unkey 2.0.65 → 2.0.144

package/README.md

@@ -1,24 +1,44 @@
 <div align="center">
     <h1 align="center">Unkey</h1>
-    <h5>Open Source API authentication and authorization</h5>
+    <h5>The Developer Platform for Modern APIs</h5>
 </div>
 
 <div align="center">
-  <a href="https://go.unkey.com">unkey.com</a>
+  <a href="https://go.unkey.com">unkey.com</a> ·
+  <a href="https://www.unkey.com/docs">Docs</a> ·
+  <a href="https://engineering.unkey.com">Engineering</a> ·
+  <a href="https://go.unkey.com/discord">Discord</a>
 </div>
 <br/>
 
-## Contributing
+## What is Unkey?
 
-We welcome contributions! To ensure your work doesn't conflict with ongoing work, please:
+**Unkey is the developer platform for modern APIs.** We unify your infrastructure so you can ship faster: deploy APIs instantly, route traffic through global gateways, and understand usage — all in one place.
 
-1. Read our [contributing guide](https://engineering.unkey.com/docs/contributing)
-2. **Discuss your ideas with us in public channels (GitHub/Discord) BEFORE starting development** (No private DMs)
-3. Get approval from a core team member
+- **Deploy** — push an API to production in seconds, with zero infrastructure to manage
+- **Gateway** — route, authenticate, and shape traffic through globally distributed gateways
+- **API Keys** — issue, verify, and revoke keys with fast global verification
+- **Ratelimiting** — globally consistent, durable ratelimiting for any identifier
+- **Permissions & RBAC** — per-key permissions, roles, and fine-grained access control
+- **Analytics** — usage, latency, and per-key insights across every request
+- **Audit logs** — immutable history of every action across your workspace
 
-This helps us align efforts and prevents duplicated or conflicting work.
 
-## Let's talk
+## License
+
+Please find the license under the [LICENSE](./LICENSE) file.
+
+## Pull requests
+
+**Unkey is not accepting external pull requests at this time.**
+
+Unkey has paused external code contributions while the team focuses on platform direction and stability. Pull requests opened by people outside the Unkey team will not be reviewed or merged.
+
+Issues remain open for bug reports, feature requests, and documentation feedback. This repository remains public and source-available so you can read the code, fork it under the terms of the AGPL, and self-host. Unkey may revisit this policy in the future, and any change will be announced here.
+
+If you've found a security issue, please email [security@unkey.com](mailto:security@unkey.com) instead of opening a public issue.
+
+## Let's Talk
 
 <a href="https://unkey.cal.com/unkey/user-interview?utm_source=banner&utm_campaign=oss"><img alt="Book us with Cal.com" src="https://cal.com/book-with-cal-dark.svg" /></a>
 

package/install.js

@@ -2,5 +2,5 @@
 
 // This file was generated by GoReleaser. DO NOT EDIT.
 
-const { install } = require("./lib.js");
+import { install } from "./lib.js";
 install();

package/lib.js

@@ -1,15 +1,21 @@
 // This file was generated by GoReleaser. DO NOT EDIT.
-const { archives } = require("./package.json");
-const fs = require("fs");
-const crypto = require("crypto");
-const path = require("path");
-const JSZip = require("jszip");
-const tar = require("tar");
-const axios = require("axios");
-const { ProxyAgent } = require("proxy-agent");
-const { spawnSync } = require("child_process");
+import fs from "fs";
+import crypto from "crypto";
+import http from "http";
+import https from "https";
+import path from "path";
+import JSZip from "jszip";
+import { x as tarExtract } from "tar";
+import { ProxyAgent } from "proxy-agent";
+import { spawnSync } from "child_process";
+import { fileURLToPath } from "url";
+
+const { archives, name, version } = JSON.parse(
+	fs.readFileSync(new URL("./package.json", import.meta.url), "utf8"),
+);
 
 const agent = new ProxyAgent();
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 const getArchive = () => {
 	let target = `${process.platform}-${process.arch}`;
@@ -30,7 +36,7 @@ async function extractTar(tarPath, binaries, dir, wrappedIn) {
 			)
 			: binaries;
 
-		await tar.x({
+		await tarExtract({
 			file: tarPath,
 			cwd: dir,
 			filter: (path) => filesToExtract.includes(path),
@@ -125,23 +131,25 @@ const install = async () => {
 				const bin = path.join(binDir, archive.bins[0]);
 				fs.copyFileSync(archivePath, bin);
 				fs.chmodSync(bin, 0o755);
-				return;
+				break;
 			case "zip":
-				return extractZip(
+				await extractZip(
 					archivePath,
 					archive.bins,
 					binDir,
 					archive.wrappedIn,
 				);
+				break;
 			case "tar":
 			case "tar.gz":
 			case "tgz":
-				return extractTar(
+				await extractTar(
 					archivePath,
 					archive.bins,
 					binDir,
 					archive.wrappedIn,
 				);
+				break;
 			case "tar.zst":
 			case "tzst":
 			case "tar.xz":
@@ -149,6 +157,7 @@ const install = async () => {
 			default:
 				throw new Error(`unsupported format: ${archive.format}`);
 		}
+		console.log(`Installed ${name} ${version} to ${binDir}`);
 	} catch (err) {
 		throw new Error(`Installation failed: ${err.message}`);
 	}
@@ -170,7 +179,7 @@ const verify = (filename, checksum) => {
 	}
 };
 
-const download = async (url, filename) => {
+const download = async (url, filename, maxRedirects = 10) => {
 	try {
 		console.log(`Downloading ${url} to ${filename}...`);
 		const dir = path.dirname(filename);
@@ -178,27 +187,56 @@ const download = async (url, filename) => {
 			fs.mkdirSync(dir, { recursive: true });
 		}
 
-		const response = await axios({
-			method: "GET",
-			url: url,
-			responseType: "stream",
-			timeout: 300000, // 5min
-			httpAgent: agent,
-			httpsAgent: agent,
-		});
+		return new Promise((resolve, reject) => {
+			const parsedUrl = new URL(url);
+			const mod = parsedUrl.protocol === "https:" ? https : http;
 
-		const writer = fs.createWriteStream(filename);
-		response.data.pipe(writer);
+			const request = mod.get(url, { agent }, (response) => {
+				if (
+					response.statusCode >= 300 &&
+					response.statusCode < 400 &&
+					response.headers.location
+				) {
+					if (maxRedirects <= 0) {
+						reject(new Error("Too many redirects"));
+						return;
+					}
+					download(response.headers.location, filename, maxRedirects - 1)
+						.then(resolve)
+						.catch(reject);
+					return;
+				}
 
-		return new Promise((resolve, reject) => {
-			writer.on("finish", () => {
-				console.log(`Download complete: ${filename}`);
-				resolve(dir);
+				if (response.statusCode !== 200) {
+					reject(
+						new Error(
+							`HTTP ${response.statusCode}: ${response.statusMessage}`,
+						),
+					);
+					return;
+				}
+
+				const writer = fs.createWriteStream(filename);
+				response.pipe(writer);
+
+				writer.on("finish", () => {
+					console.log(`Download complete: ${filename}`);
+					resolve(dir);
+				});
+
+				writer.on("error", (err) => {
+					console.error(`Error writing file: ${err.message}`);
+					reject(err);
+				});
+			});
+
+			request.on("error", (err) => {
+				reject(new Error(`Request failed: ${err.message}`));
 			});
 
-			writer.on("error", (err) => {
-				console.error(`Error writing file: ${err.message}`);
-				reject(err);
+			request.setTimeout(300000, () => {
+				request.destroy();
+				reject(new Error("Request timed out"));
 			});
 		});
 	} catch (err) {
@@ -213,8 +251,9 @@ function exists(archive) {
 	return archive.bins.every((bin) => fs.existsSync(path.join(binDir, bin)));
 }
 
-module.exports = {
+export {
 	install,
 	run,
 	getArchive,
+	download,
 };

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "unkey",
-  "version": "2.0.65",
+  "type": "module",
+  "version": "2.0.144",
   "description": "Unkey CLI",
   "scripts": {
     "postinstall": "node install.js",
@@ -18,58 +19,57 @@
     "unkey": "run-unkey.js"
   },
   "dependencies": {
-    "axios": "^1.8.2",
-    "jszip": "^3.10.1",
-    "proxy-agent": "^6.5.0",
-    "tar": "^7.4.3"
+    "jszip": "3.10.1",
+    "proxy-agent": "8.0.1",
+    "tar": "7.5.13"
   },
   "archives": {
     "darwin-arm64": {
       "name": "unkey_Darwin_arm64.tar.gz",
-      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.65/unkey_Darwin_arm64.tar.gz",
+      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.144/unkey_Darwin_arm64.tar.gz",
       "bins": [
         "unkey"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "7c6770acd01930b123839fde18cae9806a8a18ad77dc3a28b198fb77b1c957ab"
+        "digest": "1952e53e057fbeb1cd0c2e1bfcb75c7a4d5a6e7364086adc250445c907dd8f10"
       }
     },
     "darwin-x64": {
       "name": "unkey_Darwin_x86_64.tar.gz",
-      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.65/unkey_Darwin_x86_64.tar.gz",
+      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.144/unkey_Darwin_x86_64.tar.gz",
       "bins": [
         "unkey"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "ec0a2488e73f821940aa839d42ba4b9ea47b2f7a083b0549a2f024fde97c79c9"
+        "digest": "9f5787407cd4197de12c7d013f6eed0ee0b1ab138cc7f3d5a0decdcccbacbb62"
       }
     },
     "linux-arm64": {
       "name": "unkey_Linux_arm64.tar.gz",
-      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.65/unkey_Linux_arm64.tar.gz",
+      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.144/unkey_Linux_arm64.tar.gz",
       "bins": [
         "unkey"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "df6cf66fce589befefbecdb07b43e4135c561ff682637b92b4d31663acba52bd"
+        "digest": "5308f8448d4554a22a502210bf623cc2b2b4bfb47d1c70f4bb8f286142a54ce9"
       }
     },
     "linux-x64": {
       "name": "unkey_Linux_x86_64.tar.gz",
-      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.65/unkey_Linux_x86_64.tar.gz",
+      "url": "https://github.com/unkeyed/unkey/releases/download/v2.0.144/unkey_Linux_x86_64.tar.gz",
       "bins": [
         "unkey"
       ],
       "format": "tar.gz",
       "checksum": {
         "algorithm": "sha256",
-        "digest": "cfab117831bbd911434ff2917603d4677575d104a2b13885d668ddf11d3c338c"
+        "digest": "833f452bb0ab0c33d8c82edea11b795998275385942718ec4cbb7966a0c9290b"
       }
     }
   }

package/run-unkey.js

@@ -2,5 +2,5 @@
 
 // This file was generated by GoReleaser. DO NOT EDIT.
 
-const { run } = require("./lib.js");
+import { run } from "./lib.js";
 run("unkey").then((code) => process.exit(code));