verdaccio-audit 10.2.1 → 10.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/audit.js +1 -20
- package/lib/audit.js.map +1 -1
- package/lib/index.js +0 -4
- package/lib/index.js.map +1 -1
- package/lib/types.js.map +1 -1
- package/package.json +5 -5
package/lib/audit.js
CHANGED
|
@@ -4,34 +4,24 @@ Object.defineProperty(exports, "__esModule", {
|
|
|
4
4
|
value: true
|
|
5
5
|
});
|
|
6
6
|
exports.default = exports.REGISTRY_DOMAIN = void 0;
|
|
7
|
-
|
|
8
7
|
var _https = _interopRequireDefault(require("https"));
|
|
9
|
-
|
|
10
8
|
var _nodeFetch = _interopRequireDefault(require("node-fetch"));
|
|
11
|
-
|
|
12
9
|
var _express = _interopRequireDefault(require("express"));
|
|
13
|
-
|
|
14
10
|
var _httpsProxyAgent = _interopRequireDefault(require("https-proxy-agent"));
|
|
15
|
-
|
|
16
11
|
var _bodyParser = require("body-parser");
|
|
17
|
-
|
|
18
12
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
19
|
-
|
|
20
13
|
// FUTURE: we should be able to overwrite this
|
|
21
14
|
const REGISTRY_DOMAIN = 'https://registry.npmjs.org';
|
|
22
15
|
exports.REGISTRY_DOMAIN = REGISTRY_DOMAIN;
|
|
23
|
-
|
|
24
16
|
class ProxyAudit {
|
|
25
17
|
constructor(config, options) {
|
|
26
18
|
this.enabled = config.enabled || false;
|
|
27
19
|
this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;
|
|
28
20
|
this.logger = options.logger;
|
|
29
21
|
}
|
|
30
|
-
|
|
31
22
|
register_middlewares(app, auth) {
|
|
32
23
|
const fetchAudit = (req, res) => {
|
|
33
24
|
var _auth$config;
|
|
34
|
-
|
|
35
25
|
const headers = req.headers;
|
|
36
26
|
headers['host'] = 'registry.npmjs.org';
|
|
37
27
|
headers['content-encoding'] = 'gzip,deflate,br';
|
|
@@ -43,10 +33,8 @@ class ProxyAudit {
|
|
|
43
33
|
headers,
|
|
44
34
|
method: req.method
|
|
45
35
|
};
|
|
46
|
-
|
|
47
36
|
if (auth !== null && auth !== void 0 && (_auth$config = auth.config) !== null && _auth$config !== void 0 && _auth$config.https_proxy) {
|
|
48
37
|
var _auth$config2;
|
|
49
|
-
|
|
50
38
|
// we should check whether this works fine after this migration
|
|
51
39
|
// please notify if anyone is having issues
|
|
52
40
|
const agent = (0, _httpsProxyAgent.default)(auth === null || auth === void 0 ? void 0 : (_auth$config2 = auth.config) === null || _auth$config2 === void 0 ? void 0 : _auth$config2.https_proxy);
|
|
@@ -54,13 +42,11 @@ class ProxyAudit {
|
|
|
54
42
|
agent
|
|
55
43
|
});
|
|
56
44
|
}
|
|
57
|
-
|
|
58
45
|
(async () => {
|
|
59
46
|
try {
|
|
60
47
|
const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;
|
|
61
48
|
this.logger.debug('fetching audit from ' + auditEndpoint);
|
|
62
49
|
const response = await (0, _nodeFetch.default)(auditEndpoint, requestOptions);
|
|
63
|
-
|
|
64
50
|
if (response.ok) {
|
|
65
51
|
res.status(response.status).send(await response.json());
|
|
66
52
|
} else {
|
|
@@ -73,7 +59,6 @@ class ProxyAudit {
|
|
|
73
59
|
}
|
|
74
60
|
})();
|
|
75
61
|
};
|
|
76
|
-
|
|
77
62
|
const handleAudit = (req, res) => {
|
|
78
63
|
if (this.enabled) {
|
|
79
64
|
fetchAudit(req, res);
|
|
@@ -81,13 +66,11 @@ class ProxyAudit {
|
|
|
81
66
|
res.status(500).end();
|
|
82
67
|
}
|
|
83
68
|
};
|
|
84
|
-
/* eslint new-cap:off */
|
|
85
|
-
|
|
86
69
|
|
|
70
|
+
/* eslint new-cap:off */
|
|
87
71
|
const router = _express.default.Router();
|
|
88
72
|
/* eslint new-cap:off */
|
|
89
73
|
|
|
90
|
-
|
|
91
74
|
router.post('/audits', (0, _bodyParser.json)({
|
|
92
75
|
limit: '10mb'
|
|
93
76
|
}), handleAudit);
|
|
@@ -99,8 +82,6 @@ class ProxyAudit {
|
|
|
99
82
|
}), handleAudit);
|
|
100
83
|
app.use('/-/npm/v1/security', router);
|
|
101
84
|
}
|
|
102
|
-
|
|
103
85
|
}
|
|
104
|
-
|
|
105
86
|
exports.default = ProxyAudit;
|
|
106
87
|
//# sourceMappingURL=audit.js.map
|
package/lib/audit.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"audit.js","names":["REGISTRY_DOMAIN","ProxyAudit","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","jsonParser","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import https from 'https';\nimport fetch from 'node-fetch';\nimport express, { Request, Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport { json as jsonParser } from 'body-parser';\nimport { Logger, IPluginMiddleware, IBasicAuth, PluginOptions } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit implements IPluginMiddleware<ConfigAudit> {\n public enabled: boolean;\n public logger: Logger;\n public strict_ssl: boolean;\n\n public constructor(config: ConfigAudit, options: PluginOptions<ConfigAudit>) {\n this.enabled = config.enabled || false;\n this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n this.logger = options.logger;\n }\n\n public register_middlewares(app: any, auth: IBasicAuth<ConfigAudit>): void {\n const fetchAudit = (req: Request, res: Response & { report_error?: Function }): void => {\n const headers = req.headers;\n\n headers['host'] = 'registry.npmjs.org';\n headers['content-encoding'] = 'gzip,deflate,br';\n\n let requestOptions: any = {\n agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n body: JSON.stringify(req.body),\n headers,\n method: req.method,\n };\n\n if (auth?.config?.https_proxy) {\n // we should check whether this works fine after this migration\n // please notify if anyone is having issues\n const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n requestOptions = Object.assign({}, requestOptions, {\n agent,\n });\n }\n\n (async () => {\n try {\n const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n this.logger.debug('fetching audit from ' + auditEndpoint);\n\n const response = await fetch(auditEndpoint, requestOptions);\n\n if (response.ok) {\n res.status(response.status).send(await response.json());\n } else {\n this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n res.status(response.status).end();\n }\n } catch (error) {\n this.logger.warn('could not fetch audit: ' + error);\n res.status(500).end();\n }\n })();\n };\n\n const handleAudit = (req: Request, res: Response): void => {\n if (this.enabled) {\n fetchAudit(req, res);\n } else {\n res.status(500).end();\n }\n };\n\n /* eslint new-cap:off */\n const router = express.Router();\n /* eslint new-cap:off */\n\n router.post('/audits', jsonParser({ limit: '10mb' }), handleAudit);\n router.post('/audits/quick', jsonParser({ limit: '10mb' }), handleAudit);\n\n router.post('/advisories/bulk', jsonParser({ limit: '10mb' }), handleAudit);\n\n app.use('/-/npm/v1/security', router);\n }\n}\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AAAiD;AAKjD;AACO,MAAMA,eAAe,GAAG,4BAA4B;AAAC;AAE7C,MAAMC,UAAU,CAA2C;EAKjEC,WAAW,CAACC,MAAmB,EAAEC,OAAmC,EAAE;IAC3E,IAAI,CAACC,OAAO,GAAGF,MAAM,CAACE,OAAO,IAAI,KAAK;IACtC,IAAI,CAACC,UAAU,GAAGH,MAAM,CAACG,UAAU,KAAKC,SAAS,GAAGJ,MAAM,CAACG,UAAU,GAAG,IAAI;IAC5E,IAAI,CAACE,MAAM,GAAGJ,OAAO,CAACI,MAAM;EAC9B;EAEOC,oBAAoB,CAACC,GAAQ,EAAEC,IAA6B,EAAQ;IACzE,MAAMC,UAAU,GAAG,CAACC,GAAY,EAAEC,GAA2C,KAAW;MAAA;MACtF,MAAMC,OAAO,GAAGF,GAAG,CAACE,OAAO;MAE3BA,OAAO,CAAC,MAAM,CAAC,GAAG,oBAAoB;MACtCA,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB;MAE/C,IAAIC,cAAmB,GAAG;QACxBC,KAAK,EAAE,IAAIC,cAAK,CAACC,KAAK,CAAC;UAAEC,kBAAkB,EAAE,IAAI,CAACd;QAAW,CAAC,CAAC;QAC/De,IAAI,EAAEC,IAAI,CAACC,SAAS,CAACV,GAAG,CAACQ,IAAI,CAAC;QAC9BN,OAAO;QACPS,MAAM,EAAEX,GAAG,CAACW;MACd,CAAC;MAED,IAAIb,IAAI,aAAJA,IAAI,+BAAJA,IAAI,CAAER,MAAM,yCAAZ,aAAcsB,WAAW,EAAE;QAAA;QAC7B;QACA;QACA,MAAMR,KAAK,GAAG,IAAAS,wBAAqB,EAACf,IAAI,aAAJA,IAAI,wCAAJA,IAAI,CAAER,MAAM,kDAAZ,cAAcsB,WAAW,CAAC;QAC9DT,cAAc,GAAGW,MAAM,CAACC,MAAM,CAAC,CAAC,CAAC,EAAEZ,cAAc,EAAE;UACjDC;QACF,CAAC,CAAC;MACJ;MAEA,CAAC,YAAY;QACX,IAAI;UACF,MAAMY,aAAa,GAAI,GAAE7B,eAAgB,GAAEa,GAAG,CAACiB,OAAQ,GAAEjB,GAAG,CAACkB,KAAK,CAACC,IAAK,EAAC;UACzE,IAAI,CAACxB,MAAM,CAACyB,KAAK,CAAC,sBAAsB,GAAGJ,aAAa,CAAC;UAEzD,MAAMK,QAAQ,GAAG,MAAM,IAAAC,kBAAK,EAACN,aAAa,EAAEb,cAAc,CAAC;UAE3D,IAAIkB,QAAQ,CAACE,EAAE,EAAE;YACftB,GAAG,CAACuB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACC,IAAI,CAAC,MAAMJ,QAAQ,CAACK,IAAI,EAAE,CAAC;UACzD,CAAC,MAAM;YACL,IAAI,CAAC/B,MAAM,CAACgC,IAAI,CAAC,yBAAyB,GAAGlB,IAAI,CAACC,SAAS,CAAC,MAAMW,QAAQ,CAACK,IAAI,EAAE,CAAC,CAAC;YACnFzB,GAAG,CAACuB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACI,GAAG,EAAE;UACnC;QACF,CAAC,CAAC,OAAOC,KAAK,EAAE;UACd,IAAI,CAAClC,MAAM,CAACgC,IAAI,CAAC,yBAAyB,GAAGE,KAAK,CAAC;UACnD5B,GAAG,CAACuB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,EAAE;QACvB;MACF,CAAC,GAAG;IACN,CAAC;IAED,MAAME,WAAW,GAAG,CAAC9B,GAAY,EAAEC,GAAa,KAAW;MACzD,IAAI,IAAI,CAACT,OAAO,EAAE;QAChBO,UAAU,CAACC,GAAG,EAAEC,GAAG,CAAC;MACtB,CAAC,MAAM;QACLA,GAAG,CAACuB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,EAAE;MACvB;IACF,CAAC;;IAED;IACA,MAAMG,MAAM,GAAGC,gBAAO,CAACC,MAAM,EAAE;IAC/B;;IAEAF,MAAM,CAACG,IAAI,CAAC,SAAS,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAClEC,MAAM,CAACG,IAAI,CAAC,eAAe,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAExEC,MAAM,CAACG,IAAI,CAAC,kBAAkB,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAE3EjC,GAAG,CAACwC,GAAG,CAAC,oBAAoB,EAAEN,MAAM,CAAC;EACvC;AACF;AAAC"}
|
package/lib/index.js
CHANGED
|
@@ -10,13 +10,9 @@ Object.defineProperty(exports, "ConfigAudit", {
|
|
|
10
10
|
}
|
|
11
11
|
});
|
|
12
12
|
exports.default = void 0;
|
|
13
|
-
|
|
14
13
|
var _audit = _interopRequireDefault(require("./audit"));
|
|
15
|
-
|
|
16
14
|
var _types = require("./types");
|
|
17
|
-
|
|
18
15
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
19
|
-
|
|
20
16
|
var _default = _audit.default;
|
|
21
17
|
exports.default = _default;
|
|
22
18
|
//# sourceMappingURL=index.js.map
|
package/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"index.js","names":["AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;AAAA;AACA;AAAsC;AAAA,eAIvBA,cAAW;AAAA"}
|
package/lib/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"
|
|
1
|
+
{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["// Temporary solution for requiring types will not cause the error.\nimport { Config } from '@verdaccio/types';\n\nexport interface ConfigAudit extends Config {\n enabled: boolean;\n strict_ssl?: boolean | void;\n}\n"],"mappings":""}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "verdaccio-audit",
|
|
3
|
-
"version": "10.2.
|
|
3
|
+
"version": "10.2.3",
|
|
4
4
|
"description": "Verdaccio Middleware plugin to bypass npmjs audit",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"verdaccio",
|
|
@@ -28,13 +28,13 @@
|
|
|
28
28
|
"node": ">=8"
|
|
29
29
|
},
|
|
30
30
|
"dependencies": {
|
|
31
|
-
"express": "4.
|
|
32
|
-
"https-proxy-agent": "5.0.
|
|
33
|
-
"body-parser": "1.20.
|
|
31
|
+
"express": "4.18.2",
|
|
32
|
+
"https-proxy-agent": "5.0.1",
|
|
33
|
+
"body-parser": "1.20.1",
|
|
34
34
|
"node-fetch": "2.6.7"
|
|
35
35
|
},
|
|
36
36
|
"devDependencies": {
|
|
37
|
-
"@verdaccio/types": "10.
|
|
37
|
+
"@verdaccio/types": "10.7.0"
|
|
38
38
|
},
|
|
39
39
|
"funding": {
|
|
40
40
|
"type": "opencollective",
|