verdaccio-audit 10.2.2 → 10.2.3

package/lib/audit.js

@@ -4,42 +4,24 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.default = exports.REGISTRY_DOMAIN = void 0;
-
 var _https = _interopRequireDefault(require("https"));
-
 var _nodeFetch = _interopRequireDefault(require("node-fetch"));
-
 var _express = _interopRequireDefault(require("express"));
-
 var _httpsProxyAgent = _interopRequireDefault(require("https-proxy-agent"));
-
 var _bodyParser = require("body-parser");
-
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
-
 // FUTURE: we should be able to overwrite this
 const REGISTRY_DOMAIN = 'https://registry.npmjs.org';
 exports.REGISTRY_DOMAIN = REGISTRY_DOMAIN;
-
 class ProxyAudit {
   constructor(config, options) {
-    _defineProperty(this, "enabled", void 0);
-
-    _defineProperty(this, "logger", void 0);
-
-    _defineProperty(this, "strict_ssl", void 0);
-
     this.enabled = config.enabled || false;
     this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;
     this.logger = options.logger;
   }
-
   register_middlewares(app, auth) {
     const fetchAudit = (req, res) => {
       var _auth$config;
-
       const headers = req.headers;
       headers['host'] = 'registry.npmjs.org';
       headers['content-encoding'] = 'gzip,deflate,br';
@@ -51,10 +33,8 @@ class ProxyAudit {
         headers,
         method: req.method
       };
-
       if (auth !== null && auth !== void 0 && (_auth$config = auth.config) !== null && _auth$config !== void 0 && _auth$config.https_proxy) {
         var _auth$config2;
-
         // we should check whether this works fine after this migration
         // please notify if anyone is having issues
         const agent = (0, _httpsProxyAgent.default)(auth === null || auth === void 0 ? void 0 : (_auth$config2 = auth.config) === null || _auth$config2 === void 0 ? void 0 : _auth$config2.https_proxy);
@@ -62,13 +42,11 @@ class ProxyAudit {
           agent
         });
       }
-
       (async () => {
         try {
           const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;
           this.logger.debug('fetching audit from ' + auditEndpoint);
           const response = await (0, _nodeFetch.default)(auditEndpoint, requestOptions);
-
           if (response.ok) {
             res.status(response.status).send(await response.json());
           } else {
@@ -81,7 +59,6 @@ class ProxyAudit {
         }
       })();
     };
-
     const handleAudit = (req, res) => {
       if (this.enabled) {
         fetchAudit(req, res);
@@ -89,13 +66,11 @@ class ProxyAudit {
         res.status(500).end();
       }
     };
-    /* eslint new-cap:off */
-
 
+    /* eslint new-cap:off */
     const router = _express.default.Router();
     /* eslint new-cap:off */
 
-
     router.post('/audits', (0, _bodyParser.json)({
       limit: '10mb'
     }), handleAudit);
@@ -107,8 +82,6 @@ class ProxyAudit {
     }), handleAudit);
     app.use('/-/npm/v1/security', router);
   }
-
 }
-
 exports.default = ProxyAudit;
 //# sourceMappingURL=audit.js.map

package/lib/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","names":["REGISTRY_DOMAIN","ProxyAudit","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","jsonParser","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import https from 'https';\nimport fetch from 'node-fetch';\nimport express, { Request, Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport { json as jsonParser } from 'body-parser';\nimport { Logger, IPluginMiddleware, IBasicAuth, PluginOptions } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit implements IPluginMiddleware<ConfigAudit> {\n  public enabled: boolean;\n  public logger: Logger;\n  public strict_ssl: boolean;\n\n  public constructor(config: ConfigAudit, options: PluginOptions<ConfigAudit>) {\n    this.enabled = config.enabled || false;\n    this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n    this.logger = options.logger;\n  }\n\n  public register_middlewares(app: any, auth: IBasicAuth<ConfigAudit>): void {\n    const fetchAudit = (req: Request, res: Response & { report_error?: Function }): void => {\n      const headers = req.headers;\n\n      headers['host'] = 'registry.npmjs.org';\n      headers['content-encoding'] = 'gzip,deflate,br';\n\n      let requestOptions: any = {\n        agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n        body: JSON.stringify(req.body),\n        headers,\n        method: req.method,\n      };\n\n      if (auth?.config?.https_proxy) {\n        // we should check whether this works fine after this migration\n        // please notify if anyone is having issues\n        const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n        requestOptions = Object.assign({}, requestOptions, {\n          agent,\n        });\n      }\n\n      (async () => {\n        try {\n          const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n          this.logger.debug('fetching audit from ' + auditEndpoint);\n\n          const response = await fetch(auditEndpoint, requestOptions);\n\n          if (response.ok) {\n            res.status(response.status).send(await response.json());\n          } else {\n            this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n            res.status(response.status).end();\n          }\n        } catch (error) {\n          this.logger.warn('could not fetch audit: ' + error);\n          res.status(500).end();\n        }\n      })();\n    };\n\n    const handleAudit = (req: Request, res: Response): void => {\n      if (this.enabled) {\n        fetchAudit(req, res);\n      } else {\n        res.status(500).end();\n      }\n    };\n\n    /* eslint new-cap:off */\n    const router = express.Router();\n    /* eslint new-cap:off */\n\n    router.post('/audits', jsonParser({ limit: '10mb' }), handleAudit);\n    router.post('/audits/quick', jsonParser({ limit: '10mb' }), handleAudit);\n\n    router.post('/advisories/bulk', jsonParser({ limit: '10mb' }), handleAudit);\n\n    app.use('/-/npm/v1/security', router);\n  }\n}\n"],"mappings":";;;;;;;AAAA;;AACA;;AACA;;AACA;;AACA;;;;;;AAKA;AACO,MAAMA,eAAe,GAAG,4BAAxB;;;AAEQ,MAAMC,UAAN,CAA2D;EAKjEC,WAAW,CAACC,MAAD,EAAsBC,OAAtB,EAA2D;IAAA;;IAAA;;IAAA;;IAC3E,KAAKC,OAAL,GAAeF,MAAM,CAACE,OAAP,IAAkB,KAAjC;IACA,KAAKC,UAAL,GAAkBH,MAAM,CAACG,UAAP,KAAsBC,SAAtB,GAAkCJ,MAAM,CAACG,UAAzC,GAAsD,IAAxE;IACA,KAAKE,MAAL,GAAcJ,OAAO,CAACI,MAAtB;EACD;;EAEMC,oBAAoB,CAACC,GAAD,EAAWC,IAAX,EAAgD;IACzE,MAAMC,UAAU,GAAG,CAACC,GAAD,EAAeC,GAAf,KAAqE;MAAA;;MACtF,MAAMC,OAAO,GAAGF,GAAG,CAACE,OAApB;MAEAA,OAAO,CAAC,MAAD,CAAP,GAAkB,oBAAlB;MACAA,OAAO,CAAC,kBAAD,CAAP,GAA8B,iBAA9B;MAEA,IAAIC,cAAmB,GAAG;QACxBC,KAAK,EAAE,IAAIC,cAAA,CAAMC,KAAV,CAAgB;UAAEC,kBAAkB,EAAE,KAAKd;QAA3B,CAAhB,CADiB;QAExBe,IAAI,EAAEC,IAAI,CAACC,SAAL,CAAeV,GAAG,CAACQ,IAAnB,CAFkB;QAGxBN,OAHwB;QAIxBS,MAAM,EAAEX,GAAG,CAACW;MAJY,CAA1B;;MAOA,IAAIb,IAAJ,aAAIA,IAAJ,+BAAIA,IAAI,CAAER,MAAV,yCAAI,aAAcsB,WAAlB,EAA+B;QAAA;;QAC7B;QACA;QACA,MAAMR,KAAK,GAAG,IAAAS,wBAAA,EAAsBf,IAAtB,aAAsBA,IAAtB,wCAAsBA,IAAI,CAAER,MAA5B,kDAAsB,cAAcsB,WAApC,CAAd;QACAT,cAAc,GAAGW,MAAM,CAACC,MAAP,CAAc,EAAd,EAAkBZ,cAAlB,EAAkC;UACjDC;QADiD,CAAlC,CAAjB;MAGD;;MAED,CAAC,YAAY;QACX,IAAI;UACF,MAAMY,aAAa,GAAI,GAAE7B,eAAgB,GAAEa,GAAG,CAACiB,OAAQ,GAAEjB,GAAG,CAACkB,KAAJ,CAAUC,IAAK,EAAxE;UACA,KAAKxB,MAAL,CAAYyB,KAAZ,CAAkB,yBAAyBJ,aAA3C;UAEA,MAAMK,QAAQ,GAAG,MAAM,IAAAC,kBAAA,EAAMN,aAAN,EAAqBb,cAArB,CAAvB;;UAEA,IAAIkB,QAAQ,CAACE,EAAb,EAAiB;YACftB,GAAG,CAACuB,MAAJ,CAAWH,QAAQ,CAACG,MAApB,EAA4BC,IAA5B,CAAiC,MAAMJ,QAAQ,CAACK,IAAT,EAAvC;UACD,CAFD,MAEO;YACL,KAAK/B,MAAL,CAAYgC,IAAZ,CAAiB,4BAA4BlB,IAAI,CAACC,SAAL,CAAe,MAAMW,QAAQ,CAACK,IAAT,EAArB,CAA7C;YACAzB,GAAG,CAACuB,MAAJ,CAAWH,QAAQ,CAACG,MAApB,EAA4BI,GAA5B;UACD;QACF,CAZD,CAYE,OAAOC,KAAP,EAAc;UACd,KAAKlC,MAAL,CAAYgC,IAAZ,CAAiB,4BAA4BE,KAA7C;UACA5B,GAAG,CAACuB,MAAJ,CAAW,GAAX,EAAgBI,GAAhB;QACD;MACF,CAjBD;IAkBD,CAxCD;;IA0CA,MAAME,WAAW,GAAG,CAAC9B,GAAD,EAAeC,GAAf,KAAuC;MACzD,IAAI,KAAKT,OAAT,EAAkB;QAChBO,UAAU,CAACC,GAAD,EAAMC,GAAN,CAAV;MACD,CAFD,MAEO;QACLA,GAAG,CAACuB,MAAJ,CAAW,GAAX,EAAgBI,GAAhB;MACD;IACF,CAND;IAQA;;;IACA,MAAMG,MAAM,GAAGC,gBAAA,CAAQC,MAAR,EAAf;IACA;;;IAEAF,MAAM,CAACG,IAAP,CAAY,SAAZ,EAAuB,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAAvB,EAAsDN,WAAtD;IACAC,MAAM,CAACG,IAAP,CAAY,eAAZ,EAA6B,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAA7B,EAA4DN,WAA5D;IAEAC,MAAM,CAACG,IAAP,CAAY,kBAAZ,EAAgC,IAAAC,gBAAA,EAAW;MAAEC,KAAK,EAAE;IAAT,CAAX,CAAhC,EAA+DN,WAA/D;IAEAjC,GAAG,CAACwC,GAAJ,CAAQ,oBAAR,EAA8BN,MAA9B;EACD;;AAxEuE"}
+{"version":3,"file":"audit.js","names":["REGISTRY_DOMAIN","ProxyAudit","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","jsonParser","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import https from 'https';\nimport fetch from 'node-fetch';\nimport express, { Request, Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport { json as jsonParser } from 'body-parser';\nimport { Logger, IPluginMiddleware, IBasicAuth, PluginOptions } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit implements IPluginMiddleware<ConfigAudit> {\n  public enabled: boolean;\n  public logger: Logger;\n  public strict_ssl: boolean;\n\n  public constructor(config: ConfigAudit, options: PluginOptions<ConfigAudit>) {\n    this.enabled = config.enabled || false;\n    this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n    this.logger = options.logger;\n  }\n\n  public register_middlewares(app: any, auth: IBasicAuth<ConfigAudit>): void {\n    const fetchAudit = (req: Request, res: Response & { report_error?: Function }): void => {\n      const headers = req.headers;\n\n      headers['host'] = 'registry.npmjs.org';\n      headers['content-encoding'] = 'gzip,deflate,br';\n\n      let requestOptions: any = {\n        agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n        body: JSON.stringify(req.body),\n        headers,\n        method: req.method,\n      };\n\n      if (auth?.config?.https_proxy) {\n        // we should check whether this works fine after this migration\n        // please notify if anyone is having issues\n        const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n        requestOptions = Object.assign({}, requestOptions, {\n          agent,\n        });\n      }\n\n      (async () => {\n        try {\n          const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n          this.logger.debug('fetching audit from ' + auditEndpoint);\n\n          const response = await fetch(auditEndpoint, requestOptions);\n\n          if (response.ok) {\n            res.status(response.status).send(await response.json());\n          } else {\n            this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n            res.status(response.status).end();\n          }\n        } catch (error) {\n          this.logger.warn('could not fetch audit: ' + error);\n          res.status(500).end();\n        }\n      })();\n    };\n\n    const handleAudit = (req: Request, res: Response): void => {\n      if (this.enabled) {\n        fetchAudit(req, res);\n      } else {\n        res.status(500).end();\n      }\n    };\n\n    /* eslint new-cap:off */\n    const router = express.Router();\n    /* eslint new-cap:off */\n\n    router.post('/audits', jsonParser({ limit: '10mb' }), handleAudit);\n    router.post('/audits/quick', jsonParser({ limit: '10mb' }), handleAudit);\n\n    router.post('/advisories/bulk', jsonParser({ limit: '10mb' }), handleAudit);\n\n    app.use('/-/npm/v1/security', router);\n  }\n}\n"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AAAiD;AAKjD;AACO,MAAMA,eAAe,GAAG,4BAA4B;AAAC;AAE7C,MAAMC,UAAU,CAA2C;EAKjEC,WAAW,CAACC,MAAmB,EAAEC,OAAmC,EAAE;IAC3E,IAAI,CAACC,OAAO,GAAGF,MAAM,CAACE,OAAO,IAAI,KAAK;IACtC,IAAI,CAACC,UAAU,GAAGH,MAAM,CAACG,UAAU,KAAKC,SAAS,GAAGJ,MAAM,CAACG,UAAU,GAAG,IAAI;IAC5E,IAAI,CAACE,MAAM,GAAGJ,OAAO,CAACI,MAAM;EAC9B;EAEOC,oBAAoB,CAACC,GAAQ,EAAEC,IAA6B,EAAQ;IACzE,MAAMC,UAAU,GAAG,CAACC,GAAY,EAAEC,GAA2C,KAAW;MAAA;MACtF,MAAMC,OAAO,GAAGF,GAAG,CAACE,OAAO;MAE3BA,OAAO,CAAC,MAAM,CAAC,GAAG,oBAAoB;MACtCA,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB;MAE/C,IAAIC,cAAmB,GAAG;QACxBC,KAAK,EAAE,IAAIC,cAAK,CAACC,KAAK,CAAC;UAAEC,kBAAkB,EAAE,IAAI,CAACd;QAAW,CAAC,CAAC;QAC/De,IAAI,EAAEC,IAAI,CAACC,SAAS,CAACV,GAAG,CAACQ,IAAI,CAAC;QAC9BN,OAAO;QACPS,MAAM,EAAEX,GAAG,CAACW;MACd,CAAC;MAED,IAAIb,IAAI,aAAJA,IAAI,+BAAJA,IAAI,CAAER,MAAM,yCAAZ,aAAcsB,WAAW,EAAE;QAAA;QAC7B;QACA;QACA,MAAMR,KAAK,GAAG,IAAAS,wBAAqB,EAACf,IAAI,aAAJA,IAAI,wCAAJA,IAAI,CAAER,MAAM,kDAAZ,cAAcsB,WAAW,CAAC;QAC9DT,cAAc,GAAGW,MAAM,CAACC,MAAM,CAAC,CAAC,CAAC,EAAEZ,cAAc,EAAE;UACjDC;QACF,CAAC,CAAC;MACJ;MAEA,CAAC,YAAY;QACX,IAAI;UACF,MAAMY,aAAa,GAAI,GAAE7B,eAAgB,GAAEa,GAAG,CAACiB,OAAQ,GAAEjB,GAAG,CAACkB,KAAK,CAACC,IAAK,EAAC;UACzE,IAAI,CAACxB,MAAM,CAACyB,KAAK,CAAC,sBAAsB,GAAGJ,aAAa,CAAC;UAEzD,MAAMK,QAAQ,GAAG,MAAM,IAAAC,kBAAK,EAACN,aAAa,EAAEb,cAAc,CAAC;UAE3D,IAAIkB,QAAQ,CAACE,EAAE,EAAE;YACftB,GAAG,CAACuB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACC,IAAI,CAAC,MAAMJ,QAAQ,CAACK,IAAI,EAAE,CAAC;UACzD,CAAC,MAAM;YACL,IAAI,CAAC/B,MAAM,CAACgC,IAAI,CAAC,yBAAyB,GAAGlB,IAAI,CAACC,SAAS,CAAC,MAAMW,QAAQ,CAACK,IAAI,EAAE,CAAC,CAAC;YACnFzB,GAAG,CAACuB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACI,GAAG,EAAE;UACnC;QACF,CAAC,CAAC,OAAOC,KAAK,EAAE;UACd,IAAI,CAAClC,MAAM,CAACgC,IAAI,CAAC,yBAAyB,GAAGE,KAAK,CAAC;UACnD5B,GAAG,CAACuB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,EAAE;QACvB;MACF,CAAC,GAAG;IACN,CAAC;IAED,MAAME,WAAW,GAAG,CAAC9B,GAAY,EAAEC,GAAa,KAAW;MACzD,IAAI,IAAI,CAACT,OAAO,EAAE;QAChBO,UAAU,CAACC,GAAG,EAAEC,GAAG,CAAC;MACtB,CAAC,MAAM;QACLA,GAAG,CAACuB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,EAAE;MACvB;IACF,CAAC;;IAED;IACA,MAAMG,MAAM,GAAGC,gBAAO,CAACC,MAAM,EAAE;IAC/B;;IAEAF,MAAM,CAACG,IAAI,CAAC,SAAS,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAClEC,MAAM,CAACG,IAAI,CAAC,eAAe,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAExEC,MAAM,CAACG,IAAI,CAAC,kBAAkB,EAAE,IAAAC,gBAAU,EAAC;MAAEC,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEN,WAAW,CAAC;IAE3EjC,GAAG,CAACwC,GAAG,CAAC,oBAAoB,EAAEN,MAAM,CAAC;EACvC;AACF;AAAC"}

package/lib/index.js

@@ -10,13 +10,9 @@ Object.defineProperty(exports, "ConfigAudit", {
   }
 });
 exports.default = void 0;
-
 var _audit = _interopRequireDefault(require("./audit"));
-
 var _types = require("./types");
-
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
 var _default = _audit.default;
 exports.default = _default;
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;;AAAA;;AACA;;;;eAIeA,c"}
+{"version":3,"file":"index.js","names":["AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;AAAA;AACA;AAAsC;AAAA,eAIvBA,cAAW;AAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "10.2.2",
+  "version": "10.2.3",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "verdaccio",
@@ -28,13 +28,13 @@
     "node": ">=8"
   },
   "dependencies": {
-    "express": "4.18.1",
+    "express": "4.18.2",
     "https-proxy-agent": "5.0.1",
-    "body-parser": "1.20.0",
+    "body-parser": "1.20.1",
     "node-fetch": "2.6.7"
   },
   "devDependencies": {
-    "@verdaccio/types": "10.3.0"
+    "@verdaccio/types": "10.7.0"
   },
   "funding": {
     "type": "opencollective",