@verdaccio/package-filter 13.0.5 → 13.1.0

package/build/filtering/packageVersion.mjs

@@ -0,0 +1,127 @@
+import { MatchType } from "./types.mjs";
+import { matchRules } from "./matcher.mjs";
+import buildDebug from "debug";
+import { Range, satisfies } from "semver";
+//#region src/filtering/packageVersion.ts
+var debug = buildDebug("verdaccio:plugin:package-filter:filter");
+/**
+* Filter out all blocked package versions.
+* If package or scope is blocked, then block all versions.
+*
+* TODO: consider adding a `prerelease` filter option to block/allow
+* prerelease versions independently. Currently prereleases are matched by
+* semver ranges with `includePrerelease: true`, but there's no dedicated toggle.
+*
+* Example config (not yet implemented):
+*   block:
+*     - package: 'foo'
+*       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0
+*     - package: 'bar'
+*       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1
+*
+* Today the only workaround is using awkward ranges like ">=1.0.0-0 <1.0.0".
+*/
+function filterBlockedVersions(manifest, blockRules, allowRules, logger) {
+	const allowMatch = matchRules(manifest, allowRules);
+	if (allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)) {
+		logger.trace({ name: manifest.name }, "package @{name} is allow-listed, skipping block rules");
+		return manifest;
+	}
+	const blockMatch = matchRules(manifest, blockRules);
+	if (!blockMatch) return manifest;
+	logger.trace({
+		name: manifest.name,
+		type: blockMatch.type
+	}, "block rule matched for @{name} (type: @{type})");
+	const whitelistedVersions = allowMatch ? allowMatch.versions : [];
+	let blockRule = {
+		versions: [new Range("*")],
+		strategy: "block"
+	};
+	if (blockMatch.type === MatchType.SCOPE) {
+		if (whitelistedVersions.length === 0) {
+			debug("blocking all versions of %s (scope %s blocked)", manifest.name, blockMatch.scope);
+			logger.trace({
+				name: manifest.name,
+				scope: blockMatch.scope
+			}, "all versions of @{name} blocked (scope @{scope})");
+			return {
+				...manifest,
+				versions: {},
+				readme: `All packages in scope ${blockMatch.scope} are blocked by rule`
+			};
+		}
+	} else if (blockMatch.type === MatchType.PACKAGE) {
+		if (whitelistedVersions.length === 0) {
+			debug("blocking all versions of %s (package blocked)", manifest.name);
+			logger.trace({ name: manifest.name }, "all versions of @{name} blocked (package rule)");
+			return {
+				...manifest,
+				versions: {},
+				readme: `All package versions are blocked by rule`
+			};
+		}
+	} else blockRule = {
+		...blockRule,
+		...blockMatch.rule
+	};
+	const versionRanges = blockRule.versions;
+	if (blockRule.strategy === "block") {
+		const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));
+		for (const version of blockedVersions) delete manifest.versions[version];
+		if (blockedVersions.length > 0) {
+			debug("blocked %d versions of %s: %o", blockedVersions.length, manifest.name, blockedVersions);
+			logger.trace({
+				name: manifest.name,
+				count: blockedVersions.length,
+				versions: blockedVersions.join(", ")
+			}, "@{count} versions of @{name} blocked: @{versions}");
+			manifest.readme = (manifest.readme || "") + `\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map((range) => range.raw)}`;
+		}
+		return manifest;
+	}
+	const nonBlockedVersions = { ...manifest.versions };
+	const newVersionsMapping = {};
+	versionRanges.forEach((versionRange) => {
+		const allVersions = Object.keys(nonBlockedVersions);
+		let lastNonBlockedVersion = null;
+		allVersions.forEach((version) => {
+			if (!whitelistedVersions.includes(version) && satisfies(version, versionRange, {
+				includePrerelease: true,
+				loose: true
+			})) {
+				delete nonBlockedVersions[version];
+				newVersionsMapping[version] = lastNonBlockedVersion;
+			} else lastNonBlockedVersion = version;
+		});
+	});
+	debug("replacing versions for %s: %o", manifest.name, newVersionsMapping);
+	const removedVersions = Object.entries(newVersionsMapping).filter(([_, replace]) => replace === null);
+	const replacedVersions = Object.entries(newVersionsMapping).filter(([_, replace]) => replace !== null);
+	removedVersions.forEach(([version]) => {
+		debug("no version to replace %s in %s", version, manifest.name);
+		logger.trace({
+			name: manifest.name,
+			version
+		}, "version @{version} of @{name} removed (no replacement available)");
+		delete manifest.versions[version];
+	});
+	replacedVersions.forEach(([version, replaceVersion]) => {
+		logger.trace({
+			name: manifest.name,
+			version,
+			replaceVersion
+		}, "version @{version} of @{name} replaced with @{replaceVersion}");
+		manifest.versions[version] = {
+			...manifest.versions[replaceVersion],
+			version
+		};
+	});
+	if (removedVersions.length > 0) manifest.readme += `\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}): ${removedVersions.map((a) => a[0])}`;
+	if (replacedVersions.length > 0) manifest.readme += `\nSome versions of package are replaced by other(${replacedVersions.length}): ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;
+	return manifest;
+}
+//#endregion
+export { filterBlockedVersions };
+
+//# sourceMappingURL=packageVersion.mjs.map

package/build/filtering/packageVersion.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageVersion.mjs","names":[],"sources":["../../src/filtering/packageVersion.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range, satisfies } from 'semver';\n\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport type { ParsedConfigRule, ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all blocked package versions.\n * If package or scope is blocked, then block all versions.\n *\n * TODO: consider adding a `prerelease` filter option to block/allow\n * prerelease versions independently. Currently prereleases are matched by\n * semver ranges with `includePrerelease: true`, but there's no dedicated toggle.\n *\n * Example config (not yet implemented):\n *   block:\n *     - package: 'foo'\n *       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0\n *     - package: 'bar'\n *       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1\n *\n * Today the only workaround is using awkward ranges like \">=1.0.0-0 <1.0.0\".\n */\nexport function filterBlockedVersions(\n  manifest: Manifest,\n  blockRules: Map<string, ParsedRule>,\n  allowRules: Map<string, ParsedRule>,\n  logger: Logger\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    logger.trace({ name: manifest.name }, 'package @{name} is allow-listed, skipping block rules');\n    return manifest;\n  }\n\n  const blockMatch = matchRules(manifest, blockRules);\n  if (!blockMatch) {\n    // No rule is blocking this package\n    return manifest;\n  }\n\n  logger.trace(\n    { name: manifest.name, type: blockMatch.type },\n    'block rule matched for @{name} (type: @{type})'\n  );\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  let blockRule: ParsedConfigRule = {\n    versions: [new Range('*')],\n    strategy: 'block',\n  };\n\n  if (blockMatch.type === MatchType.SCOPE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (scope %s blocked)', manifest.name, blockMatch.scope);\n      logger.trace(\n        { name: manifest.name, scope: blockMatch.scope },\n        'all versions of @{name} blocked (scope @{scope})'\n      );\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All packages in scope ${blockMatch.scope} are blocked by rule`,\n      };\n    }\n  } else if (blockMatch.type === MatchType.PACKAGE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (package blocked)', manifest.name);\n      logger.trace({ name: manifest.name }, 'all versions of @{name} blocked (package rule)');\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All package versions are blocked by rule`,\n      };\n    }\n  } else {\n    blockRule = { ...blockRule, ...blockMatch.rule };\n  }\n\n  const versionRanges = blockRule.versions;\n\n  if (blockRule.strategy === 'block') {\n    const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));\n    for (const version of blockedVersions) {\n      delete manifest.versions[version];\n    }\n\n    if (blockedVersions.length > 0) {\n      debug(\n        'blocked %d versions of %s: %o',\n        blockedVersions.length,\n        manifest.name,\n        blockedVersions\n      );\n      logger.trace(\n        {\n          name: manifest.name,\n          count: blockedVersions.length,\n          versions: blockedVersions.join(', '),\n        },\n        '@{count} versions of @{name} blocked: @{versions}'\n      );\n      // Add debug info for devs\n      manifest.readme =\n        (manifest.readme || '') +\n        `\\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map(\n          (range) => range.raw\n        )}`;\n    }\n\n    return manifest;\n  }\n\n  // Process block rule strategy 'replace'.\n  // We assume that the order of versions is already sorted.\n  const nonBlockedVersions = { ...manifest.versions };\n  const newVersionsMapping: Record<string, string | null> = {};\n\n  versionRanges.forEach((versionRange) => {\n    const allVersions = Object.keys(nonBlockedVersions);\n\n    let lastNonBlockedVersion: string | null = null;\n\n    allVersions.forEach((version) => {\n      if (\n        !whitelistedVersions.includes(version) &&\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        delete nonBlockedVersions[version];\n        newVersionsMapping[version] = lastNonBlockedVersion;\n      } else {\n        lastNonBlockedVersion = version;\n      }\n    });\n  });\n\n  debug('replacing versions for %s: %o', manifest.name, newVersionsMapping);\n\n  const removedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace === null\n  ) as [string, null][];\n  const replacedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace !== null\n  ) as [string, string][];\n\n  removedVersions.forEach(([version]) => {\n    debug('no version to replace %s in %s', version, manifest.name);\n    logger.trace(\n      { name: manifest.name, version },\n      'version @{version} of @{name} removed (no replacement available)'\n    );\n    delete manifest.versions[version];\n  });\n\n  replacedVersions.forEach(([version, replaceVersion]) => {\n    logger.trace(\n      { name: manifest.name, version, replaceVersion },\n      'version @{version} of @{name} replaced with @{replaceVersion}'\n    );\n    manifest.versions[version] = {\n      ...manifest.versions[replaceVersion],\n      version,\n    };\n  });\n\n  if (removedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}):` +\n      ` ${removedVersions.map((a) => a[0])}`;\n  }\n\n  if (replacedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package are replaced by other(${replacedVersions.length}):` +\n      ` ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;\n  }\n\n  return manifest;\n}\n"],"mappings":";;;;;AASA,IAAM,QAAQ,WAAW,wCAAwC;;;;;;;;;;;;;;;;;;AAmBjE,SAAgB,sBACd,UACA,YACA,YACA,QACU;CACV,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,UACtE;EAEA,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,uDAAuD;EAC7F,OAAO;CACT;CAEA,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IAAI,CAAC,YAEH,OAAO;CAGT,OAAO,MACL;EAAE,MAAM,SAAS;EAAM,MAAM,WAAW;CAAK,GAC7C,gDACF;CAEA,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,IAAI,YAA8B;EAChC,UAAU,CAAC,IAAI,MAAM,GAAG,CAAC;EACzB,UAAU;CACZ;CAEA,IAAI,WAAW,SAAS,UAAU;MAC5B,oBAAoB,WAAW,GAAG;GACpC,MAAM,kDAAkD,SAAS,MAAM,WAAW,KAAK;GACvF,OAAO,MACL;IAAE,MAAM,SAAS;IAAM,OAAO,WAAW;GAAM,GAC/C,kDACF;GACA,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ,yBAAyB,WAAW,MAAM;GACpD;EACF;QACK,IAAI,WAAW,SAAS,UAAU;MACnC,oBAAoB,WAAW,GAAG;GACpC,MAAM,iDAAiD,SAAS,IAAI;GACpE,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,gDAAgD;GACtF,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ;GACV;EACF;QAEA,YAAY;EAAE,GAAG;EAAW,GAAG,WAAW;CAAK;CAGjD,MAAM,gBAAgB,UAAU;CAEhC,IAAI,UAAU,aAAa,SAAS;EAClC,MAAM,kBAAkB,WAAW,SAAS,QAAQ,MAAM,CAAC,oBAAoB,SAAS,CAAC,CAAC;EAC1F,KAAK,MAAM,WAAW,iBACpB,OAAO,SAAS,SAAS;EAG3B,IAAI,gBAAgB,SAAS,GAAG;GAC9B,MACE,iCACA,gBAAgB,QAChB,SAAS,MACT,eACF;GACA,OAAO,MACL;IACE,MAAM,SAAS;IACf,OAAO,gBAAgB;IACvB,UAAU,gBAAgB,KAAK,IAAI;GACrC,GACA,mDACF;GAEA,SAAS,UACN,SAAS,UAAU,MACpB,mBAAmB,gBAAgB,OAAO,qCAAqC,cAAc,KAC1F,UAAU,MAAM,GACnB;EACJ;EAEA,OAAO;CACT;CAIA,MAAM,qBAAqB,EAAE,GAAG,SAAS,SAAS;CAClD,MAAM,qBAAoD,CAAC;CAE3D,cAAc,SAAS,iBAAiB;EACtC,MAAM,cAAc,OAAO,KAAK,kBAAkB;EAElD,IAAI,wBAAuC;EAE3C,YAAY,SAAS,YAAY;GAC/B,IACE,CAAC,oBAAoB,SAAS,OAAO,KACrC,UAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GACD;IACA,OAAO,mBAAmB;IAC1B,mBAAmB,WAAW;GAChC,OACE,wBAAwB;EAE5B,CAAC;CACH,CAAC;CAED,MAAM,iCAAiC,SAAS,MAAM,kBAAkB;CAExE,MAAM,kBAAkB,OAAO,QAAQ,kBAAkB,EAAE,QACxD,CAAC,GAAG,aAAa,YAAY,IAChC;CACA,MAAM,mBAAmB,OAAO,QAAQ,kBAAkB,EAAE,QACzD,CAAC,GAAG,aAAa,YAAY,IAChC;CAEA,gBAAgB,SAAS,CAAC,aAAa;EACrC,MAAM,kCAAkC,SAAS,SAAS,IAAI;EAC9D,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;EAAQ,GAC/B,kEACF;EACA,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,iBAAiB,SAAS,CAAC,SAAS,oBAAoB;EACtD,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;GAAS;EAAe,GAC/C,+DACF;EACA,SAAS,SAAS,WAAW;GAC3B,GAAG,SAAS,SAAS;GACrB;EACF;CACF,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,SAAS,UACP,gFAAgF,gBAAgB,OAAO,KACnG,gBAAgB,KAAK,MAAM,EAAE,EAAE;CAGvC,IAAI,iBAAiB,SAAS,GAC5B,SAAS,UACP,oDAAoD,iBAAiB,OAAO,KACxE,iBAAiB,KAAK,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI;CAGxD,OAAO;AACT"}

package/build/filtering/publishDate.d.ts

@@ -0,0 +1,6 @@
+import type { Manifest } from '@verdaccio/types';
+import type { ParsedRule } from '../config/types';
+/**
+ * Filter out all package versions that were published after dateThreshold.
+ */
+export declare function filterVersionsByPublishDate(manifest: Manifest, dateThreshold: Date, allowRules: Map<string, ParsedRule>): Manifest;

package/build/filtering/publishDate.js

@@ -0,0 +1,33 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+const require_types = require("./types.js");
+const require_matcher = require("./matcher.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+//#region src/filtering/publishDate.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:package-filter:filter");
+/**
+* Filter out all package versions that were published after dateThreshold.
+*/
+function filterVersionsByPublishDate(manifest, dateThreshold, allowRules) {
+	const allowMatch = require_matcher.matchRules(manifest, allowRules);
+	if (allowMatch && (allowMatch.type === require_types.MatchType.SCOPE || allowMatch.type === require_types.MatchType.PACKAGE)) return manifest;
+	const { versions, time, name } = manifest;
+	if (!time) throw new TypeError(`Time of publication was not provided for package ${name}`);
+	const whitelistedVersions = allowMatch ? allowMatch.versions : [];
+	const clearVersions = [];
+	Object.keys(versions).forEach((version) => {
+		if (whitelistedVersions.includes(version)) return;
+		const publishTime = time[version];
+		if (!publishTime) throw new TypeError(`Time of publication was not provided for package ${name}, version ${version}`);
+		if (new Date(publishTime) > dateThreshold) clearVersions.push(version);
+	});
+	clearVersions.forEach((version) => {
+		delete manifest.versions[version];
+	});
+	if (clearVersions.length > 0) debug$1("date filter removed %d versions from %s: %o", clearVersions.length, manifest.name, clearVersions);
+	return manifest;
+}
+//#endregion
+exports.filterVersionsByPublishDate = filterVersionsByPublishDate;
+
+//# sourceMappingURL=publishDate.js.map

package/build/filtering/publishDate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishDate.js","names":[],"sources":["../../src/filtering/publishDate.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all package versions that were published after dateThreshold.\n */\nexport function filterVersionsByPublishDate(\n  manifest: Manifest,\n  dateThreshold: Date,\n  allowRules: Map<string, ParsedRule>\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    return manifest;\n  }\n\n  const { versions, time, name } = manifest;\n\n  if (!time) {\n    throw new TypeError(`Time of publication was not provided for package ${name}`);\n  }\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  const clearVersions: string[] = [];\n\n  Object.keys(versions).forEach((version) => {\n    if (whitelistedVersions.includes(version)) {\n      return;\n    }\n\n    const publishTime = time[version];\n\n    if (!publishTime) {\n      throw new TypeError(\n        `Time of publication was not provided for package ${name}, version ${version}`\n      );\n    }\n\n    if (new Date(publishTime) > dateThreshold) {\n      // clear untrusted version\n      clearVersions.push(version);\n    }\n  });\n\n  // delete version from versions\n  clearVersions.forEach((version) => {\n    delete manifest.versions[version];\n  });\n\n  if (clearVersions.length > 0) {\n    debug(\n      'date filter removed %d versions from %s: %o',\n      clearVersions.length,\n      manifest.name,\n      clearVersions\n    );\n  }\n\n  return manifest;\n}\n"],"mappings":";;;;;;AAQA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;AAKjE,SAAgB,4BACd,UACA,eACA,YACU;CACV,MAAM,aAAa,gBAAA,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,cAAA,UAAU,SAAS,WAAW,SAAS,cAAA,UAAU,UAGtE,OAAO;CAGT,MAAM,EAAE,UAAU,MAAM,SAAS;CAEjC,IAAI,CAAC,MACH,MAAM,IAAI,UAAU,oDAAoD,MAAM;CAGhF,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,MAAM,gBAA0B,CAAC;CAEjC,OAAO,KAAK,QAAQ,EAAE,SAAS,YAAY;EACzC,IAAI,oBAAoB,SAAS,OAAO,GACtC;EAGF,MAAM,cAAc,KAAK;EAEzB,IAAI,CAAC,aACH,MAAM,IAAI,UACR,oDAAoD,KAAK,YAAY,SACvE;EAGF,IAAI,IAAI,KAAK,WAAW,IAAI,eAE1B,cAAc,KAAK,OAAO;CAE9B,CAAC;CAGD,cAAc,SAAS,YAAY;EACjC,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,IAAI,cAAc,SAAS,GACzB,QACE,+CACA,cAAc,QACd,SAAS,MACT,aACF;CAGF,OAAO;AACT"}

package/build/filtering/publishDate.mjs

@@ -0,0 +1,31 @@
+import { MatchType } from "./types.mjs";
+import { matchRules } from "./matcher.mjs";
+import buildDebug from "debug";
+//#region src/filtering/publishDate.ts
+var debug = buildDebug("verdaccio:plugin:package-filter:filter");
+/**
+* Filter out all package versions that were published after dateThreshold.
+*/
+function filterVersionsByPublishDate(manifest, dateThreshold, allowRules) {
+	const allowMatch = matchRules(manifest, allowRules);
+	if (allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)) return manifest;
+	const { versions, time, name } = manifest;
+	if (!time) throw new TypeError(`Time of publication was not provided for package ${name}`);
+	const whitelistedVersions = allowMatch ? allowMatch.versions : [];
+	const clearVersions = [];
+	Object.keys(versions).forEach((version) => {
+		if (whitelistedVersions.includes(version)) return;
+		const publishTime = time[version];
+		if (!publishTime) throw new TypeError(`Time of publication was not provided for package ${name}, version ${version}`);
+		if (new Date(publishTime) > dateThreshold) clearVersions.push(version);
+	});
+	clearVersions.forEach((version) => {
+		delete manifest.versions[version];
+	});
+	if (clearVersions.length > 0) debug("date filter removed %d versions from %s: %o", clearVersions.length, manifest.name, clearVersions);
+	return manifest;
+}
+//#endregion
+export { filterVersionsByPublishDate };
+
+//# sourceMappingURL=publishDate.mjs.map

package/build/filtering/publishDate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishDate.mjs","names":[],"sources":["../../src/filtering/publishDate.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all package versions that were published after dateThreshold.\n */\nexport function filterVersionsByPublishDate(\n  manifest: Manifest,\n  dateThreshold: Date,\n  allowRules: Map<string, ParsedRule>\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    return manifest;\n  }\n\n  const { versions, time, name } = manifest;\n\n  if (!time) {\n    throw new TypeError(`Time of publication was not provided for package ${name}`);\n  }\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  const clearVersions: string[] = [];\n\n  Object.keys(versions).forEach((version) => {\n    if (whitelistedVersions.includes(version)) {\n      return;\n    }\n\n    const publishTime = time[version];\n\n    if (!publishTime) {\n      throw new TypeError(\n        `Time of publication was not provided for package ${name}, version ${version}`\n      );\n    }\n\n    if (new Date(publishTime) > dateThreshold) {\n      // clear untrusted version\n      clearVersions.push(version);\n    }\n  });\n\n  // delete version from versions\n  clearVersions.forEach((version) => {\n    delete manifest.versions[version];\n  });\n\n  if (clearVersions.length > 0) {\n    debug(\n      'date filter removed %d versions from %s: %o',\n      clearVersions.length,\n      manifest.name,\n      clearVersions\n    );\n  }\n\n  return manifest;\n}\n"],"mappings":";;;;AAQA,IAAM,QAAQ,WAAW,wCAAwC;;;;AAKjE,SAAgB,4BACd,UACA,eACA,YACU;CACV,MAAM,aAAa,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU,UAGtE,OAAO;CAGT,MAAM,EAAE,UAAU,MAAM,SAAS;CAEjC,IAAI,CAAC,MACH,MAAM,IAAI,UAAU,oDAAoD,MAAM;CAGhF,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,MAAM,gBAA0B,CAAC;CAEjC,OAAO,KAAK,QAAQ,EAAE,SAAS,YAAY;EACzC,IAAI,oBAAoB,SAAS,OAAO,GACtC;EAGF,MAAM,cAAc,KAAK;EAEzB,IAAI,CAAC,aACH,MAAM,IAAI,UACR,oDAAoD,KAAK,YAAY,SACvE;EAGF,IAAI,IAAI,KAAK,WAAW,IAAI,eAE1B,cAAc,KAAK,OAAO;CAE9B,CAAC;CAGD,cAAc,SAAS,YAAY;EACjC,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,IAAI,cAAc,SAAS,GACzB,MACE,+CACA,cAAc,QACd,SAAS,MACT,aACF;CAGF,OAAO;AACT"}

package/build/filtering/types.d.ts

@@ -0,0 +1,24 @@
+import type { PackageScopeLevel, ParsedConfigRule } from '../config/types';
+export declare enum MatchType {
+    SCOPE = "scope",
+    PACKAGE = "package",
+    VERSIONS = "versions"
+}
+export interface MatchResultVersions {
+    versions: string[];
+}
+export interface MatchScopeResult extends MatchResultVersions {
+    type: MatchType.SCOPE;
+    rule: PackageScopeLevel;
+    scope: string;
+}
+export interface MatchPackageResult extends MatchResultVersions {
+    type: MatchType.PACKAGE;
+    rule: PackageScopeLevel;
+    package: string;
+}
+export interface MatchVersionsResult extends MatchResultVersions {
+    type: MatchType.VERSIONS;
+    rule: ParsedConfigRule;
+}
+export type MatchResult = MatchScopeResult | MatchPackageResult | MatchVersionsResult;

package/build/filtering/types.js

@@ -0,0 +1,11 @@
+//#region src/filtering/types.ts
+var MatchType = /* @__PURE__ */ function(MatchType) {
+	MatchType["SCOPE"] = "scope";
+	MatchType["PACKAGE"] = "package";
+	MatchType["VERSIONS"] = "versions";
+	return MatchType;
+}({});
+//#endregion
+exports.MatchType = MatchType;
+
+//# sourceMappingURL=types.js.map

package/build/filtering/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../../src/filtering/types.ts"],"sourcesContent":["import type { PackageScopeLevel, ParsedConfigRule } from '../config/types';\n\nexport enum MatchType {\n  SCOPE = 'scope',\n  PACKAGE = 'package',\n  VERSIONS = 'versions',\n}\n\nexport interface MatchResultVersions {\n  versions: string[];\n}\n\nexport interface MatchScopeResult extends MatchResultVersions {\n  type: MatchType.SCOPE;\n  rule: PackageScopeLevel;\n  scope: string;\n}\n\nexport interface MatchPackageResult extends MatchResultVersions {\n  type: MatchType.PACKAGE;\n  rule: PackageScopeLevel;\n  package: string;\n}\n\nexport interface MatchVersionsResult extends MatchResultVersions {\n  type: MatchType.VERSIONS;\n  rule: ParsedConfigRule;\n}\n\nexport type MatchResult = MatchScopeResult | MatchPackageResult | MatchVersionsResult;\n"],"mappings":";AAEA,IAAY,YAAL,yBAAA,WAAA;CACL,UAAA,WAAA;CACA,UAAA,aAAA;CACA,UAAA,cAAA;;AACF,EAAA,CAAA,CAAA"}

package/build/filtering/types.mjs

@@ -0,0 +1,11 @@
+//#region src/filtering/types.ts
+var MatchType = /* @__PURE__ */ function(MatchType) {
+	MatchType["SCOPE"] = "scope";
+	MatchType["PACKAGE"] = "package";
+	MatchType["VERSIONS"] = "versions";
+	return MatchType;
+}({});
+//#endregion
+export { MatchType };
+
+//# sourceMappingURL=types.mjs.map

package/build/filtering/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","names":[],"sources":["../../src/filtering/types.ts"],"sourcesContent":["import type { PackageScopeLevel, ParsedConfigRule } from '../config/types';\n\nexport enum MatchType {\n  SCOPE = 'scope',\n  PACKAGE = 'package',\n  VERSIONS = 'versions',\n}\n\nexport interface MatchResultVersions {\n  versions: string[];\n}\n\nexport interface MatchScopeResult extends MatchResultVersions {\n  type: MatchType.SCOPE;\n  rule: PackageScopeLevel;\n  scope: string;\n}\n\nexport interface MatchPackageResult extends MatchResultVersions {\n  type: MatchType.PACKAGE;\n  rule: PackageScopeLevel;\n  package: string;\n}\n\nexport interface MatchVersionsResult extends MatchResultVersions {\n  type: MatchType.VERSIONS;\n  rule: ParsedConfigRule;\n}\n\nexport type MatchResult = MatchScopeResult | MatchPackageResult | MatchVersionsResult;\n"],"mappings":";AAEA,IAAY,YAAL,yBAAA,WAAA;CACL,UAAA,WAAA;CACA,UAAA,aAAA;CACA,UAAA,cAAA;;AACF,EAAA,CAAA,CAAA"}

package/build/index.d.ts

@@ -0,0 +1,3 @@
+import { PackageFilterPlugin } from './packageFilter';
+export { PackageFilterPlugin };
+export default PackageFilterPlugin;