\n  const untaggedVersions = versions.filter((v) => semver.valid(v) && !distTagsVersions.includes(v));\n  if (untaggedVersions.length === 0) {\n    return;\n  }\n\n  // Try stable versions first (no \"-next\" or \"-beta\", etc.)\n  const stableVersions = untaggedVersions.filter((v) => !semver.prerelease(v));\n  const latestStableVersion = getLatestVersion(manifest, stableVersions);\n  if (latestStableVersion) {\n    debug('reassigned latest tag to stable version %s for %s', latestStableVersion, manifest.name);\n    distTags.latest = latestStableVersion;\n    return;\n  }\n\n  // Fallback to all untagged versions\n  const latestVersion = getLatestVersion(manifest, untaggedVersions);\n  if (!latestVersion) {\n    return;\n  }\n\n  debug('reassigned latest tag to pre-release version %s for %s', latestVersion, manifest.name);\n  distTags.latest = latestVersion;\n}\n\n/**\n * Set the created and modified times.\n */\nexport function setupCreatedAndModified(manifest: Manifest): void {\n  const time = manifest.time;\n  if (!time) {\n    return;\n  }\n\n  const times = Object.values(time);\n  if (times.length === 0) {\n    return;\n  }\n\n  // Single O(n) pass for the earliest/latest publication time instead of an\n  // O(n log n) sort — the result is identical but cheaper on large manifests.\n  let earliest = times[0];\n  let latest = times[0];\n  let earliestMs = new Date(earliest).getTime();\n  let latestMs = earliestMs;\n  for (let i = 1; i < times.length; i++) {\n    const currentMs = new Date(times[i]).getTime();\n    if (currentMs < earliestMs) {\n      earliestMs = currentMs;\n      earliest = times[i];\n    }\n    if (currentMs > latestMs) {\n      latestMs = currentMs;\n      latest = times[i];\n    }\n  }\n  time.created = earliest;\n  time.modified = latest;\n}\n\n/**\n * Remove `_distfiles` entries which are not used by any version.\n */\nexport function cleanupDistFiles(manifest: Manifest): void {\n  const distFiles = manifest._distfiles;\n  // Build a Set of active tarball URLs in one pass — O(n) instead of O(n²)\n  const activeTarballs = new Set(\n    Object.values(manifest.versions)\n      .map((v) => v.dist?.tarball)\n      .filter((tarball): tarball is string => typeof tarball === 'string')\n  );\n  Object.keys(distFiles).forEach((key) => {\n    if (!activeTarballs.has(distFiles[key].url)) {\n      delete distFiles[key];\n    }\n  });\n}\n\n/**\n * Creates a copy of a manifest suitable for safe, localized mutation.\n *\n * The returned object is shallow-cloned, except for `versions`, `dist-tags`,\n * `time`, and `_distfiles`, which are cloned as independent maps so they can be\n * filtered or modified without affecting the original manifest.\n */\nexport function getManifestClone(manifest: Readonly<Manifest>): Manifest {\n  return {\n    ...manifest,\n    versions: {\n      ...manifest.versions,\n    },\n    [DIST_TAGS]: {\n      ...manifest[DIST_TAGS],\n    },\n    time: {\n      ...manifest.time,\n    },\n    _distfiles: {\n      ...manifest._distfiles,\n    },\n  };\n}\n","import buildDebug from 'debug';\n\nimport { pluginUtils } from '@verdaccio/core';\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport { parseConfig } from './config/parser';\nimport type { ParsedConfig, PluginConfig } from './config/types';\nimport { filterBlockedVersions } from './filtering/packageVersion';\nimport { filterVersionsByPublishDate } from './filtering/publishDate';\nimport { jsonLogReplacer } from './utils/jsonUtils';\nimport {\n  cleanupDistFiles,\n  cleanupTags,\n  cleanupTime,\n  getManifestClone,\n  setupCreatedAndModified,\n  setupLatestTag,\n} from './utils/manifestUtils';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter');\n\nexport class PackageFilterPlugin\n  extends pluginUtils.Plugin<PluginConfig>\n  implements pluginUtils.ManifestFilter<PluginConfig>\n{\n  public readonly config: PluginConfig;\n  private readonly parsedConfig: ParsedConfig;\n  protected readonly logger: Logger;\n\n  public constructor(config: PluginConfig, options: pluginUtils.PluginOptions) {\n    super(config, options);\n    this.config = config ?? {};\n    this.logger = options.logger;\n    this.parsedConfig = parseConfig(this.config);\n\n    debug(\n      'plugin loaded: block rules: %d, allow rules: %d',\n      this.parsedConfig.blockRules.size,\n      this.parsedConfig.allowRules.size\n    );\n    this.logger.debug(\n      { config: JSON.stringify(this.parsedConfig, jsonLogReplacer) },\n      'package-filter loaded with config: @{config}'\n    );\n    this.logger.trace(\n      {\n        blockRules: this.parsedConfig.blockRules.size,\n        allowRules: this.parsedConfig.allowRules.size,\n      },\n      'package-filter plugin initialized: @{blockRules} block rules, @{allowRules} allow rules'\n    );\n    if (this.parsedConfig.dateThreshold) {\n      debug('date threshold: %s', this.parsedConfig.dateThreshold.toISOString());\n      this.logger.trace(\n        { dateThreshold: this.parsedConfig.dateThreshold.toISOString() },\n        'package-filter date threshold: @{dateThreshold}'\n      );\n    }\n    if (this.parsedConfig.minAgeMs) {\n      const minAgeDays = this.parsedConfig.minAgeMs / (24 * 60 * 60 * 1000);\n      debug('min age: %d days', minAgeDays);\n      this.logger.trace({ minAgeDays }, 'package-filter min age: @{minAgeDays} days');\n    }\n  }\n\n  public async filter_metadata(manifest: Readonly<Manifest>): Promise<Manifest> {\n    const { dateThreshold, minAgeMs, blockRules, allowRules } = this.parsedConfig;\n    const versionCount = Object.keys(manifest.versions ?? {}).length;\n    debug('filtering manifest for %s (%d versions)', manifest.name, versionCount);\n    this.logger.trace(\n      { name: manifest.name, versionCount },\n      'package-filter processing @{name} (@{versionCount} versions)'\n    );\n\n    let earliestDateThreshold: Date | null = null;\n    if (minAgeMs) {\n      earliestDateThreshold = new Date(Date.now() - minAgeMs);\n    }\n\n    if (dateThreshold && (!earliestDateThreshold || dateThreshold < earliestDateThreshold)) {\n      earliestDateThreshold = dateThreshold;\n    }\n\n    // Fast path: when neither block rules nor a date threshold are configured there\n    // is nothing this filter can change. Returning the manifest untouched avoids the\n    // clone and the cleanup passes below. This matters most for `npm search`, which\n    // invokes filter_metadata once per matched package (see issue #5837).\n    if (blockRules.size === 0 && !earliestDateThreshold) {\n      debug('no filters configured, returning manifest untouched for %s', manifest.name);\n      return manifest as Manifest;\n    }\n\n    let newManifest = getManifestClone(manifest);\n    if (blockRules.size > 0) {\n      newManifest = filterBlockedVersions(newManifest, blockRules, allowRules, this.logger);\n    }\n\n    if (earliestDateThreshold) {\n      debug(\n        'applying date filter for %s, threshold: %s',\n        manifest.name,\n        earliestDateThreshold.toISOString()\n      );\n      this.logger.trace(\n        { name: manifest.name, threshold: earliestDateThreshold.toISOString() },\n        'applying date filter for @{name}, cutoff: @{threshold}'\n      );\n      newManifest = filterVersionsByPublishDate(newManifest, earliestDateThreshold, allowRules);\n    }\n\n    const filteredCount = Object.keys(newManifest.versions).length;\n    const removedCount = versionCount - filteredCount;\n    // The cleanup passes only repair inconsistencies introduced by filtering:\n    // orphaned dist-tags/time/_distfiles entries and a `latest` tag pointing at a\n    // removed version. When the filters left the manifest untouched (no version\n    // removed or replaced) it is already consistent, so the passes are skipped.\n    // `readme` changing is the signal that the (count-preserving) replace strategy\n    // rewrote version content and the cleanup still needs to run.\n    const wasModified = removedCount > 0 || newManifest.readme !== manifest.readme;\n    if (wasModified) {\n      cleanupTags(newManifest);\n      setupLatestTag(newManifest);\n      cleanupTime(newManifest);\n      setupCreatedAndModified(newManifest);\n      cleanupDistFiles(newManifest);\n    }\n\n    if (removedCount > 0) {\n      debug(\n        'filtered %s: %d -> %d versions (%d removed)',\n        manifest.name,\n        versionCount,\n        filteredCount,\n        removedCount\n      );\n      this.logger.trace(\n        { name: manifest.name, before: versionCount, after: filteredCount, removed: removedCount },\n        'package-filter @{name}: @{before} -> @{after} versions (@{removed} removed)'\n      );\n    } else {\n      debug('no versions filtered for %s', manifest.name);\n    }\n\n    return newManifest;\n  }\n}\n","import { PackageFilterPlugin } from './packageFilter';\n\nexport { PackageFilterPlugin };\nexport default PackageFilterPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,OAAA,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,QAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,QAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,OAAO;EACL;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF;;;ACzEA,IAAY,YAAL,yBAAA,WAAA;CACL,UAAA,WAAA;CACA,UAAA,aAAA;CACA,UAAA,cAAA;;AACF,EAAA,CAAA,CAAA;;;ACGA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;AAKjE,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;AAMA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,IAAI;CACzC,IAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,IAAI,SAAS,SAAS;GACpB,QAAM,uCAAuC,SAAS,MAAM,KAAK;GACjE,OAAO;IACL,MAAM,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,QAAQ;GACzC;EACF;CACF;CAEA,MAAM,OAAO,MAAM,IAAI,SAAS,IAAI;CACpC,IAAI,CAAC,MAEH;CAGF,IAAI,SAAS,WAAW;EACtB,QAAM,qBAAqB,SAAS,IAAI;EACxC,OAAO;GACL,MAAM,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,EAAE,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,KAAA,GAAA,OAAA,WACY,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,QACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,UAAU;EAChB;EACA,UAAU;CACZ;AACF;;;ACpGA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;;;;;;;;;;;;;;;AAmBjE,SAAgB,sBACd,UACA,YACA,YACA,QACU;CACV,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,UACtE;EAEA,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,uDAAuD;EAC7F,OAAO;CACT;CAEA,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IAAI,CAAC,YAEH,OAAO;CAGT,OAAO,MACL;EAAE,MAAM,SAAS;EAAM,MAAM,WAAW;CAAK,GAC7C,gDACF;CAEA,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,IAAI,YAA8B;EAChC,UAAU,CAAC,IAAI,OAAA,MAAM,GAAG,CAAC;EACzB,UAAU;CACZ;CAEA,IAAI,WAAW,SAAS,UAAU;MAC5B,oBAAoB,WAAW,GAAG;GACpC,QAAM,kDAAkD,SAAS,MAAM,WAAW,KAAK;GACvF,OAAO,MACL;IAAE,MAAM,SAAS;IAAM,OAAO,WAAW;GAAM,GAC/C,kDACF;GACA,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ,yBAAyB,WAAW,MAAM;GACpD;EACF;QACK,IAAI,WAAW,SAAS,UAAU;MACnC,oBAAoB,WAAW,GAAG;GACpC,QAAM,iDAAiD,SAAS,IAAI;GACpE,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,gDAAgD;GACtF,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ;GACV;EACF;QAEA,YAAY;EAAE,GAAG;EAAW,GAAG,WAAW;CAAK;CAGjD,MAAM,gBAAgB,UAAU;CAEhC,IAAI,UAAU,aAAa,SAAS;EAClC,MAAM,kBAAkB,WAAW,SAAS,QAAQ,MAAM,CAAC,oBAAoB,SAAS,CAAC,CAAC;EAC1F,KAAK,MAAM,WAAW,iBACpB,OAAO,SAAS,SAAS;EAG3B,IAAI,gBAAgB,SAAS,GAAG;GAC9B,QACE,iCACA,gBAAgB,QAChB,SAAS,MACT,eACF;GACA,OAAO,MACL;IACE,MAAM,SAAS;IACf,OAAO,gBAAgB;IACvB,UAAU,gBAAgB,KAAK,IAAI;GACrC,GACA,mDACF;GAEA,SAAS,UACN,SAAS,UAAU,MACpB,mBAAmB,gBAAgB,OAAO,qCAAqC,cAAc,KAC1F,UAAU,MAAM,GACnB;EACJ;EAEA,OAAO;CACT;CAIA,MAAM,qBAAqB,EAAE,GAAG,SAAS,SAAS;CAClD,MAAM,qBAAoD,CAAC;CAE3D,cAAc,SAAS,iBAAiB;EACtC,MAAM,cAAc,OAAO,KAAK,kBAAkB;EAElD,IAAI,wBAAuC;EAE3C,YAAY,SAAS,YAAY;GAC/B,IACE,CAAC,oBAAoB,SAAS,OAAO,MAAA,GAAA,OAAA,WAC3B,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GACD;IACA,OAAO,mBAAmB;IAC1B,mBAAmB,WAAW;GAChC,OACE,wBAAwB;EAE5B,CAAC;CACH,CAAC;CAED,QAAM,iCAAiC,SAAS,MAAM,kBAAkB;CAExE,MAAM,kBAAkB,OAAO,QAAQ,kBAAkB,EAAE,QACxD,CAAC,GAAG,aAAa,YAAY,IAChC;CACA,MAAM,mBAAmB,OAAO,QAAQ,kBAAkB,EAAE,QACzD,CAAC,GAAG,aAAa,YAAY,IAChC;CAEA,gBAAgB,SAAS,CAAC,aAAa;EACrC,QAAM,kCAAkC,SAAS,SAAS,IAAI;EAC9D,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;EAAQ,GAC/B,kEACF;EACA,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,iBAAiB,SAAS,CAAC,SAAS,oBAAoB;EACtD,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;GAAS;EAAe,GAC/C,+DACF;EACA,SAAS,SAAS,WAAW;GAC3B,GAAG,SAAS,SAAS;GACrB;EACF;CACF,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,SAAS,UACP,gFAAgF,gBAAgB,OAAO,KACnG,gBAAgB,KAAK,MAAM,EAAE,EAAE;CAGvC,IAAI,iBAAiB,SAAS,GAC5B,SAAS,UACP,oDAAoD,iBAAiB,OAAO,KACxE,iBAAiB,KAAK,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI;CAGxD,OAAO;AACT;;;ACtLA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;AAKjE,SAAgB,4BACd,UACA,eACA,YACU;CACV,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,UAGtE,OAAO;CAGT,MAAM,EAAE,UAAU,MAAM,SAAS;CAEjC,IAAI,CAAC,MACH,MAAM,IAAI,UAAU,oDAAoD,MAAM;CAGhF,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,MAAM,gBAA0B,CAAC;CAEjC,OAAO,KAAK,QAAQ,EAAE,SAAS,YAAY;EACzC,IAAI,oBAAoB,SAAS,OAAO,GACtC;EAGF,MAAM,cAAc,KAAK;EAEzB,IAAI,CAAC,aACH,MAAM,IAAI,UACR,oDAAoD,KAAK,YAAY,SACvE;EAGF,IAAI,IAAI,KAAK,WAAW,IAAI,eAE1B,cAAc,KAAK,OAAO;CAE9B,CAAC;CAGD,cAAc,SAAS,YAAY;EACjC,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,IAAI,cAAc,SAAS,GACzB,QACE,+CACA,cAAc,QACd,SAAS,MACT,aACF;CAGF,OAAO;AACT;;;ACpEA,SAAgB,gBAAgB,MAAc,OAAgB;CAC5D,IAAI,iBAAiB,KACnB,OAAO,OAAO,YAAY,KAAK;CAGjC,IAAI,iBAAiB,OAAA,OACnB,OAAO,MAAM;CAGf,OAAO;AACT;;;ACNA,IAAM,WAAA,GAAA,MAAA,SAAmB,0CAA0C;;;;AAKnE,SAAgB,YAAY,UAA0B;CACpD,MAAM,WAAW,SAAS,gBAAA;CAC1B,OAAO,QAAQ,QAAQ,EAAE,SAAS,CAAC,KAAK,gBAAgB;EACtD,IAAI,CAAC,SAAS,SAAS,aAAa;GAClC,QAAM,+CAA+C,KAAK,YAAY,SAAS,IAAI;GACnF,OAAO,SAAS;EAClB;CACF,CAAC;AACH;;;;AAKA,SAAgB,YAAY,UAA0B;CACpD,MAAM,OAAO,SAAS;CACtB,IAAI,CAAC,MACH;CAGF,OAAO,KAAK,IAAI,EAAE,SAAS,YAAY;EACrC,IAAI,CAAC,SAAS,SAAS,UACrB,OAAO,KAAK;CAEhB,CAAC;AACH;;;;;AAMA,SAAgB,iBAAiB,UAAoB,UAAwC;CAC3F,MAAM,OAAO,SAAS;CACtB,IAAI,CAAC,MAGH,OADuB,SAAS,KAAK,OAAA,QAAO,QACrC,EAAe;CAGxB,MAAM,gBAAgB,SACnB,KAAK,OAAO;EACX,SAAS;EACT,MAAM,KAAK;CACb,EAAE,EACD,QAAQ,MAAM,EAAE,IAAI;CAEvB,IAAI,cAAc,WAAW,GAC3B;CAMF,OAH4B,cAAc,MACvC,GAAG,MAAM,IAAI,KAAK,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,QAAQ,CAE3D,EAAoB,GAAG;AAChC;;;;;;AAOA,SAAgB,eAAe,UAA0B;CACvD,MAAM,WAAW,SAAS,gBAAA;CAC1B,IAAI,SAAS,QAEX;CAGF,MAAM,WAAW,OAAO,KAAK,SAAS,QAAQ;CAC9C,IAAI,SAAS,WAAW,GACtB;CAGF,MAAM,mBAAmB,OAAO,OAAO,QAAQ;CAC/C,MAAM,mBAAmB,SAAS,QAAQ,MAAM,OAAA,QAAO,MAAM,CAAC,KAAK,CAAC,iBAAiB,SAAS,CAAC,CAAC;CAChG,IAAI,iBAAiB,WAAW,GAC9B;CAKF,MAAM,sBAAsB,iBAAiB,UADtB,iBAAiB,QAAQ,MAAM,CAAC,OAAA,QAAO,WAAW,CAAC,CACnB,CAAc;CACrE,IAAI,qBAAqB;EACvB,QAAM,qDAAqD,qBAAqB,SAAS,IAAI;EAC7F,SAAS,SAAS;EAClB;CACF;CAGA,MAAM,gBAAgB,iBAAiB,UAAU,gBAAgB;CACjE,IAAI,CAAC,eACH;CAGF,QAAM,0DAA0D,eAAe,SAAS,IAAI;CAC5F,SAAS,SAAS;AACpB;;;;AAKA,SAAgB,wBAAwB,UAA0B;CAChE,MAAM,OAAO,SAAS;CACtB,IAAI,CAAC,MACH;CAGF,MAAM,QAAQ,OAAO,OAAO,IAAI;CAChC,IAAI,MAAM,WAAW,GACnB;CAKF,IAAI,WAAW,MAAM;CACrB,IAAI,SAAS,MAAM;CACnB,IAAI,aAAa,IAAI,KAAK,QAAQ,EAAE,QAAQ;CAC5C,IAAI,WAAW;CACf,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,YAAY,IAAI,KAAK,MAAM,EAAE,EAAE,QAAQ;EAC7C,IAAI,YAAY,YAAY;GAC1B,aAAa;GACb,WAAW,MAAM;EACnB;EACA,IAAI,YAAY,UAAU;GACxB,WAAW;GACX,SAAS,MAAM;EACjB;CACF;CACA,KAAK,UAAU;CACf,KAAK,WAAW;AAClB;;;;AAKA,SAAgB,iBAAiB,UAA0B;CACzD,MAAM,YAAY,SAAS;CAE3B,MAAM,iBAAiB,IAAI,IACzB,OAAO,OAAO,SAAS,QAAQ,EAC5B,KAAK,MAAM,EAAE,MAAM,OAAO,EAC1B,QAAQ,YAA+B,OAAO,YAAY,QAAQ,CACvE;CACA,OAAO,KAAK,SAAS,EAAE,SAAS,QAAQ;EACtC,IAAI,CAAC,eAAe,IAAI,UAAU,KAAK,GAAG,GACxC,OAAO,UAAU;CAErB,CAAC;AACH;;;;;;;;AASA,SAAgB,iBAAiB,UAAwC;CACvE,OAAO;EACL,GAAG;EACH,UAAU,EACR,GAAG,SAAS,SACd;GACC,gBAAA,YAAY,EACX,GAAG,SAAS,gBAAA,WACd;EACA,MAAM,EACJ,GAAG,SAAS,KACd;EACA,YAAY,EACV,GAAG,SAAS,WACd;CACF;AACF;;;ACrKA,IAAM,WAAA,GAAA,MAAA,SAAmB,iCAAiC;AAE1D,IAAa,sBAAb,cACU,gBAAA,YAAY,OAEtB;CACE;CACA;CACA;CAEA,YAAmB,QAAsB,SAAoC;EAC3E,MAAM,QAAQ,OAAO;EACrB,KAAK,SAAS,UAAU,CAAC;EACzB,KAAK,SAAS,QAAQ;EACtB,KAAK,eAAe,YAAY,KAAK,MAAM;EAE3C,QACE,mDACA,KAAK,aAAa,WAAW,MAC7B,KAAK,aAAa,WAAW,IAC/B;EACA,KAAK,OAAO,MACV,EAAE,QAAQ,KAAK,UAAU,KAAK,cAAc,eAAe,EAAE,GAC7D,8CACF;EACA,KAAK,OAAO,MACV;GACE,YAAY,KAAK,aAAa,WAAW;GACzC,YAAY,KAAK,aAAa,WAAW;EAC3C,GACA,yFACF;EACA,IAAI,KAAK,aAAa,eAAe;GACnC,QAAM,sBAAsB,KAAK,aAAa,cAAc,YAAY,CAAC;GACzE,KAAK,OAAO,MACV,EAAE,eAAe,KAAK,aAAa,cAAc,YAAY,EAAE,GAC/D,iDACF;EACF;EACA,IAAI,KAAK,aAAa,UAAU;GAC9B,MAAM,aAAa,KAAK,aAAa,YAAY,OAAU,KAAK;GAChE,QAAM,oBAAoB,UAAU;GACpC,KAAK,OAAO,MAAM,EAAE,WAAW,GAAG,4CAA4C;EAChF;CACF;CAEA,MAAa,gBAAgB,UAAiD;EAC5E,MAAM,EAAE,eAAe,UAAU,YAAY,eAAe,KAAK;EACjE,MAAM,eAAe,OAAO,KAAK,SAAS,YAAY,CAAC,CAAC,EAAE;EAC1D,QAAM,2CAA2C,SAAS,MAAM,YAAY;EAC5E,KAAK,OAAO,MACV;GAAE,MAAM,SAAS;GAAM;EAAa,GACpC,8DACF;EAEA,IAAI,wBAAqC;EACzC,IAAI,UACF,wBAAwB,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ;EAGxD,IAAI,kBAAkB,CAAC,yBAAyB,gBAAgB,wBAC9D,wBAAwB;EAO1B,IAAI,WAAW,SAAS,KAAK,CAAC,uBAAuB;GACnD,QAAM,8DAA8D,SAAS,IAAI;GACjF,OAAO;EACT;EAEA,IAAI,cAAc,iBAAiB,QAAQ;EAC3C,IAAI,WAAW,OAAO,GACpB,cAAc,sBAAsB,aAAa,YAAY,YAAY,KAAK,MAAM;EAGtF,IAAI,uBAAuB;GACzB,QACE,8CACA,SAAS,MACT,sBAAsB,YAAY,CACpC;GACA,KAAK,OAAO,MACV;IAAE,MAAM,SAAS;IAAM,WAAW,sBAAsB,YAAY;GAAE,GACtE,wDACF;GACA,cAAc,4BAA4B,aAAa,uBAAuB,UAAU;EAC1F;EAEA,MAAM,gBAAgB,OAAO,KAAK,YAAY,QAAQ,EAAE;EACxD,MAAM,eAAe,eAAe;EAQpC,IADoB,eAAe,KAAK,YAAY,WAAW,SAAS,QACvD;GACf,YAAY,WAAW;GACvB,eAAe,WAAW;GAC1B,YAAY,WAAW;GACvB,wBAAwB,WAAW;GACnC,iBAAiB,WAAW;EAC9B;EAEA,IAAI,eAAe,GAAG;GACpB,QACE,+CACA,SAAS,MACT,cACA,eACA,YACF;GACA,KAAK,OAAO,MACV;IAAE,MAAM,SAAS;IAAM,QAAQ;IAAc,OAAO;IAAe,SAAS;GAAa,GACzF,6EACF;EACF,OACE,QAAM,+BAA+B,SAAS,IAAI;EAGpD,OAAO;CACT;AACF;;;AC9IA,IAAA,cAAe"}

package/package.json

@@ -1,55 +1,55 @@
 {
   "name": "@verdaccio/package-filter",
-  "version": "13.0.3",
+  "version": "13.0.5",
   "description": "Package filter plugin for Verdaccio that allows blocking packages by name, scope, version or date",
   "keywords": [
-    "private",
-    "package",
-    "repository",
-    "registry",
     "enterprise",
+    "filter",
     "modules",
+    "package",
+    "plugin",
+    "private",
     "proxy",
+    "registry",
+    "repository",
     "server",
-    "verdaccio",
-    "plugin",
-    "filter"
+    "verdaccio"
   ],
+  "homepage": "https://verdaccio.org",
+  "bugs": {
+    "url": "https://github.com/verdaccio/verdaccio/issues"
+  },
+  "license": "MIT",
   "author": "Vitalii Sugrobov <vsugrob@hotmail.com>",
   "contributors": [
     "Ansile <ansilet@yandex.ru> (original project)"
   ],
-  "license": "MIT",
-  "homepage": "https://verdaccio.org",
   "repository": {
     "type": "https",
     "url": "https://github.com/verdaccio/verdaccio",
     "directory": "packages/plugins/package-filter"
   },
-  "bugs": {
-    "url": "https://github.com/verdaccio/verdaccio/issues"
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/verdaccio"
   },
   "main": "build/index.js",
   "types": "build/index.d.ts",
-  "engines": {
-    "node": ">=18"
-  },
   "dependencies": {
-    "@verdaccio/core": "8.1.2",
+    "@verdaccio/core": "8.1.4",
     "debug": "4.4.3",
     "semver": "7.7.4"
   },
   "devDependencies": {
     "@types/debug": "4.1.12",
-    "@verdaccio/config": "8.1.2",
-    "@verdaccio/logger": "8.0.3",
-    "@verdaccio/types": "13.0.2",
-    "vite": "8.0.5",
+    "@verdaccio/config": "8.1.4",
+    "@verdaccio/logger": "8.0.5",
+    "@verdaccio/types": "13.0.5",
+    "vite": "8.0.16",
     "vitest": "4.1.2"
   },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
+  "engines": {
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",