@verdaccio/server 9.0.0-next-9.29 → 9.0.0-next-9.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/build/server.js +5 -1
  2. package/build/server.js.map +1 -1
  3. package/build/server.mjs +6 -2
  4. package/build/server.mjs.map +1 -1
  5. package/package.json +13 -13
package/build/server.js CHANGED
@@ -34,12 +34,16 @@ var defineAPI = async function(config, storage) {
34
34
  if (config.server?.trustProxy) app.set("trust proxy", config.server.trustProxy);
35
35
  app.use((0, cors.default)());
36
36
  app.use((0, _verdaccio_middleware.rateLimit)(config.server?.rateLimit));
37
+ const compressionFilter = (req, res) => {
38
+ if (String(res.getHeader(_verdaccio_core.HEADERS.CONTENT_TYPE) ?? "").startsWith("application/octet-stream")) return false;
39
+ return compression.default.filter(req, res);
40
+ };
37
41
  app.use((0, _verdaccio_middleware.dotfiles)(config.server?.dotfiles ?? "ignore"));
38
42
  const errorReportingMiddlewareWrap = (0, _verdaccio_middleware.errorReportingMiddleware)(_verdaccio_logger.logger);
39
43
  app.use((0, _verdaccio_middleware.log)(_verdaccio_logger.logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));
40
44
  app.use(errorReportingMiddlewareWrap);
41
45
  app.use((0, _verdaccio_middleware.userAgent)(config));
42
- app.use((0, compression.default)());
46
+ app.use((0, compression.default)({ filter: compressionFilter }));
43
47
  (0, _verdaccio_middleware.registerBodyParser)(app, config);
44
48
  app.get("/favicon.ico", function(req, res, next) {
45
49
  req.url = "/-/static/favicon.ico";
package/build/server.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"server.js","names":[],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport type { Express } from 'express';\nimport express from 'express';\nimport { get } from 'lodash-es';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport type { pluginUtils } from '@verdaccio/core';\nimport {\n API_ERROR,\n PLUGIN_CATEGORY,\n PLUGIN_PREFIX,\n errorUtils,\n pkgUtils,\n pluginUtils as pluginSanity,\n} from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n dotfiles,\n errorReportingMiddleware,\n final,\n handleError,\n log,\n rateLimit,\n registerBodyParser,\n userAgent,\n WebUrlsNamespace,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport type { ConfigYaml, Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst currentDir = typeof __dirname !== 'undefined' ? __dirname : import.meta.dirname;\nconst { version } = pkgUtils.getPackageJson(currentDir, '..');\n\nexport const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {\n const auth = new Auth(config, logger);\n await auth.init();\n const app = express();\n // run in production mode by default, just in case\n // it shouldn't make any difference anyway\n app.set('env', process.env.NODE_ENV || 'production');\n if (config.server?.trustProxy) {\n app.set('trust proxy', config.server.trustProxy);\n }\n app.use(cors());\n app.use(rateLimit(config.server?.rateLimit));\n\n app.use(dotfiles(config.server?.dotfiles ?? 'ignore'));\n\n const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n // Router setup\n app.use(log(logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));\n app.use(errorReportingMiddlewareWrap);\n app.use(userAgent(config));\n app.use(compression());\n\n // Body parser for JSON requests must be registered before plugins\n // so plugins can access req.body instead of manually reading the stream\n // This prevents \"stream is not readable\" errors when plugins try to read req.body\n registerBodyParser(app, config);\n\n app.get(\n '/favicon.ico',\n function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n req.url = '/-/static/favicon.ico';\n next();\n }\n );\n\n // Hook for tests only\n if (config._debug) {\n hookDebug(app, config.configPath);\n }\n\n const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n config.middlewares,\n {\n config,\n logger,\n },\n pluginSanity.middlewareSanityCheck,\n false,\n config.server?.pluginPrefix ?? PLUGIN_PREFIX,\n PLUGIN_CATEGORY.MIDDLEWARE\n );\n\n if (plugins.length === 0) {\n const auditPlugin = new AuditMiddleware(\n { enabled: true, strict_ssl: true },\n { config, logger }\n );\n logger.info(\n { name: 'verdaccio-audit', pluginCategory: PLUGIN_CATEGORY.MIDDLEWARE },\n 'plugin @{name} successfully loaded (@{pluginCategory})'\n );\n plugins.push(auditPlugin);\n }\n\n // Register JWT middleware so middleware plugins can access req.remote_user.\n const apiAuthRouter = express.Router();\n apiAuthRouter.use(WebUrlsNamespace.endpoints, (_req, _res, next) => next('router'));\n apiAuthRouter.use(auth.apiJWTmiddleware());\n app.use(apiAuthRouter);\n\n // Ensure sequential execution in order, and that each registration completes before the next one starts\n for (const plugin of plugins) {\n plugin.register_middlewares(app, auth, storage);\n }\n\n // For package manager requests\n app.use(apiEndpoint(config, auth, storage, logger));\n\n // For WebUI & WebUI API\n if (get(config, 'web.enabled', get(config, 'web.enable', true))) {\n app.use((_req, res, next) => {\n res.locals.app_version = version ?? '';\n next();\n });\n const middleware = await webMiddleware(config, auth, storage, logger);\n app.use(middleware);\n } else {\n app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n });\n }\n\n // Catch 404\n app.get('/{*any}', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound('resource not found'));\n });\n\n app.use(handleError(logger));\n\n // app.use(function (\n // err: HttpError,\n // req: $RequestExtend,\n // res: $ResponseExtend,\n // next: $NextFunctionVer\n // ) {\n // if (_.isError(err)) {\n // if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n // return next();\n // }\n // if (_.isFunction(res.locals.report_error) === false) {\n // // in case of very early error this middleware may not be loaded before error is generated\n // // fixing that\n // errorReportingMiddlewareWrap(req, res, _.noop);\n // }\n // res.locals.report_error(err);\n // } else {\n // // Fall to Middleware.final\n // return next(err);\n // }\n // });\n\n app.use(final);\n\n return app;\n};\n\nconst startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {\n debug('start server');\n const config: IConfig = new AppConfig({ ...configHash } as any);\n const storage = new Storage(config, logger);\n try {\n // waits until init calls have been completed\n debug('storage init start');\n await storage.init(config);\n debug('storage init end');\n } catch (err: any) {\n logger.error({ error: err.msg }, 'storage has failed: @{error}');\n throw new Error(err);\n }\n return await defineAPI(config, storage);\n};\n\nexport { startServer };\nexport default startServer;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,kBAAkB;AAC3C,IAAM,aAAa,OAAO,cAAc,cAAc,YAAA,CAAA,EAAwB;AAC9E,IAAM,EAAE,YAAY,gBAAA,SAAS,eAAe,YAAY,IAAI;AAE5D,IAAa,YAAY,eAAgB,QAAiB,SAAoC;CAC5F,MAAM,OAAO,IAAI,gBAAA,KAAK,QAAQ,kBAAA,MAAM;CACpC,MAAM,KAAK,KAAK;CAChB,MAAM,OAAA,GAAM,QAAA,QAAA,CAAQ;CAGpB,IAAI,IAAI,OAAA,QAAA,IAAA,YAA+B,YAAY;CACnD,IAAI,OAAO,QAAQ,YACjB,IAAI,IAAI,eAAe,OAAO,OAAO,UAAU;CAEjD,IAAI,KAAA,GAAI,KAAA,QAAA,CAAK,CAAC;CACd,IAAI,KAAA,GAAI,sBAAA,UAAA,CAAU,OAAO,QAAQ,SAAS,CAAC;CAE3C,IAAI,KAAA,GAAI,sBAAA,SAAA,CAAS,OAAO,QAAQ,YAAY,QAAQ,CAAC;CAErD,MAAM,gCAAA,GAA+B,sBAAA,yBAAA,CAAyB,kBAAA,MAAM;CAGpE,IAAI,KAAA,GAAI,sBAAA,IAAA,CAAI,kBAAA,QAAQ,EAAE,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK,CAAC,CAAC;CAC9E,IAAI,IAAI,4BAA4B;CACpC,IAAI,KAAA,GAAI,sBAAA,UAAA,CAAU,MAAM,CAAC;CACzB,IAAI,KAAA,GAAI,YAAA,QAAA,CAAY,CAAC;CAKrB,CAAA,GAAA,sBAAA,mBAAA,CAAmB,KAAK,MAAM;CAE9B,IAAI,IACF,gBACA,SAAU,KAAqB,KAAsB,MAA8B;EACjF,IAAI,MAAM;EACV,KAAK;CACP,CACF;CAGA,IAAI,OAAO,QACT,cAAA,QAAU,KAAK,OAAO,UAAU;CAGlC,MAAM,UAA8D,OAAA,GAAM,mBAAA,gBAAA,CACxE,OAAO,aACP;EACE;EACA,QAAA,kBAAA;CACF,GACA,gBAAA,YAAa,uBACb,OACA,OAAO,QAAQ,gBAAgB,gBAAA,eAC/B,gBAAA,gBAAgB,UAClB;CAEA,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,cAAc,IAAI,gBAAA,QACtB;GAAE,SAAS;GAAM,YAAY;EAAK,GAClC;GAAE;GAAQ,QAAA,kBAAA;EAAO,CACnB;EACA,kBAAA,OAAO,KACL;GAAE,MAAM;GAAmB,gBAAgB,gBAAA,gBAAgB;EAAW,GACtE,wDACF;EACA,QAAQ,KAAK,WAAW;CAC1B;CAGA,MAAM,gBAAgB,QAAA,QAAQ,OAAO;CACrC,cAAc,IAAI,sBAAA,iBAAiB,YAAY,MAAM,MAAM,SAAS,KAAK,QAAQ,CAAC;CAClF,cAAc,IAAI,KAAK,iBAAiB,CAAC;CACzC,IAAI,IAAI,aAAa;CAGrB,KAAK,MAAM,UAAU,SACnB,OAAO,qBAAqB,KAAK,MAAM,OAAO;CAIhD,IAAI,KAAA,GAAI,eAAA,QAAA,CAAY,QAAQ,MAAM,SAAS,kBAAA,MAAM,CAAC;CAGlD,KAAA,GAAI,UAAA,IAAA,CAAI,QAAQ,gBAAA,GAAe,UAAA,IAAA,CAAI,QAAQ,cAAc,IAAI,CAAC,GAAG;EAC/D,IAAI,KAAK,MAAM,KAAK,SAAS;GAC3B,IAAI,OAAO,cAAc,WAAW;GACpC,KAAK;EACP,CAAC;EACD,MAAM,aAAa,OAAA,GAAM,eAAA,QAAA,CAAc,QAAQ,MAAM,SAAS,kBAAA,MAAM;EACpE,IAAI,IAAI,UAAU;CACpB,OACE,IAAI,IAAI,KAAK,SAAU,KAAqB,KAAsB,MAAwB;EACxF,KAAK,gBAAA,WAAW,YAAY,gBAAA,UAAU,YAAY,CAAC;CACrD,CAAC;CAIH,IAAI,IAAI,WAAW,SAAU,KAAqB,KAAsB,MAAwB;EAC9F,KAAK,gBAAA,WAAW,YAAY,oBAAoB,CAAC;CACnD,CAAC;CAED,IAAI,KAAA,GAAI,sBAAA,YAAA,CAAY,kBAAA,MAAM,CAAC;CAwB3B,IAAI,IAAI,sBAAA,KAAK;CAEb,OAAO;AACT;AAEA,IAAM,cAAc,eAAe,YAAY,YAA0C;CACvF,QAAM,cAAc;CACpB,MAAM,SAAkB,IAAI,kBAAA,OAAU,EAAE,GAAG,WAAW,CAAQ;CAC9D,MAAM,UAAU,IAAI,iBAAA,QAAQ,QAAQ,kBAAA,MAAM;CAC1C,IAAI;EAEF,QAAM,oBAAoB;EAC1B,MAAM,QAAQ,KAAK,MAAM;EACzB,QAAM,kBAAkB;CAC1B,SAAS,KAAU;EACjB,kBAAA,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,GAAG,8BAA8B;EAC/D,MAAM,IAAI,MAAM,GAAG;CACrB;CACA,OAAO,MAAM,UAAU,QAAQ,OAAO;AACxC"}
1
+ {"version":3,"file":"server.js","names":[],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport type { Express } from 'express';\nimport express from 'express';\nimport { get } from 'lodash-es';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport type { pluginUtils } from '@verdaccio/core';\nimport {\n API_ERROR,\n HEADERS,\n PLUGIN_CATEGORY,\n PLUGIN_PREFIX,\n errorUtils,\n pkgUtils,\n pluginUtils as pluginSanity,\n} from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n dotfiles,\n errorReportingMiddleware,\n final,\n handleError,\n log,\n rateLimit,\n registerBodyParser,\n userAgent,\n WebUrlsNamespace,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport type { ConfigYaml, Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst currentDir = typeof __dirname !== 'undefined' ? __dirname : import.meta.dirname;\nconst { version } = pkgUtils.getPackageJson(currentDir, '..');\n\nexport const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {\n const auth = new Auth(config, logger);\n await auth.init();\n const app = express();\n // run in production mode by default, just in case\n // it shouldn't make any difference anyway\n app.set('env', process.env.NODE_ENV || 'production');\n if (config.server?.trustProxy) {\n app.set('trust proxy', config.server.trustProxy);\n }\n app.use(cors());\n app.use(rateLimit(config.server?.rateLimit));\n\n // mime-db marks application/octet-stream as compressible, so the default\n // compression() filter would re-gzip every (already gzipped) .tgz tarball\n // for clients that accept gzip — npm and undici do by default. That wastes\n // CPU on every download and strips the Content-Length header. Skip\n // compression for tarball responses; JSON metadata stays compressed.\n const compressionFilter = (req, res): boolean => {\n const contentType = String(res.getHeader(HEADERS.CONTENT_TYPE) ?? '');\n if (contentType.startsWith('application/octet-stream')) {\n return false;\n }\n return compression.filter(req, res);\n };\n\n app.use(dotfiles(config.server?.dotfiles ?? 'ignore'));\n\n const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n // Router setup\n app.use(log(logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));\n app.use(errorReportingMiddlewareWrap);\n app.use(userAgent(config));\n app.use(compression({ filter: compressionFilter }));\n\n // Body parser for JSON requests must be registered before plugins\n // so plugins can access req.body instead of manually reading the stream\n // This prevents \"stream is not readable\" errors when plugins try to read req.body\n registerBodyParser(app, config);\n\n app.get(\n '/favicon.ico',\n function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n req.url = '/-/static/favicon.ico';\n next();\n }\n );\n\n // Hook for tests only\n if (config._debug) {\n hookDebug(app, config.configPath);\n }\n\n const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n config.middlewares,\n {\n config,\n logger,\n },\n pluginSanity.middlewareSanityCheck,\n false,\n config.server?.pluginPrefix ?? PLUGIN_PREFIX,\n PLUGIN_CATEGORY.MIDDLEWARE\n );\n\n if (plugins.length === 0) {\n const auditPlugin = new AuditMiddleware(\n { enabled: true, strict_ssl: true },\n { config, logger }\n );\n logger.info(\n { name: 'verdaccio-audit', pluginCategory: PLUGIN_CATEGORY.MIDDLEWARE },\n 'plugin @{name} successfully loaded (@{pluginCategory})'\n );\n plugins.push(auditPlugin);\n }\n\n // Register JWT middleware so middleware plugins can access req.remote_user.\n const apiAuthRouter = express.Router();\n apiAuthRouter.use(WebUrlsNamespace.endpoints, (_req, _res, next) => next('router'));\n apiAuthRouter.use(auth.apiJWTmiddleware());\n app.use(apiAuthRouter);\n\n // Ensure sequential execution in order, and that each registration completes before the next one starts\n for (const plugin of plugins) {\n plugin.register_middlewares(app, auth, storage);\n }\n\n // For package manager requests\n app.use(apiEndpoint(config, auth, storage, logger));\n\n // For WebUI & WebUI API\n if (get(config, 'web.enabled', get(config, 'web.enable', true))) {\n app.use((_req, res, next) => {\n res.locals.app_version = version ?? '';\n next();\n });\n const middleware = await webMiddleware(config, auth, storage, logger);\n app.use(middleware);\n } else {\n app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n });\n }\n\n // Catch 404\n app.get('/{*any}', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound('resource not found'));\n });\n\n app.use(handleError(logger));\n\n // app.use(function (\n // err: HttpError,\n // req: $RequestExtend,\n // res: $ResponseExtend,\n // next: $NextFunctionVer\n // ) {\n // if (_.isError(err)) {\n // if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n // return next();\n // }\n // if (_.isFunction(res.locals.report_error) === false) {\n // // in case of very early error this middleware may not be loaded before error is generated\n // // fixing that\n // errorReportingMiddlewareWrap(req, res, _.noop);\n // }\n // res.locals.report_error(err);\n // } else {\n // // Fall to Middleware.final\n // return next(err);\n // }\n // });\n\n app.use(final);\n\n return app;\n};\n\nconst startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {\n debug('start server');\n const config: IConfig = new AppConfig({ ...configHash } as any);\n const storage = new Storage(config, logger);\n try {\n // waits until init calls have been completed\n debug('storage init start');\n await storage.init(config);\n debug('storage init end');\n } catch (err: any) {\n logger.error({ error: err.msg }, 'storage has failed: @{error}');\n throw new Error(err);\n }\n return await defineAPI(config, storage);\n};\n\nexport { startServer };\nexport default startServer;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,IAAM,WAAA,GAAQ,MAAA,QAAA,CAAW,kBAAkB;AAC3C,IAAM,aAAa,OAAO,cAAc,cAAc,YAAA,CAAA,EAAwB;AAC9E,IAAM,EAAE,YAAY,gBAAA,SAAS,eAAe,YAAY,IAAI;AAE5D,IAAa,YAAY,eAAgB,QAAiB,SAAoC;CAC5F,MAAM,OAAO,IAAI,gBAAA,KAAK,QAAQ,kBAAA,MAAM;CACpC,MAAM,KAAK,KAAK;CAChB,MAAM,OAAA,GAAM,QAAA,QAAA,CAAQ;CAGpB,IAAI,IAAI,OAAA,QAAA,IAAA,YAA+B,YAAY;CACnD,IAAI,OAAO,QAAQ,YACjB,IAAI,IAAI,eAAe,OAAO,OAAO,UAAU;CAEjD,IAAI,KAAA,GAAI,KAAA,QAAA,CAAK,CAAC;CACd,IAAI,KAAA,GAAI,sBAAA,UAAA,CAAU,OAAO,QAAQ,SAAS,CAAC;CAO3C,MAAM,qBAAqB,KAAK,QAAiB;EAE/C,IADoB,OAAO,IAAI,UAAU,gBAAA,QAAQ,YAAY,KAAK,EAC9D,CAAA,CAAY,WAAW,0BAA0B,GACnD,OAAO;EAET,OAAO,YAAA,QAAY,OAAO,KAAK,GAAG;CACpC;CAEA,IAAI,KAAA,GAAI,sBAAA,SAAA,CAAS,OAAO,QAAQ,YAAY,QAAQ,CAAC;CAErD,MAAM,gCAAA,GAA+B,sBAAA,yBAAA,CAAyB,kBAAA,MAAM;CAGpE,IAAI,KAAA,GAAI,sBAAA,IAAA,CAAI,kBAAA,QAAQ,EAAE,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK,CAAC,CAAC;CAC9E,IAAI,IAAI,4BAA4B;CACpC,IAAI,KAAA,GAAI,sBAAA,UAAA,CAAU,MAAM,CAAC;CACzB,IAAI,KAAA,GAAI,YAAA,QAAA,CAAY,EAAE,QAAQ,kBAAkB,CAAC,CAAC;CAKlD,CAAA,GAAA,sBAAA,mBAAA,CAAmB,KAAK,MAAM;CAE9B,IAAI,IACF,gBACA,SAAU,KAAqB,KAAsB,MAA8B;EACjF,IAAI,MAAM;EACV,KAAK;CACP,CACF;CAGA,IAAI,OAAO,QACT,cAAA,QAAU,KAAK,OAAO,UAAU;CAGlC,MAAM,UAA8D,OAAA,GAAM,mBAAA,gBAAA,CACxE,OAAO,aACP;EACE;EACA,QAAA,kBAAA;CACF,GACA,gBAAA,YAAa,uBACb,OACA,OAAO,QAAQ,gBAAgB,gBAAA,eAC/B,gBAAA,gBAAgB,UAClB;CAEA,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,cAAc,IAAI,gBAAA,QACtB;GAAE,SAAS;GAAM,YAAY;EAAK,GAClC;GAAE;GAAQ,QAAA,kBAAA;EAAO,CACnB;EACA,kBAAA,OAAO,KACL;GAAE,MAAM;GAAmB,gBAAgB,gBAAA,gBAAgB;EAAW,GACtE,wDACF;EACA,QAAQ,KAAK,WAAW;CAC1B;CAGA,MAAM,gBAAgB,QAAA,QAAQ,OAAO;CACrC,cAAc,IAAI,sBAAA,iBAAiB,YAAY,MAAM,MAAM,SAAS,KAAK,QAAQ,CAAC;CAClF,cAAc,IAAI,KAAK,iBAAiB,CAAC;CACzC,IAAI,IAAI,aAAa;CAGrB,KAAK,MAAM,UAAU,SACnB,OAAO,qBAAqB,KAAK,MAAM,OAAO;CAIhD,IAAI,KAAA,GAAI,eAAA,QAAA,CAAY,QAAQ,MAAM,SAAS,kBAAA,MAAM,CAAC;CAGlD,KAAA,GAAI,UAAA,IAAA,CAAI,QAAQ,gBAAA,GAAe,UAAA,IAAA,CAAI,QAAQ,cAAc,IAAI,CAAC,GAAG;EAC/D,IAAI,KAAK,MAAM,KAAK,SAAS;GAC3B,IAAI,OAAO,cAAc,WAAW;GACpC,KAAK;EACP,CAAC;EACD,MAAM,aAAa,OAAA,GAAM,eAAA,QAAA,CAAc,QAAQ,MAAM,SAAS,kBAAA,MAAM;EACpE,IAAI,IAAI,UAAU;CACpB,OACE,IAAI,IAAI,KAAK,SAAU,KAAqB,KAAsB,MAAwB;EACxF,KAAK,gBAAA,WAAW,YAAY,gBAAA,UAAU,YAAY,CAAC;CACrD,CAAC;CAIH,IAAI,IAAI,WAAW,SAAU,KAAqB,KAAsB,MAAwB;EAC9F,KAAK,gBAAA,WAAW,YAAY,oBAAoB,CAAC;CACnD,CAAC;CAED,IAAI,KAAA,GAAI,sBAAA,YAAA,CAAY,kBAAA,MAAM,CAAC;CAwB3B,IAAI,IAAI,sBAAA,KAAK;CAEb,OAAO;AACT;AAEA,IAAM,cAAc,eAAe,YAAY,YAA0C;CACvF,QAAM,cAAc;CACpB,MAAM,SAAkB,IAAI,kBAAA,OAAU,EAAE,GAAG,WAAW,CAAQ;CAC9D,MAAM,UAAU,IAAI,iBAAA,QAAQ,QAAQ,kBAAA,MAAM;CAC1C,IAAI;EAEF,QAAM,oBAAoB;EAC1B,MAAM,QAAQ,KAAK,MAAM;EACzB,QAAM,kBAAkB;CAC1B,SAAS,KAAU;EACjB,kBAAA,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,GAAG,8BAA8B;EAC/D,MAAM,IAAI,MAAM,GAAG;CACrB;CACA,OAAO,MAAM,UAAU,QAAQ,OAAO;AACxC"}
package/build/server.mjs CHANGED
@@ -8,7 +8,7 @@ import AuditMiddleware from "verdaccio-audit";
8
8
  import apiEndpoint from "@verdaccio/api";
9
9
  import { Auth } from "@verdaccio/auth";
10
10
  import { Config } from "@verdaccio/config";
11
- import { API_ERROR, PLUGIN_CATEGORY, PLUGIN_PREFIX, errorUtils, pkgUtils, pluginUtils } from "@verdaccio/core";
11
+ import { API_ERROR, HEADERS, PLUGIN_CATEGORY, PLUGIN_PREFIX, errorUtils, pkgUtils, pluginUtils } from "@verdaccio/core";
12
12
  import { asyncLoadPlugin } from "@verdaccio/loaders";
13
13
  import { logger } from "@verdaccio/logger";
14
14
  import { WebUrlsNamespace, dotfiles, errorReportingMiddleware, final, handleError, log, rateLimit, registerBodyParser, userAgent } from "@verdaccio/middleware";
@@ -26,12 +26,16 @@ var defineAPI = async function(config, storage) {
26
26
  if (config.server?.trustProxy) app.set("trust proxy", config.server.trustProxy);
27
27
  app.use(cors());
28
28
  app.use(rateLimit(config.server?.rateLimit));
29
+ const compressionFilter = (req, res) => {
30
+ if (String(res.getHeader(HEADERS.CONTENT_TYPE) ?? "").startsWith("application/octet-stream")) return false;
31
+ return compression.filter(req, res);
32
+ };
29
33
  app.use(dotfiles(config.server?.dotfiles ?? "ignore"));
30
34
  const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);
31
35
  app.use(log(logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));
32
36
  app.use(errorReportingMiddlewareWrap);
33
37
  app.use(userAgent(config));
34
- app.use(compression());
38
+ app.use(compression({ filter: compressionFilter }));
35
39
  registerBodyParser(app, config);
36
40
  app.get("/favicon.ico", function(req, res, next) {
37
41
  req.url = "/-/static/favicon.ico";
package/build/server.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"server.mjs","names":[],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport type { Express } from 'express';\nimport express from 'express';\nimport { get } from 'lodash-es';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport type { pluginUtils } from '@verdaccio/core';\nimport {\n API_ERROR,\n PLUGIN_CATEGORY,\n PLUGIN_PREFIX,\n errorUtils,\n pkgUtils,\n pluginUtils as pluginSanity,\n} from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n dotfiles,\n errorReportingMiddleware,\n final,\n handleError,\n log,\n rateLimit,\n registerBodyParser,\n userAgent,\n WebUrlsNamespace,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport type { ConfigYaml, Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst currentDir = typeof __dirname !== 'undefined' ? __dirname : import.meta.dirname;\nconst { version } = pkgUtils.getPackageJson(currentDir, '..');\n\nexport const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {\n const auth = new Auth(config, logger);\n await auth.init();\n const app = express();\n // run in production mode by default, just in case\n // it shouldn't make any difference anyway\n app.set('env', process.env.NODE_ENV || 'production');\n if (config.server?.trustProxy) {\n app.set('trust proxy', config.server.trustProxy);\n }\n app.use(cors());\n app.use(rateLimit(config.server?.rateLimit));\n\n app.use(dotfiles(config.server?.dotfiles ?? 'ignore'));\n\n const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n // Router setup\n app.use(log(logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));\n app.use(errorReportingMiddlewareWrap);\n app.use(userAgent(config));\n app.use(compression());\n\n // Body parser for JSON requests must be registered before plugins\n // so plugins can access req.body instead of manually reading the stream\n // This prevents \"stream is not readable\" errors when plugins try to read req.body\n registerBodyParser(app, config);\n\n app.get(\n '/favicon.ico',\n function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n req.url = '/-/static/favicon.ico';\n next();\n }\n );\n\n // Hook for tests only\n if (config._debug) {\n hookDebug(app, config.configPath);\n }\n\n const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n config.middlewares,\n {\n config,\n logger,\n },\n pluginSanity.middlewareSanityCheck,\n false,\n config.server?.pluginPrefix ?? PLUGIN_PREFIX,\n PLUGIN_CATEGORY.MIDDLEWARE\n );\n\n if (plugins.length === 0) {\n const auditPlugin = new AuditMiddleware(\n { enabled: true, strict_ssl: true },\n { config, logger }\n );\n logger.info(\n { name: 'verdaccio-audit', pluginCategory: PLUGIN_CATEGORY.MIDDLEWARE },\n 'plugin @{name} successfully loaded (@{pluginCategory})'\n );\n plugins.push(auditPlugin);\n }\n\n // Register JWT middleware so middleware plugins can access req.remote_user.\n const apiAuthRouter = express.Router();\n apiAuthRouter.use(WebUrlsNamespace.endpoints, (_req, _res, next) => next('router'));\n apiAuthRouter.use(auth.apiJWTmiddleware());\n app.use(apiAuthRouter);\n\n // Ensure sequential execution in order, and that each registration completes before the next one starts\n for (const plugin of plugins) {\n plugin.register_middlewares(app, auth, storage);\n }\n\n // For package manager requests\n app.use(apiEndpoint(config, auth, storage, logger));\n\n // For WebUI & WebUI API\n if (get(config, 'web.enabled', get(config, 'web.enable', true))) {\n app.use((_req, res, next) => {\n res.locals.app_version = version ?? '';\n next();\n });\n const middleware = await webMiddleware(config, auth, storage, logger);\n app.use(middleware);\n } else {\n app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n });\n }\n\n // Catch 404\n app.get('/{*any}', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound('resource not found'));\n });\n\n app.use(handleError(logger));\n\n // app.use(function (\n // err: HttpError,\n // req: $RequestExtend,\n // res: $ResponseExtend,\n // next: $NextFunctionVer\n // ) {\n // if (_.isError(err)) {\n // if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n // return next();\n // }\n // if (_.isFunction(res.locals.report_error) === false) {\n // // in case of very early error this middleware may not be loaded before error is generated\n // // fixing that\n // errorReportingMiddlewareWrap(req, res, _.noop);\n // }\n // res.locals.report_error(err);\n // } else {\n // // Fall to Middleware.final\n // return next(err);\n // }\n // });\n\n app.use(final);\n\n return app;\n};\n\nconst startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {\n debug('start server');\n const config: IConfig = new AppConfig({ ...configHash } as any);\n const storage = new Storage(config, logger);\n try {\n // waits until init calls have been completed\n debug('storage init start');\n await storage.init(config);\n debug('storage init end');\n } catch (err: any) {\n logger.error({ error: err.msg }, 'storage has failed: @{error}');\n throw new Error(err);\n }\n return await defineAPI(config, storage);\n};\n\nexport { startServer };\nexport default startServer;\n"],"mappings":";;;;;;;;;;;;;;;;;AAwCA,IAAM,QAAQ,WAAW,kBAAkB;AAC3C,IAAM,aAAa,OAAO,cAAc,cAAc,YAAY,YAAY;AAC9E,IAAM,EAAE,YAAY,SAAS,eAAe,YAAY,IAAI;AAE5D,IAAa,YAAY,eAAgB,QAAiB,SAAoC;CAC5F,MAAM,OAAO,IAAI,KAAK,QAAQ,MAAM;CACpC,MAAM,KAAK,KAAK;CAChB,MAAM,MAAM,QAAQ;CAGpB,IAAI,IAAI,OAAA,QAAA,IAAA,YAA+B,YAAY;CACnD,IAAI,OAAO,QAAQ,YACjB,IAAI,IAAI,eAAe,OAAO,OAAO,UAAU;CAEjD,IAAI,IAAI,KAAK,CAAC;CACd,IAAI,IAAI,UAAU,OAAO,QAAQ,SAAS,CAAC;CAE3C,IAAI,IAAI,SAAS,OAAO,QAAQ,YAAY,QAAQ,CAAC;CAErD,MAAM,+BAA+B,yBAAyB,MAAM;CAGpE,IAAI,IAAI,IAAI,QAAQ,EAAE,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK,CAAC,CAAC;CAC9E,IAAI,IAAI,4BAA4B;CACpC,IAAI,IAAI,UAAU,MAAM,CAAC;CACzB,IAAI,IAAI,YAAY,CAAC;CAKrB,mBAAmB,KAAK,MAAM;CAE9B,IAAI,IACF,gBACA,SAAU,KAAqB,KAAsB,MAA8B;EACjF,IAAI,MAAM;EACV,KAAK;CACP,CACF;CAGA,IAAI,OAAO,QACT,cAAU,KAAK,OAAO,UAAU;CAGlC,MAAM,UAA8D,MAAM,gBACxE,OAAO,aACP;EACE;EACA;CACF,GACA,YAAa,uBACb,OACA,OAAO,QAAQ,gBAAgB,eAC/B,gBAAgB,UAClB;CAEA,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,cAAc,IAAI,gBACtB;GAAE,SAAS;GAAM,YAAY;EAAK,GAClC;GAAE;GAAQ;EAAO,CACnB;EACA,OAAO,KACL;GAAE,MAAM;GAAmB,gBAAgB,gBAAgB;EAAW,GACtE,wDACF;EACA,QAAQ,KAAK,WAAW;CAC1B;CAGA,MAAM,gBAAgB,QAAQ,OAAO;CACrC,cAAc,IAAI,iBAAiB,YAAY,MAAM,MAAM,SAAS,KAAK,QAAQ,CAAC;CAClF,cAAc,IAAI,KAAK,iBAAiB,CAAC;CACzC,IAAI,IAAI,aAAa;CAGrB,KAAK,MAAM,UAAU,SACnB,OAAO,qBAAqB,KAAK,MAAM,OAAO;CAIhD,IAAI,IAAI,YAAY,QAAQ,MAAM,SAAS,MAAM,CAAC;CAGlD,IAAI,IAAI,QAAQ,eAAe,IAAI,QAAQ,cAAc,IAAI,CAAC,GAAG;EAC/D,IAAI,KAAK,MAAM,KAAK,SAAS;GAC3B,IAAI,OAAO,cAAc,WAAW;GACpC,KAAK;EACP,CAAC;EACD,MAAM,aAAa,MAAM,cAAc,QAAQ,MAAM,SAAS,MAAM;EACpE,IAAI,IAAI,UAAU;CACpB,OACE,IAAI,IAAI,KAAK,SAAU,KAAqB,KAAsB,MAAwB;EACxF,KAAK,WAAW,YAAY,UAAU,YAAY,CAAC;CACrD,CAAC;CAIH,IAAI,IAAI,WAAW,SAAU,KAAqB,KAAsB,MAAwB;EAC9F,KAAK,WAAW,YAAY,oBAAoB,CAAC;CACnD,CAAC;CAED,IAAI,IAAI,YAAY,MAAM,CAAC;CAwB3B,IAAI,IAAI,KAAK;CAEb,OAAO;AACT;AAEA,IAAM,cAAc,eAAe,YAAY,YAA0C;CACvF,MAAM,cAAc;CACpB,MAAM,SAAkB,IAAI,OAAU,EAAE,GAAG,WAAW,CAAQ;CAC9D,MAAM,UAAU,IAAI,QAAQ,QAAQ,MAAM;CAC1C,IAAI;EAEF,MAAM,oBAAoB;EAC1B,MAAM,QAAQ,KAAK,MAAM;EACzB,MAAM,kBAAkB;CAC1B,SAAS,KAAU;EACjB,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,GAAG,8BAA8B;EAC/D,MAAM,IAAI,MAAM,GAAG;CACrB;CACA,OAAO,MAAM,UAAU,QAAQ,OAAO;AACxC"}
1
+ {"version":3,"file":"server.mjs","names":[],"sources":["../src/server.ts"],"sourcesContent":["import compression from 'compression';\nimport cors from 'cors';\nimport buildDebug from 'debug';\nimport type { Express } from 'express';\nimport express from 'express';\nimport { get } from 'lodash-es';\nimport AuditMiddleware from 'verdaccio-audit';\n\nimport apiEndpoint from '@verdaccio/api';\nimport { Auth } from '@verdaccio/auth';\nimport { Config as AppConfig } from '@verdaccio/config';\nimport type { pluginUtils } from '@verdaccio/core';\nimport {\n API_ERROR,\n HEADERS,\n PLUGIN_CATEGORY,\n PLUGIN_PREFIX,\n errorUtils,\n pkgUtils,\n pluginUtils as pluginSanity,\n} from '@verdaccio/core';\nimport { asyncLoadPlugin } from '@verdaccio/loaders';\nimport { logger } from '@verdaccio/logger';\nimport {\n dotfiles,\n errorReportingMiddleware,\n final,\n handleError,\n log,\n rateLimit,\n registerBodyParser,\n userAgent,\n WebUrlsNamespace,\n} from '@verdaccio/middleware';\nimport { Storage } from '@verdaccio/store';\nimport type { ConfigYaml, Config as IConfig } from '@verdaccio/types';\nimport webMiddleware from '@verdaccio/web';\n\nimport type { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';\nimport hookDebug from './debug';\n\nconst debug = buildDebug('verdaccio:server');\nconst currentDir = typeof __dirname !== 'undefined' ? __dirname : import.meta.dirname;\nconst { version } = pkgUtils.getPackageJson(currentDir, '..');\n\nexport const defineAPI = async function (config: IConfig, storage: Storage): Promise<Express> {\n const auth = new Auth(config, logger);\n await auth.init();\n const app = express();\n // run in production mode by default, just in case\n // it shouldn't make any difference anyway\n app.set('env', process.env.NODE_ENV || 'production');\n if (config.server?.trustProxy) {\n app.set('trust proxy', config.server.trustProxy);\n }\n app.use(cors());\n app.use(rateLimit(config.server?.rateLimit));\n\n // mime-db marks application/octet-stream as compressible, so the default\n // compression() filter would re-gzip every (already gzipped) .tgz tarball\n // for clients that accept gzip — npm and undici do by default. That wastes\n // CPU on every download and strips the Content-Length header. Skip\n // compression for tarball responses; JSON metadata stays compressed.\n const compressionFilter = (req, res): boolean => {\n const contentType = String(res.getHeader(HEADERS.CONTENT_TYPE) ?? '');\n if (contentType.startsWith('application/octet-stream')) {\n return false;\n }\n return compression.filter(req, res);\n };\n\n app.use(dotfiles(config.server?.dotfiles ?? 'ignore'));\n\n const errorReportingMiddlewareWrap = errorReportingMiddleware(logger);\n\n // Router setup\n app.use(log(logger, { hideStaticLogs: config.server?.hideStaticLogs ?? true }));\n app.use(errorReportingMiddlewareWrap);\n app.use(userAgent(config));\n app.use(compression({ filter: compressionFilter }));\n\n // Body parser for JSON requests must be registered before plugins\n // so plugins can access req.body instead of manually reading the stream\n // This prevents \"stream is not readable\" errors when plugins try to read req.body\n registerBodyParser(app, config);\n\n app.get(\n '/favicon.ico',\n function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {\n req.url = '/-/static/favicon.ico';\n next();\n }\n );\n\n // Hook for tests only\n if (config._debug) {\n hookDebug(app, config.configPath);\n }\n\n const plugins: pluginUtils.ExpressMiddleware<IConfig, {}, Auth>[] = await asyncLoadPlugin(\n config.middlewares,\n {\n config,\n logger,\n },\n pluginSanity.middlewareSanityCheck,\n false,\n config.server?.pluginPrefix ?? PLUGIN_PREFIX,\n PLUGIN_CATEGORY.MIDDLEWARE\n );\n\n if (plugins.length === 0) {\n const auditPlugin = new AuditMiddleware(\n { enabled: true, strict_ssl: true },\n { config, logger }\n );\n logger.info(\n { name: 'verdaccio-audit', pluginCategory: PLUGIN_CATEGORY.MIDDLEWARE },\n 'plugin @{name} successfully loaded (@{pluginCategory})'\n );\n plugins.push(auditPlugin);\n }\n\n // Register JWT middleware so middleware plugins can access req.remote_user.\n const apiAuthRouter = express.Router();\n apiAuthRouter.use(WebUrlsNamespace.endpoints, (_req, _res, next) => next('router'));\n apiAuthRouter.use(auth.apiJWTmiddleware());\n app.use(apiAuthRouter);\n\n // Ensure sequential execution in order, and that each registration completes before the next one starts\n for (const plugin of plugins) {\n plugin.register_middlewares(app, auth, storage);\n }\n\n // For package manager requests\n app.use(apiEndpoint(config, auth, storage, logger));\n\n // For WebUI & WebUI API\n if (get(config, 'web.enabled', get(config, 'web.enable', true))) {\n app.use((_req, res, next) => {\n res.locals.app_version = version ?? '';\n next();\n });\n const middleware = await webMiddleware(config, auth, storage, logger);\n app.use(middleware);\n } else {\n app.get('/', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound(API_ERROR.WEB_DISABLED));\n });\n }\n\n // Catch 404\n app.get('/{*any}', function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {\n next(errorUtils.getNotFound('resource not found'));\n });\n\n app.use(handleError(logger));\n\n // app.use(function (\n // err: HttpError,\n // req: $RequestExtend,\n // res: $ResponseExtend,\n // next: $NextFunctionVer\n // ) {\n // if (_.isError(err)) {\n // if (err.code === 'ECONNABORT' && res.statusCode === HTTP_STATUS.NOT_MODIFIED) {\n // return next();\n // }\n // if (_.isFunction(res.locals.report_error) === false) {\n // // in case of very early error this middleware may not be loaded before error is generated\n // // fixing that\n // errorReportingMiddlewareWrap(req, res, _.noop);\n // }\n // res.locals.report_error(err);\n // } else {\n // // Fall to Middleware.final\n // return next(err);\n // }\n // });\n\n app.use(final);\n\n return app;\n};\n\nconst startServer = async function startServer(configHash: ConfigYaml): Promise<Express> {\n debug('start server');\n const config: IConfig = new AppConfig({ ...configHash } as any);\n const storage = new Storage(config, logger);\n try {\n // waits until init calls have been completed\n debug('storage init start');\n await storage.init(config);\n debug('storage init end');\n } catch (err: any) {\n logger.error({ error: err.msg }, 'storage has failed: @{error}');\n throw new Error(err);\n }\n return await defineAPI(config, storage);\n};\n\nexport { startServer };\nexport default startServer;\n"],"mappings":";;;;;;;;;;;;;;;;;AAyCA,IAAM,QAAQ,WAAW,kBAAkB;AAC3C,IAAM,aAAa,OAAO,cAAc,cAAc,YAAY,YAAY;AAC9E,IAAM,EAAE,YAAY,SAAS,eAAe,YAAY,IAAI;AAE5D,IAAa,YAAY,eAAgB,QAAiB,SAAoC;CAC5F,MAAM,OAAO,IAAI,KAAK,QAAQ,MAAM;CACpC,MAAM,KAAK,KAAK;CAChB,MAAM,MAAM,QAAQ;CAGpB,IAAI,IAAI,OAAA,QAAA,IAAA,YAA+B,YAAY;CACnD,IAAI,OAAO,QAAQ,YACjB,IAAI,IAAI,eAAe,OAAO,OAAO,UAAU;CAEjD,IAAI,IAAI,KAAK,CAAC;CACd,IAAI,IAAI,UAAU,OAAO,QAAQ,SAAS,CAAC;CAO3C,MAAM,qBAAqB,KAAK,QAAiB;EAE/C,IADoB,OAAO,IAAI,UAAU,QAAQ,YAAY,KAAK,EAC9D,CAAA,CAAY,WAAW,0BAA0B,GACnD,OAAO;EAET,OAAO,YAAY,OAAO,KAAK,GAAG;CACpC;CAEA,IAAI,IAAI,SAAS,OAAO,QAAQ,YAAY,QAAQ,CAAC;CAErD,MAAM,+BAA+B,yBAAyB,MAAM;CAGpE,IAAI,IAAI,IAAI,QAAQ,EAAE,gBAAgB,OAAO,QAAQ,kBAAkB,KAAK,CAAC,CAAC;CAC9E,IAAI,IAAI,4BAA4B;CACpC,IAAI,IAAI,UAAU,MAAM,CAAC;CACzB,IAAI,IAAI,YAAY,EAAE,QAAQ,kBAAkB,CAAC,CAAC;CAKlD,mBAAmB,KAAK,MAAM;CAE9B,IAAI,IACF,gBACA,SAAU,KAAqB,KAAsB,MAA8B;EACjF,IAAI,MAAM;EACV,KAAK;CACP,CACF;CAGA,IAAI,OAAO,QACT,cAAU,KAAK,OAAO,UAAU;CAGlC,MAAM,UAA8D,MAAM,gBACxE,OAAO,aACP;EACE;EACA;CACF,GACA,YAAa,uBACb,OACA,OAAO,QAAQ,gBAAgB,eAC/B,gBAAgB,UAClB;CAEA,IAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,cAAc,IAAI,gBACtB;GAAE,SAAS;GAAM,YAAY;EAAK,GAClC;GAAE;GAAQ;EAAO,CACnB;EACA,OAAO,KACL;GAAE,MAAM;GAAmB,gBAAgB,gBAAgB;EAAW,GACtE,wDACF;EACA,QAAQ,KAAK,WAAW;CAC1B;CAGA,MAAM,gBAAgB,QAAQ,OAAO;CACrC,cAAc,IAAI,iBAAiB,YAAY,MAAM,MAAM,SAAS,KAAK,QAAQ,CAAC;CAClF,cAAc,IAAI,KAAK,iBAAiB,CAAC;CACzC,IAAI,IAAI,aAAa;CAGrB,KAAK,MAAM,UAAU,SACnB,OAAO,qBAAqB,KAAK,MAAM,OAAO;CAIhD,IAAI,IAAI,YAAY,QAAQ,MAAM,SAAS,MAAM,CAAC;CAGlD,IAAI,IAAI,QAAQ,eAAe,IAAI,QAAQ,cAAc,IAAI,CAAC,GAAG;EAC/D,IAAI,KAAK,MAAM,KAAK,SAAS;GAC3B,IAAI,OAAO,cAAc,WAAW;GACpC,KAAK;EACP,CAAC;EACD,MAAM,aAAa,MAAM,cAAc,QAAQ,MAAM,SAAS,MAAM;EACpE,IAAI,IAAI,UAAU;CACpB,OACE,IAAI,IAAI,KAAK,SAAU,KAAqB,KAAsB,MAAwB;EACxF,KAAK,WAAW,YAAY,UAAU,YAAY,CAAC;CACrD,CAAC;CAIH,IAAI,IAAI,WAAW,SAAU,KAAqB,KAAsB,MAAwB;EAC9F,KAAK,WAAW,YAAY,oBAAoB,CAAC;CACnD,CAAC;CAED,IAAI,IAAI,YAAY,MAAM,CAAC;CAwB3B,IAAI,IAAI,KAAK;CAEb,OAAO;AACT;AAEA,IAAM,cAAc,eAAe,YAAY,YAA0C;CACvF,MAAM,cAAc;CACpB,MAAM,SAAkB,IAAI,OAAU,EAAE,GAAG,WAAW,CAAQ;CAC9D,MAAM,UAAU,IAAI,QAAQ,QAAQ,MAAM;CAC1C,IAAI;EAEF,MAAM,oBAAoB;EAC1B,MAAM,QAAQ,KAAK,MAAM;EACzB,MAAM,kBAAkB;CAC1B,SAAS,KAAU;EACjB,OAAO,MAAM,EAAE,OAAO,IAAI,IAAI,GAAG,8BAA8B;EAC/D,MAAM,IAAI,MAAM,GAAG;CACrB;CACA,OAAO,MAAM,UAAU,QAAQ,OAAO;AACxC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@verdaccio/server",
3
- "version": "9.0.0-next-9.29",
3
+ "version": "9.0.0-next-9.31",
4
4
  "description": "Verdaccio Express Server",
5
5
  "main": "./build/index.js",
6
6
  "types": "build/index.d.ts",
@@ -33,28 +33,28 @@
33
33
  "node": ">=24"
34
34
  },
35
35
  "dependencies": {
36
- "@verdaccio/api": "9.0.0-next-9.29",
37
- "@verdaccio/auth": "9.0.0-next-9.29",
38
- "@verdaccio/config": "9.0.0-next-9.29",
39
- "@verdaccio/core": "9.0.0-next-9.29",
40
- "@verdaccio/loaders": "9.0.0-next-9.29",
41
- "@verdaccio/logger": "9.0.0-next-9.29",
42
- "@verdaccio/middleware": "9.0.0-next-9.29",
43
- "@verdaccio/store": "9.0.0-next-9.29",
44
- "@verdaccio/web": "9.0.0-next-9.29",
36
+ "@verdaccio/api": "9.0.0-next-9.31",
37
+ "@verdaccio/auth": "9.0.0-next-9.31",
38
+ "@verdaccio/config": "9.0.0-next-9.31",
39
+ "@verdaccio/core": "9.0.0-next-9.31",
40
+ "@verdaccio/loaders": "9.0.0-next-9.31",
41
+ "@verdaccio/logger": "9.0.0-next-9.31",
42
+ "@verdaccio/middleware": "9.0.0-next-9.31",
43
+ "@verdaccio/store": "9.0.0-next-9.31",
44
+ "@verdaccio/web": "9.0.0-next-9.31",
45
45
  "compression": "1.8.1",
46
46
  "cors": "2.8.6",
47
47
  "debug": "4.4.3",
48
48
  "express": "5.2.1",
49
49
  "lodash-es": "4.18.1",
50
- "verdaccio-audit": "14.0.0-next-9.29"
50
+ "verdaccio-audit": "14.0.0-next-9.31"
51
51
  },
52
52
  "devDependencies": {
53
53
  "@types/lodash-es": "4.17.12",
54
- "@verdaccio/types": "14.0.0-next-9.13",
54
+ "@verdaccio/types": "14.0.0-next-9.14",
55
55
  "supertest": "7.1.4",
56
56
  "rimraf": "6.1.3",
57
- "vite": "8.2.1",
57
+ "vite": "8.2.2",
58
58
  "vitest": "4.1.10"
59
59
  },
60
60
  "funding": {