@verdaccio/package-filter 14.0.0-next-9.55 → 14.0.0-next-9.56

package/README.md

@@ -69,18 +69,20 @@ When both `minAgeDays` and `dateThreshold` are set, the **earlier** cutoff wins
 
 ### Block by Scope
 
-Block all packages under a scope.
+Block all packages under a scope. Scope values can be exact names or glob patterns.
+Scope globs are matched against only the extracted scope name, for example `@babel`, so use patterns like `@babel*` or `@my-org-*` instead of `@babel/*`.
 
 ```yaml
 filters:
   '@verdaccio/package-filter':
     block:
       - scope: '@evilscope'
+      - scope: '@my-org-*'
 ```
 
 ### Block by Package Name
 
-Block all versions of a specific package.
+Block all versions of a specific package. Package values can be exact names or glob patterns.
 
 ```yaml
 filters:
@@ -88,11 +90,13 @@ filters:
     block:
       - package: 'malicious-pkg'
       - package: '@coolauthor/stolen'
+      - package: 'react-*'
+      - package: '@legacy/*'
 ```
 
 ### Block by Version Range
 
-Block specific semver ranges of a package. Uses [semver](https://www.npmjs.com/package/semver) syntax.
+Block specific semver ranges of a package. Package values can be exact names or glob patterns. Version ranges use [semver](https://www.npmjs.com/package/semver) syntax.
 
 ```yaml
 filters:
@@ -100,6 +104,8 @@ filters:
     block:
       - package: '@coolauthor/stolen'
         versions: '>2.0.1'
+      - package: '@legacy/*'
+        versions: '>=3.0.0'
 ```
 
 Multiple version ranges for the same package are merged:
@@ -161,11 +167,11 @@ filters:
 
 Allow rules are checked before block rules. The granularity levels:
 
-| Allow rule                           | Effect                              |
-| ------------------------------------ | ----------------------------------- |
-| `scope: '@x'`                        | Entire scope bypasses all rules     |
-| `package: 'x'`                       | Entire package bypasses all rules   |
-| `package: 'x'` + `versions: '1.0.0'` | Only matching versions are exempted |
+| Allow rule                           | Effect                                     |
+| ------------------------------------ | ------------------------------------------ |
+| `scope: '@x'` or `scope: '@x-*'`     | Entire matching scope bypasses all rules   |
+| `package: 'x'` or `package: 'x-*'`   | Entire matching package bypasses all rules |
+| `package: 'x'` + `versions: '1.0.0'` | Only matching versions are exempted        |
 
 ### Full Example
 

package/build/config/parser.js

@@ -1,4 +1,5 @@
 const require_runtime = require("../_virtual/_rolldown/runtime.js");
+const require_matcher = require("../filtering/matcher.js");
 let debug = require("debug");
 debug = require_runtime.__toESM(debug);
 let semver = require("semver");
@@ -28,6 +29,7 @@ function parseConfigRules(configRules) {
 		}
 		throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);
 	}
+	require_matcher.prepareRules(ruleMap);
 	return ruleMap;
 }
 function parseConfig(config) {

package/build/config/parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"parser.js","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  const excludeDeprecated = config.excludeDeprecated === true;\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    excludeDeprecated,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;;;AAKA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,OAAA,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,QAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,QAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,MAAM,oBAAoB,OAAO,sBAAsB;CAEvD,OAAO;EACL;EACA;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}
+{"version":3,"file":"parser.js","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport { prepareRules } from '../filtering/matcher';\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  prepareRules(ruleMap);\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  const excludeDeprecated = config.excludeDeprecated === true;\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    excludeDeprecated,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;;;;AAMA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,OAAA,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,gBAAA,aAAa,OAAO;CACpB,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,QAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,QAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,MAAM,oBAAoB,OAAO,sBAAsB;CAEvD,OAAO;EACL;EACA;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}

package/build/config/parser.mjs

@@ -1,3 +1,4 @@
+import { prepareRules } from "../filtering/matcher.mjs";
 import buildDebug from "debug";
 import { Range } from "semver";
 //#region src/config/parser.ts
@@ -26,6 +27,7 @@ function parseConfigRules(configRules) {
 		}
 		throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);
 	}
+	prepareRules(ruleMap);
 	return ruleMap;
 }
 function parseConfig(config) {

package/build/config/parser.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"parser.mjs","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  const excludeDeprecated = config.excludeDeprecated === true;\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    excludeDeprecated,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,MAAM,oBAAoB,OAAO,sBAAsB;CAEvD,OAAO;EACL;EACA;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}
+{"version":3,"file":"parser.mjs","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport { prepareRules } from '../filtering/matcher';\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  prepareRules(ruleMap);\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  const excludeDeprecated = config.excludeDeprecated === true;\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    excludeDeprecated,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;;AAMA,IAAM,QAAQ,WAAW,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,aAAa,OAAO;CACpB,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,MAAM,oBAAoB,OAAO,sBAAsB;CAEvD,OAAO;EACL;EACA;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}

package/build/config/types.d.ts

@@ -34,7 +34,7 @@ export interface ParsedConfigRule {
     versions: Range[];
     strategy?: BlockStrategy;
 }
-export type PackageScopeLevel = 'scope' | 'package' | undefined;
+export type PackageScopeLevel = 'scope' | 'package';
 export type ParsedRule = ParsedConfigRule | PackageScopeLevel;
 export interface ParsedConfig {
     dateThreshold: Date | null;

package/build/filtering/matcher.d.ts

@@ -1,9 +1,14 @@
 import type { Manifest } from '@verdaccio/types';
 import type { ParsedRule } from '../config/types';
 import type { MatchResult } from './types';
+/**
+ * Cache the compiled glob rules for a rule map. Call again after changing the map.
+ */
+export declare function prepareRules(rules: Map<string, ParsedRule>): void;
 /**
  * Try to find a rule that matches the package.
  * If found, returns the rule and the matched package versions from the manifest.
+ * Rule maps are cached; call prepareRules after modifying them.
  */
 export declare function matchRules(manifest: Manifest, rules: Map<string, ParsedRule>): MatchResult | undefined;
 /**

package/build/filtering/matcher.js

@@ -3,8 +3,71 @@ const require_types = require("./types.js");
 let debug = require("debug");
 debug = require_runtime.__toESM(debug);
 let semver = require("semver");
+let minimatch = require("minimatch");
 //#region src/filtering/matcher.ts
 var debug$1 = (0, debug.default)("verdaccio:plugin:package-filter:filter");
+var compiledGlobRules = /* @__PURE__ */ new WeakMap();
+var globMagic = /[\\*?[\]{}!]|[+@]\(/;
+/**
+* Compile patterns requiring glob or escape handling, grouped by rule type.
+*/
+function compileGlobRules(rules) {
+	const compiled = {
+		packages: [],
+		scopes: []
+	};
+	for (const [pattern, rule] of rules) {
+		if (!globMagic.test(pattern)) continue;
+		const compiledRule = {
+			pattern,
+			matcher: new minimatch.Minimatch(pattern),
+			rule
+		};
+		if (rule === "scope") compiled.scopes.push(compiledRule);
+		else compiled.packages.push(compiledRule);
+	}
+	return compiled;
+}
+/**
+* Cache the compiled glob rules for a rule map. Call again after changing the map.
+*/
+function prepareRules(rules) {
+	compiledGlobRules.set(rules, compileGlobRules(rules));
+}
+/**
+* Return cached glob rules, compiling and caching unprepared maps on first use.
+*/
+function getCompiledGlobRules(rules) {
+	let compiled = compiledGlobRules.get(rules);
+	if (!compiled) {
+		compiled = compileGlobRules(rules);
+		compiledGlobRules.set(rules, compiled);
+	}
+	return compiled;
+}
+function findScopeRule(scope, rules) {
+	if (!scope) return;
+	const exactRule = rules.get(scope);
+	if (exactRule === "scope") return {
+		scope,
+		rule: exactRule
+	};
+	for (const { pattern, matcher } of getCompiledGlobRules(rules).scopes) if (matcher.match(scope)) return {
+		scope: pattern,
+		rule: "scope"
+	};
+}
+function findPackageRule(packageName, rules) {
+	const exactRule = rules.get(packageName);
+	if (exactRule) return {
+		pattern: packageName,
+		rule: exactRule
+	};
+	for (const { pattern, matcher, rule } of getCompiledGlobRules(rules).packages) if (matcher.match(packageName)) return {
+		pattern,
+		rule
+	};
+}
 /**
 * Split a package name into name itself and scope.
 */
@@ -20,29 +83,31 @@ function splitName(name) {
 /**
 * Try to find a rule that matches the package.
 * If found, returns the rule and the matched package versions from the manifest.
+* Rule maps are cached; call prepareRules after modifying them.
 */
 function matchRules(manifest, rules) {
-	const { scope } = splitName(manifest.name);
-	if (scope) {
-		const rule = rules.get(scope);
-		if (rule === "scope") {
-			debug$1("scope match: %s matched rule for %s", manifest.name, scope);
-			return {
-				type: require_types.MatchType.SCOPE,
-				rule,
-				scope,
-				versions: Object.keys(manifest.versions)
-			};
-		}
+	const packageName = manifest.name;
+	if (!packageName) return;
+	const { scope } = splitName(packageName);
+	const scopeMatch = findScopeRule(scope, rules);
+	if (scopeMatch) {
+		debug$1("scope match: %s matched rule for %s", packageName, scopeMatch.scope);
+		return {
+			type: require_types.MatchType.SCOPE,
+			rule: scopeMatch.rule,
+			scope: scopeMatch.scope,
+			versions: Object.keys(manifest.versions)
+		};
 	}
-	const rule = rules.get(manifest.name);
-	if (!rule) return;
+	const packageMatch = findPackageRule(packageName, rules);
+	if (!packageMatch) return;
+	const { rule } = packageMatch;
 	if (rule === "package") {
-		debug$1("package match: %s", manifest.name);
+		debug$1("package match: %s matched rule for %s", packageName, packageMatch.pattern);
 		return {
 			type: require_types.MatchType.PACKAGE,
 			rule,
-			package: manifest.name,
+			package: packageMatch.pattern,
 			versions: Object.keys(manifest.versions)
 		};
 	}
@@ -78,6 +143,7 @@ function resolveAllowList(allowMatch) {
 }
 //#endregion
 exports.matchRules = matchRules;
+exports.prepareRules = prepareRules;
 exports.resolveAllowList = resolveAllowList;
 
 //# sourceMappingURL=matcher.js.map

package/build/filtering/matcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"matcher.js","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n\n/**\n * Derive the allow-list outcome from a precomputed allow-rule match:\n * whether the whole package/scope is allow-listed, and which versions\n * (if any) are individually whitelisted.\n */\nexport function resolveAllowList(allowMatch: MatchResult | undefined): {\n  allowAll: boolean;\n  whitelistedVersions: string[];\n} {\n  const allowAll =\n    !!allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE);\n  return { allowAll, whitelistedVersions: allowMatch?.versions ?? [] };\n}\n"],"mappings":";;;;;;AASA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,wCAAwC;;;;AAKjE,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;AAMA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,IAAI;CACzC,IAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,IAAI,SAAS,SAAS;GACpB,QAAM,uCAAuC,SAAS,MAAM,KAAK;GACjE,OAAO;IACL,MAAM,cAAA,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,QAAQ;GACzC;EACF;CACF;CAEA,MAAM,OAAO,MAAM,IAAI,SAAS,IAAI;CACpC,IAAI,CAAC,MAEH;CAGF,IAAI,SAAS,WAAW;EACtB,QAAM,qBAAqB,SAAS,IAAI;EACxC,OAAO;GACL,MAAM,cAAA,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,KAAA,GACE,OAAA,UAAA,CAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,QACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,cAAA,UAAU;EAChB;EACA,UAAU;CACZ;AACF;;;;;;AAOA,SAAgB,iBAAiB,YAG/B;CAGA,OAAO;EAAE,UADP,CAAC,CAAC,eAAe,WAAW,SAAS,cAAA,UAAU,SAAS,WAAW,SAAS,cAAA,UAAU;EACrE,qBAAqB,YAAY,YAAY,CAAC;CAAE;AACrE"}
+{"version":3,"file":"matcher.js","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Minimatch } from 'minimatch';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\ninterface CompiledGlobRule {\n  pattern: string;\n  matcher: Minimatch;\n  rule: ParsedRule;\n}\n\ninterface CompiledGlobRules {\n  packages: CompiledGlobRule[];\n  scopes: CompiledGlobRule[];\n}\n\nconst compiledGlobRules = new WeakMap<Map<string, ParsedRule>, CompiledGlobRules>();\nconst globMagic = /[\\\\*?[\\]{}!]|[+@]\\(/;\n\n/**\n * Compile patterns requiring glob or escape handling, grouped by rule type.\n */\nfunction compileGlobRules(rules: Map<string, ParsedRule>): CompiledGlobRules {\n  const compiled: CompiledGlobRules = { packages: [], scopes: [] };\n\n  for (const [pattern, rule] of rules) {\n    if (!globMagic.test(pattern)) {\n      continue;\n    }\n\n    const matcher = new Minimatch(pattern);\n    const compiledRule = { pattern, matcher, rule };\n    if (rule === 'scope') {\n      compiled.scopes.push(compiledRule);\n    } else {\n      compiled.packages.push(compiledRule);\n    }\n  }\n\n  return compiled;\n}\n\n/**\n * Cache the compiled glob rules for a rule map. Call again after changing the map.\n */\nexport function prepareRules(rules: Map<string, ParsedRule>): void {\n  compiledGlobRules.set(rules, compileGlobRules(rules));\n}\n\n/**\n * Return cached glob rules, compiling and caching unprepared maps on first use.\n */\nfunction getCompiledGlobRules(rules: Map<string, ParsedRule>): CompiledGlobRules {\n  let compiled = compiledGlobRules.get(rules);\n  if (!compiled) {\n    compiled = compileGlobRules(rules);\n    compiledGlobRules.set(rules, compiled);\n  }\n\n  return compiled;\n}\n\nfunction findScopeRule(\n  scope: string | undefined,\n  rules: Map<string, ParsedRule>\n): { scope: string; rule: 'scope' } | undefined {\n  if (!scope) {\n    return undefined;\n  }\n\n  const exactRule = rules.get(scope);\n  if (exactRule === 'scope') {\n    return { scope, rule: exactRule };\n  }\n\n  for (const { pattern, matcher } of getCompiledGlobRules(rules).scopes) {\n    if (matcher.match(scope)) {\n      return { scope: pattern, rule: 'scope' };\n    }\n  }\n\n  return undefined;\n}\n\nfunction findPackageRule(\n  packageName: string,\n  rules: Map<string, ParsedRule>\n): { pattern: string; rule: ParsedRule } | undefined {\n  const exactRule = rules.get(packageName);\n  if (exactRule) {\n    return { pattern: packageName, rule: exactRule };\n  }\n\n  for (const { pattern, matcher, rule } of getCompiledGlobRules(rules).packages) {\n    if (matcher.match(packageName)) {\n      return { pattern, rule };\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n * Rule maps are cached; call prepareRules after modifying them.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const packageName = manifest.name;\n  if (!packageName) {\n    return undefined;\n  }\n\n  const { scope } = splitName(packageName);\n  const scopeMatch = findScopeRule(scope, rules);\n  if (scopeMatch) {\n    debug('scope match: %s matched rule for %s', packageName, scopeMatch.scope);\n    return {\n      type: MatchType.SCOPE,\n      rule: scopeMatch.rule,\n      scope: scopeMatch.scope,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  const packageMatch = findPackageRule(packageName, rules);\n  if (!packageMatch) {\n    // No match\n    return undefined;\n  }\n  const { rule } = packageMatch;\n\n  if (rule === 'package') {\n    debug('package match: %s matched rule for %s', packageName, packageMatch.pattern);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: packageMatch.pattern,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n\n/**\n * Derive the allow-list outcome from a precomputed allow-rule match:\n * whether the whole package/scope is allow-listed, and which versions\n * (if any) are individually whitelisted.\n */\nexport function resolveAllowList(allowMatch: MatchResult | undefined): {\n  allowAll: boolean;\n  whitelistedVersions: string[];\n} {\n  const allowAll =\n    !!allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE);\n  return { allowAll, whitelistedVersions: allowMatch?.versions ?? [] };\n}\n"],"mappings":";;;;;;;AAUA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,wCAAwC;AAajE,IAAM,oCAAoB,IAAI,QAAoD;AAClF,IAAM,YAAY;;;;AAKlB,SAAS,iBAAiB,OAAmD;CAC3E,MAAM,WAA8B;EAAE,UAAU,CAAC;EAAG,QAAQ,CAAC;CAAE;CAE/D,KAAK,MAAM,CAAC,SAAS,SAAS,OAAO;EACnC,IAAI,CAAC,UAAU,KAAK,OAAO,GACzB;EAIF,MAAM,eAAe;GAAE;GAAS,SAAA,IADZ,UAAA,UAAU,OACE;GAAS;EAAK;EAC9C,IAAI,SAAS,SACX,SAAS,OAAO,KAAK,YAAY;OAEjC,SAAS,SAAS,KAAK,YAAY;CAEvC;CAEA,OAAO;AACT;;;;AAKA,SAAgB,aAAa,OAAsC;CACjE,kBAAkB,IAAI,OAAO,iBAAiB,KAAK,CAAC;AACtD;;;;AAKA,SAAS,qBAAqB,OAAmD;CAC/E,IAAI,WAAW,kBAAkB,IAAI,KAAK;CAC1C,IAAI,CAAC,UAAU;EACb,WAAW,iBAAiB,KAAK;EACjC,kBAAkB,IAAI,OAAO,QAAQ;CACvC;CAEA,OAAO;AACT;AAEA,SAAS,cACP,OACA,OAC8C;CAC9C,IAAI,CAAC,OACH;CAGF,MAAM,YAAY,MAAM,IAAI,KAAK;CACjC,IAAI,cAAc,SAChB,OAAO;EAAE;EAAO,MAAM;CAAU;CAGlC,KAAK,MAAM,EAAE,SAAS,aAAa,qBAAqB,KAAK,CAAC,CAAC,QAC7D,IAAI,QAAQ,MAAM,KAAK,GACrB,OAAO;EAAE,OAAO;EAAS,MAAM;CAAQ;AAK7C;AAEA,SAAS,gBACP,aACA,OACmD;CACnD,MAAM,YAAY,MAAM,IAAI,WAAW;CACvC,IAAI,WACF,OAAO;EAAE,SAAS;EAAa,MAAM;CAAU;CAGjD,KAAK,MAAM,EAAE,SAAS,SAAS,UAAU,qBAAqB,KAAK,CAAC,CAAC,UACnE,IAAI,QAAQ,MAAM,WAAW,GAC3B,OAAO;EAAE;EAAS;CAAK;AAK7B;;;;AAKA,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;;AAOA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,cAAc,SAAS;CAC7B,IAAI,CAAC,aACH;CAGF,MAAM,EAAE,UAAU,UAAU,WAAW;CACvC,MAAM,aAAa,cAAc,OAAO,KAAK;CAC7C,IAAI,YAAY;EACd,QAAM,uCAAuC,aAAa,WAAW,KAAK;EAC1E,OAAO;GACL,MAAM,cAAA,UAAU;GAChB,MAAM,WAAW;GACjB,OAAO,WAAW;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,MAAM,eAAe,gBAAgB,aAAa,KAAK;CACvD,IAAI,CAAC,cAEH;CAEF,MAAM,EAAE,SAAS;CAEjB,IAAI,SAAS,WAAW;EACtB,QAAM,yCAAyC,aAAa,aAAa,OAAO;EAChF,OAAO;GACL,MAAM,cAAA,UAAU;GAChB;GACA,SAAS,aAAa;GACtB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,KAAA,GACE,OAAA,UAAA,CAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,QACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,cAAA,UAAU;EAChB;EACA,UAAU;CACZ;AACF;;;;;;AAOA,SAAgB,iBAAiB,YAG/B;CAGA,OAAO;EAAE,UADP,CAAC,CAAC,eAAe,WAAW,SAAS,cAAA,UAAU,SAAS,WAAW,SAAS,cAAA,UAAU;EACrE,qBAAqB,YAAY,YAAY,CAAC;CAAE;AACrE"}

package/build/filtering/matcher.mjs

@@ -1,8 +1,71 @@
 import { MatchType } from "./types.mjs";
 import buildDebug from "debug";
 import { satisfies } from "semver";
+import { Minimatch } from "minimatch";
 //#region src/filtering/matcher.ts
 var debug = buildDebug("verdaccio:plugin:package-filter:filter");
+var compiledGlobRules = /* @__PURE__ */ new WeakMap();
+var globMagic = /[\\*?[\]{}!]|[+@]\(/;
+/**
+* Compile patterns requiring glob or escape handling, grouped by rule type.
+*/
+function compileGlobRules(rules) {
+	const compiled = {
+		packages: [],
+		scopes: []
+	};
+	for (const [pattern, rule] of rules) {
+		if (!globMagic.test(pattern)) continue;
+		const compiledRule = {
+			pattern,
+			matcher: new Minimatch(pattern),
+			rule
+		};
+		if (rule === "scope") compiled.scopes.push(compiledRule);
+		else compiled.packages.push(compiledRule);
+	}
+	return compiled;
+}
+/**
+* Cache the compiled glob rules for a rule map. Call again after changing the map.
+*/
+function prepareRules(rules) {
+	compiledGlobRules.set(rules, compileGlobRules(rules));
+}
+/**
+* Return cached glob rules, compiling and caching unprepared maps on first use.
+*/
+function getCompiledGlobRules(rules) {
+	let compiled = compiledGlobRules.get(rules);
+	if (!compiled) {
+		compiled = compileGlobRules(rules);
+		compiledGlobRules.set(rules, compiled);
+	}
+	return compiled;
+}
+function findScopeRule(scope, rules) {
+	if (!scope) return;
+	const exactRule = rules.get(scope);
+	if (exactRule === "scope") return {
+		scope,
+		rule: exactRule
+	};
+	for (const { pattern, matcher } of getCompiledGlobRules(rules).scopes) if (matcher.match(scope)) return {
+		scope: pattern,
+		rule: "scope"
+	};
+}
+function findPackageRule(packageName, rules) {
+	const exactRule = rules.get(packageName);
+	if (exactRule) return {
+		pattern: packageName,
+		rule: exactRule
+	};
+	for (const { pattern, matcher, rule } of getCompiledGlobRules(rules).packages) if (matcher.match(packageName)) return {
+		pattern,
+		rule
+	};
+}
 /**
 * Split a package name into name itself and scope.
 */
@@ -18,29 +81,31 @@ function splitName(name) {
 /**
 * Try to find a rule that matches the package.
 * If found, returns the rule and the matched package versions from the manifest.
+* Rule maps are cached; call prepareRules after modifying them.
 */
 function matchRules(manifest, rules) {
-	const { scope } = splitName(manifest.name);
-	if (scope) {
-		const rule = rules.get(scope);
-		if (rule === "scope") {
-			debug("scope match: %s matched rule for %s", manifest.name, scope);
-			return {
-				type: MatchType.SCOPE,
-				rule,
-				scope,
-				versions: Object.keys(manifest.versions)
-			};
-		}
+	const packageName = manifest.name;
+	if (!packageName) return;
+	const { scope } = splitName(packageName);
+	const scopeMatch = findScopeRule(scope, rules);
+	if (scopeMatch) {
+		debug("scope match: %s matched rule for %s", packageName, scopeMatch.scope);
+		return {
+			type: MatchType.SCOPE,
+			rule: scopeMatch.rule,
+			scope: scopeMatch.scope,
+			versions: Object.keys(manifest.versions)
+		};
 	}
-	const rule = rules.get(manifest.name);
-	if (!rule) return;
+	const packageMatch = findPackageRule(packageName, rules);
+	if (!packageMatch) return;
+	const { rule } = packageMatch;
 	if (rule === "package") {
-		debug("package match: %s", manifest.name);
+		debug("package match: %s matched rule for %s", packageName, packageMatch.pattern);
 		return {
 			type: MatchType.PACKAGE,
 			rule,
-			package: manifest.name,
+			package: packageMatch.pattern,
 			versions: Object.keys(manifest.versions)
 		};
 	}
@@ -75,6 +140,6 @@ function resolveAllowList(allowMatch) {
 	};
 }
 //#endregion
-export { matchRules, resolveAllowList };
+export { matchRules, prepareRules, resolveAllowList };
 
 //# sourceMappingURL=matcher.mjs.map

package/build/filtering/matcher.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"matcher.mjs","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n\n/**\n * Derive the allow-list outcome from a precomputed allow-rule match:\n * whether the whole package/scope is allow-listed, and which versions\n * (if any) are individually whitelisted.\n */\nexport function resolveAllowList(allowMatch: MatchResult | undefined): {\n  allowAll: boolean;\n  whitelistedVersions: string[];\n} {\n  const allowAll =\n    !!allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE);\n  return { allowAll, whitelistedVersions: allowMatch?.versions ?? [] };\n}\n"],"mappings":";;;;AASA,IAAM,QAAQ,WAAW,wCAAwC;;;;AAKjE,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;AAMA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,IAAI;CACzC,IAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,IAAI,SAAS,SAAS;GACpB,MAAM,uCAAuC,SAAS,MAAM,KAAK;GACjE,OAAO;IACL,MAAM,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,QAAQ;GACzC;EACF;CACF;CAEA,MAAM,OAAO,MAAM,IAAI,SAAS,IAAI;CACpC,IAAI,CAAC,MAEH;CAGF,IAAI,SAAS,WAAW;EACtB,MAAM,qBAAqB,SAAS,IAAI;EACxC,OAAO;GACL,MAAM,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,IACE,UAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,MACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,UAAU;EAChB;EACA,UAAU;CACZ;AACF;;;;;;AAOA,SAAgB,iBAAiB,YAG/B;CAGA,OAAO;EAAE,UADP,CAAC,CAAC,eAAe,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU;EACrE,qBAAqB,YAAY,YAAY,CAAC;CAAE;AACrE"}
+{"version":3,"file":"matcher.mjs","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Minimatch } from 'minimatch';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\ninterface CompiledGlobRule {\n  pattern: string;\n  matcher: Minimatch;\n  rule: ParsedRule;\n}\n\ninterface CompiledGlobRules {\n  packages: CompiledGlobRule[];\n  scopes: CompiledGlobRule[];\n}\n\nconst compiledGlobRules = new WeakMap<Map<string, ParsedRule>, CompiledGlobRules>();\nconst globMagic = /[\\\\*?[\\]{}!]|[+@]\\(/;\n\n/**\n * Compile patterns requiring glob or escape handling, grouped by rule type.\n */\nfunction compileGlobRules(rules: Map<string, ParsedRule>): CompiledGlobRules {\n  const compiled: CompiledGlobRules = { packages: [], scopes: [] };\n\n  for (const [pattern, rule] of rules) {\n    if (!globMagic.test(pattern)) {\n      continue;\n    }\n\n    const matcher = new Minimatch(pattern);\n    const compiledRule = { pattern, matcher, rule };\n    if (rule === 'scope') {\n      compiled.scopes.push(compiledRule);\n    } else {\n      compiled.packages.push(compiledRule);\n    }\n  }\n\n  return compiled;\n}\n\n/**\n * Cache the compiled glob rules for a rule map. Call again after changing the map.\n */\nexport function prepareRules(rules: Map<string, ParsedRule>): void {\n  compiledGlobRules.set(rules, compileGlobRules(rules));\n}\n\n/**\n * Return cached glob rules, compiling and caching unprepared maps on first use.\n */\nfunction getCompiledGlobRules(rules: Map<string, ParsedRule>): CompiledGlobRules {\n  let compiled = compiledGlobRules.get(rules);\n  if (!compiled) {\n    compiled = compileGlobRules(rules);\n    compiledGlobRules.set(rules, compiled);\n  }\n\n  return compiled;\n}\n\nfunction findScopeRule(\n  scope: string | undefined,\n  rules: Map<string, ParsedRule>\n): { scope: string; rule: 'scope' } | undefined {\n  if (!scope) {\n    return undefined;\n  }\n\n  const exactRule = rules.get(scope);\n  if (exactRule === 'scope') {\n    return { scope, rule: exactRule };\n  }\n\n  for (const { pattern, matcher } of getCompiledGlobRules(rules).scopes) {\n    if (matcher.match(scope)) {\n      return { scope: pattern, rule: 'scope' };\n    }\n  }\n\n  return undefined;\n}\n\nfunction findPackageRule(\n  packageName: string,\n  rules: Map<string, ParsedRule>\n): { pattern: string; rule: ParsedRule } | undefined {\n  const exactRule = rules.get(packageName);\n  if (exactRule) {\n    return { pattern: packageName, rule: exactRule };\n  }\n\n  for (const { pattern, matcher, rule } of getCompiledGlobRules(rules).packages) {\n    if (matcher.match(packageName)) {\n      return { pattern, rule };\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n * Rule maps are cached; call prepareRules after modifying them.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const packageName = manifest.name;\n  if (!packageName) {\n    return undefined;\n  }\n\n  const { scope } = splitName(packageName);\n  const scopeMatch = findScopeRule(scope, rules);\n  if (scopeMatch) {\n    debug('scope match: %s matched rule for %s', packageName, scopeMatch.scope);\n    return {\n      type: MatchType.SCOPE,\n      rule: scopeMatch.rule,\n      scope: scopeMatch.scope,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  const packageMatch = findPackageRule(packageName, rules);\n  if (!packageMatch) {\n    // No match\n    return undefined;\n  }\n  const { rule } = packageMatch;\n\n  if (rule === 'package') {\n    debug('package match: %s matched rule for %s', packageName, packageMatch.pattern);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: packageMatch.pattern,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n\n/**\n * Derive the allow-list outcome from a precomputed allow-rule match:\n * whether the whole package/scope is allow-listed, and which versions\n * (if any) are individually whitelisted.\n */\nexport function resolveAllowList(allowMatch: MatchResult | undefined): {\n  allowAll: boolean;\n  whitelistedVersions: string[];\n} {\n  const allowAll =\n    !!allowMatch && (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE);\n  return { allowAll, whitelistedVersions: allowMatch?.versions ?? [] };\n}\n"],"mappings":";;;;;AAUA,IAAM,QAAQ,WAAW,wCAAwC;AAajE,IAAM,oCAAoB,IAAI,QAAoD;AAClF,IAAM,YAAY;;;;AAKlB,SAAS,iBAAiB,OAAmD;CAC3E,MAAM,WAA8B;EAAE,UAAU,CAAC;EAAG,QAAQ,CAAC;CAAE;CAE/D,KAAK,MAAM,CAAC,SAAS,SAAS,OAAO;EACnC,IAAI,CAAC,UAAU,KAAK,OAAO,GACzB;EAIF,MAAM,eAAe;GAAE;GAAS,SAAA,IADZ,UAAU,OACE;GAAS;EAAK;EAC9C,IAAI,SAAS,SACX,SAAS,OAAO,KAAK,YAAY;OAEjC,SAAS,SAAS,KAAK,YAAY;CAEvC;CAEA,OAAO;AACT;;;;AAKA,SAAgB,aAAa,OAAsC;CACjE,kBAAkB,IAAI,OAAO,iBAAiB,KAAK,CAAC;AACtD;;;;AAKA,SAAS,qBAAqB,OAAmD;CAC/E,IAAI,WAAW,kBAAkB,IAAI,KAAK;CAC1C,IAAI,CAAC,UAAU;EACb,WAAW,iBAAiB,KAAK;EACjC,kBAAkB,IAAI,OAAO,QAAQ;CACvC;CAEA,OAAO;AACT;AAEA,SAAS,cACP,OACA,OAC8C;CAC9C,IAAI,CAAC,OACH;CAGF,MAAM,YAAY,MAAM,IAAI,KAAK;CACjC,IAAI,cAAc,SAChB,OAAO;EAAE;EAAO,MAAM;CAAU;CAGlC,KAAK,MAAM,EAAE,SAAS,aAAa,qBAAqB,KAAK,CAAC,CAAC,QAC7D,IAAI,QAAQ,MAAM,KAAK,GACrB,OAAO;EAAE,OAAO;EAAS,MAAM;CAAQ;AAK7C;AAEA,SAAS,gBACP,aACA,OACmD;CACnD,MAAM,YAAY,MAAM,IAAI,WAAW;CACvC,IAAI,WACF,OAAO;EAAE,SAAS;EAAa,MAAM;CAAU;CAGjD,KAAK,MAAM,EAAE,SAAS,SAAS,UAAU,qBAAqB,KAAK,CAAC,CAAC,UACnE,IAAI,QAAQ,MAAM,WAAW,GAC3B,OAAO;EAAE;EAAS;CAAK;AAK7B;;;;AAKA,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;;AAOA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,cAAc,SAAS;CAC7B,IAAI,CAAC,aACH;CAGF,MAAM,EAAE,UAAU,UAAU,WAAW;CACvC,MAAM,aAAa,cAAc,OAAO,KAAK;CAC7C,IAAI,YAAY;EACd,MAAM,uCAAuC,aAAa,WAAW,KAAK;EAC1E,OAAO;GACL,MAAM,UAAU;GAChB,MAAM,WAAW;GACjB,OAAO,WAAW;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,MAAM,eAAe,gBAAgB,aAAa,KAAK;CACvD,IAAI,CAAC,cAEH;CAEF,MAAM,EAAE,SAAS;CAEjB,IAAI,SAAS,WAAW;EACtB,MAAM,yCAAyC,aAAa,aAAa,OAAO;EAChF,OAAO;GACL,MAAM,UAAU;GAChB;GACA,SAAS,aAAa;GACtB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,CAAC,CAAC,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,IACE,UAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,MACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,UAAU;EAChB;EACA,UAAU;CACZ;AACF;;;;;;AAOA,SAAgB,iBAAiB,YAG/B;CAGA,OAAO;EAAE,UADP,CAAC,CAAC,eAAe,WAAW,SAAS,UAAU,SAAS,WAAW,SAAS,UAAU;EACrE,qBAAqB,YAAY,YAAY,CAAC;CAAE;AACrE"}

package/build/packageFilter.js

@@ -1,6 +1,6 @@
 const require_runtime = require("./_virtual/_rolldown/runtime.js");
-const require_parser = require("./config/parser.js");
 const require_matcher = require("./filtering/matcher.js");
+const require_parser = require("./config/parser.js");
 const require_deprecated = require("./filtering/deprecated.js");
 const require_packageVersion = require("./filtering/packageVersion.js");
 const require_publishDate = require("./filtering/publishDate.js");

package/build/packageFilter.mjs

@@ -1,5 +1,5 @@
-import { parseConfig } from "./config/parser.mjs";
 import { matchRules } from "./filtering/matcher.mjs";
+import { parseConfig } from "./config/parser.mjs";
 import { filterDeprecatedVersions } from "./filtering/deprecated.mjs";
 import { filterBlockedVersions } from "./filtering/packageVersion.mjs";
 import { filterVersionsByPublishDate } from "./filtering/publishDate.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/package-filter",
-  "version": "14.0.0-next-9.55",
+  "version": "14.0.0-next-9.56",
   "description": "Package filter plugin for Verdaccio that allows blocking packages by name, scope, version or date",
   "keywords": [
     "private",
@@ -35,19 +35,20 @@
     "node": ">=24"
   },
   "dependencies": {
-    "@verdaccio/core": "9.0.0-next-9.31",
+    "@verdaccio/core": "9.0.0-next-9.32",
     "debug": "4.4.3",
+    "minimatch": "10.2.6",
     "semver": "7.8.5"
   },
   "devDependencies": {
     "@types/debug": "4.1.13",
-    "@verdaccio/config": "9.0.0-next-9.31",
-    "@verdaccio/logger": "9.0.0-next-9.31",
-    "@verdaccio/plugin-verifier": "1.0.0-next-9.27",
-    "@verdaccio/types": "14.0.0-next-9.14",
+    "@verdaccio/config": "9.0.0-next-9.32",
+    "@verdaccio/logger": "9.0.0-next-9.32",
+    "@verdaccio/plugin-verifier": "1.0.0-next-9.28",
+    "@verdaccio/types": "14.0.0-next-9.15",
     "rimraf": "6.1.3",
     "vite": "8.2.2",
-    "vitest": "4.1.10"
+    "vitest": "4.1.11"
   },
   "funding": {
     "type": "opencollective",