verdaccio-audit 10.2.1 → 10.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/audit.js +8 -0
- package/lib/audit.js.map +1 -1
- package/lib/index.js.map +1 -1
- package/lib/types.js.map +1 -1
- package/package.json +3 -3
package/lib/audit.js
CHANGED
|
@@ -17,12 +17,20 @@ var _bodyParser = require("body-parser");
|
|
|
17
17
|
|
|
18
18
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
19
19
|
|
|
20
|
+
function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
|
|
21
|
+
|
|
20
22
|
// FUTURE: we should be able to overwrite this
|
|
21
23
|
const REGISTRY_DOMAIN = 'https://registry.npmjs.org';
|
|
22
24
|
exports.REGISTRY_DOMAIN = REGISTRY_DOMAIN;
|
|
23
25
|
|
|
24
26
|
class ProxyAudit {
|
|
25
27
|
constructor(config, options) {
|
|
28
|
+
_defineProperty(this, "enabled", void 0);
|
|
29
|
+
|
|
30
|
+
_defineProperty(this, "logger", void 0);
|
|
31
|
+
|
|
32
|
+
_defineProperty(this, "strict_ssl", void 0);
|
|
33
|
+
|
|
26
34
|
this.enabled = config.enabled || false;
|
|
27
35
|
this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;
|
|
28
36
|
this.logger = options.logger;
|
package/lib/audit.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"audit.js","names":["REGISTRY_DOMAIN","ProxyAudit","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","jsonParser","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import https from 'https';\nimport fetch from 'node-fetch';\nimport express, { Request, Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport { json as jsonParser } from 'body-parser';\nimport { Logger, IPluginMiddleware, IBasicAuth, PluginOptions } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit implements IPluginMiddleware<ConfigAudit> {\n public enabled: boolean;\n public logger: Logger;\n public strict_ssl: boolean;\n\n public constructor(config: ConfigAudit, options: PluginOptions<ConfigAudit>) {\n this.enabled = config.enabled || false;\n this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n this.logger = options.logger;\n }\n\n public register_middlewares(app: any, auth: IBasicAuth<ConfigAudit>): void {\n const fetchAudit = (req: Request, res: Response & { report_error?: Function }): void => {\n const headers = req.headers;\n\n headers['host'] = 'registry.npmjs.org';\n headers['content-encoding'] = 'gzip,deflate,br';\n\n let requestOptions: any = {\n agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n body: JSON.stringify(req.body),\n headers,\n method: req.method,\n };\n\n if (auth?.config?.https_proxy) {\n // we should check whether this works fine after this migration\n // please notify if anyone is having issues\n const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n requestOptions = Object.assign({}, requestOptions, {\n agent,\n });\n }\n\n (async () => {\n try {\n const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n this.logger.debug('fetching audit from ' + auditEndpoint);\n\n const response = await fetch(auditEndpoint, requestOptions);\n\n if (response.ok) {\n res.status(response.status).send(await response.json());\n } else {\n this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n res.status(response.status).end();\n }\n } catch (error) {\n this.logger.warn('could not fetch audit: ' + error);\n res.status(500).end();\n }\n })();\n };\n\n const handleAudit = (req: Request, res: Response): void => {\n if (this.enabled) {\n fetchAudit(req, res);\n } else {\n res.status(500).end();\n }\n };\n\n /* eslint new-cap:off */\n const router = express.Router();\n /* eslint new-cap:off */\n\n router.post('/audits', jsonParser({ limit: '10mb' }), handleAudit);\n router.post('/audits/quick', jsonParser({ limit: '10mb' }), handleAudit);\n\n router.post('/advisories/bulk', jsonParser({ limit: '10mb' }), handleAudit);\n\n app.use('/-/npm/v1/security', router);\n }\n}\n"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;;;;;AAKA;AACO,MAAMA,eAAe,GAAG,4BAAxB;;;AAEQ,MAAMC,UAAN,CAA2D;EAKjEC,WAAW,CAACC,MAAD,EAAsBC,OAAtB,EAA2D;IAAA;;IAAA;;IAAA;;IAC3E,KAAKC,OAAL,GAAeF,MAAM,CAACE,OAAP,IAAkB,KAAjC;IACA,KAAKC,UAAL,GAAkBH,MAAM,CAACG,UAAP,KAAsBC,SAAtB,GAAkCJ,MAAM,CAACG,UAAzC,GAAsD,IAAxE;IACA,KAAKE,MAAL,GAAcJ,OAAO,CAACI,MAAtB;EACD;;EAEMC,oBAAoB,CAACC,GAAD,EAAWC,IAAX,EAAgD;IACzE,MAAMC,UAAU,GAAG,CAACC,GAAD,EAAeC,GAAf,KAAqE;MAAA;;MACtF,MAAMC,OAAO,GAAGF,GAAG,CAACE,OAApB;MAEAA,OAAO,CAAC,MAAD,CAAP,GAAkB,oBAAlB;MACAA,OAAO,CAAC,kBAAD,CAAP,GAA8B,iBAA9B;MAEA,IAAIC,cAAmB,GAAG;QACxBC,KAAK,EAAE,IAAIC,cAAA,CAAMC,KAAV,CAAgB;UAAEC,kBAAkB,EAAE,KAAKd;QAA3B,CAAhB,CADiB;QAExBe,IAAI,EAAEC,IAAI,CAACC,SAAL,CAAeV,GAAG,CAACQ,IAAnB,CAFkB;QAGxBN,OAHwB;QAIxBS,MAAM,EAAEX,GAAG,CAACW;MAJY,CAA1B;;MAOA,IAAIb,IAAJ,aAAIA,IAAJ,+BAAIA,IAAI,CAAER,MAAV,yCAAI,aAAcsB,WAAlB,EAA+B;QAAA;;QAC7B;QACA;QACA,MAAMR,KAAK,GAAG,IAAAS,wBAAA,EAAsBf,IAAtB,aAAsBA,IAAtB,wCAAsBA,IAAI,CAAER,MAA5B,kDAAsB,cAAcsB,WAApC,CAAd;QACAT,cAAc,GAAGW,MAAM,CAACC,MAAP,CAAc,EAAd,EAAkBZ,cAAlB,EAAkC;UACjDC;QADiD,CAAlC,CAAjB;MAGD;;MAED,CAAC,YAAY;QACX,IAAI;UACF,MAAMY,aAAa,GAAI,GAAE7B,eAAgB,GAAEa,GAAG,CAACiB,OAAQ,GAAEjB,GAAG,CAACkB,KAAJ,CAAUC,IAAK,EAAxE;UACA,KAAKxB,MAAL,CAAYyB,KAAZ,CAAkB,yBAAyBJ,aAA3C;UAEA,MAAMK,QAAQ,GAAG,MAAM,IAAAC,kBAAA,EAAMN,aAAN,EAAqBb,cAArB,CAAvB;;UAEA,IAAIkB,QAAQ,CAACE,EAAb,EAAiB;YACftB,GAAG,CAACuB,MAAJ,CAAWH,QAAQ,CAACG,MAApB,EAA4BC,IAA5B,CAAiC,MAAMJ,QAAQ,CAACK,IAAT,EAAvC;UACD,CAFD,MAEO;YACL,KAAK/B,MAAL,CAAYgC,IAAZ,CAAiB,4BAA4BlB,IAAI,CAACC,SAAL,CAAe,MAAMW,QAAQ,CAACK,IAAT,EAArB,CAA7C;YACAzB,GAAG,CAACuB,MAAJ,CAAWH,QAAQ,CAACG,MAApB,EAA4BI,GAA5B;UACD;QACF,CAZD,CAYE,OAAOC,KAAP,EAAc;UACd,KAAKlC,MAAL,CAAYgC,IAAZ,CAAiB,4BAA4BE,KAA7C;UACA5B,GAAG,CAACuB,MAAJ,CAAW,GAAX,EAAgBI,GAAhB;QACD;MACF,CAjBD;IAkBD,CAxCD;;IA0CA,MAAME,WAAW,GAAG,CAAC9B,GAAD,EAAeC,GAAf,KAAuC;MACzD,IAAI,KAAKT,OAAT,EAAkB;QAChBO,UAAU,CAACC,GAAD,EAAMC,GAAN,CAAV;MACD,CAFD,MAEO;QACLA,GAAG,CAACuB,MAAJ,CAAW,GAAX,EAAgBI,GAAhB;MACD;IACF,CAND;IAQA;;;IACA,MAAMG,MAAM,GAAGC,gBAAA,CAAQC,MAAR,EAAf;IACA;;;IAEAF,MAAM,CAACG,IAAP,CAAY,SAAZ,EAAuB,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAAvB,EAAsDN,WAAtD;IACAC,MAAM,CAACG,IAAP,CAAY,eAAZ,EAA6B,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAA7B,EAA4DN,WAA5D;IAEAC,MAAM,CAACG,IAAP,CAAY,kBAAZ,EAAgC,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAAhC,EAA+DN,WAA/D;IAEAjC,GAAG,CAACwC,GAAJ,CAAQ,oBAAR,EAA8BN,MAA9B;EACD;;AAxEuE"}
|
package/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"index.js","names":["AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;;AAAA;;AACA;;;;eAIeA,c"}
|
package/lib/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["// Temporary solution for requiring types will not cause the error.\nimport { Config } from '@verdaccio/types';\n\nexport interface ConfigAudit extends Config {\n enabled: boolean;\n strict_ssl?: boolean | void;\n}\n"],"mappings":""}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "verdaccio-audit",
|
|
3
|
-
"version": "10.2.
|
|
3
|
+
"version": "10.2.2",
|
|
4
4
|
"description": "Verdaccio Middleware plugin to bypass npmjs audit",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"verdaccio",
|
|
@@ -28,8 +28,8 @@
|
|
|
28
28
|
"node": ">=8"
|
|
29
29
|
},
|
|
30
30
|
"dependencies": {
|
|
31
|
-
"express": "4.
|
|
32
|
-
"https-proxy-agent": "5.0.
|
|
31
|
+
"express": "4.18.1",
|
|
32
|
+
"https-proxy-agent": "5.0.1",
|
|
33
33
|
"body-parser": "1.20.0",
|
|
34
34
|
"node-fetch": "2.6.7"
|
|
35
35
|
},
|