verdaccio-audit 12.0.0-next.2 → 12.0.0-next.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +24 -0
- package/build/audit.js +1 -2
- package/build/audit.js.map +1 -1
- package/build/index.js +1 -2
- package/build/index.js.map +1 -1
- package/package.json +7 -7
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,29 @@
|
|
|
1
1
|
# Change Log
|
|
2
2
|
|
|
3
|
+
## 12.0.0-next.4
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- @verdaccio/core@7.0.0-next.4
|
|
8
|
+
- @verdaccio/config@7.0.0-next.4
|
|
9
|
+
|
|
10
|
+
## 12.0.0-next.3
|
|
11
|
+
|
|
12
|
+
### Major Changes
|
|
13
|
+
|
|
14
|
+
- e7ebccb61: update major dependencies, remove old nodejs support
|
|
15
|
+
|
|
16
|
+
### Minor Changes
|
|
17
|
+
|
|
18
|
+
- daceb6d87: restore legacy support
|
|
19
|
+
|
|
20
|
+
### Patch Changes
|
|
21
|
+
|
|
22
|
+
- Updated dependencies [daceb6d87]
|
|
23
|
+
- Updated dependencies [e7ebccb61]
|
|
24
|
+
- @verdaccio/config@7.0.0-next.3
|
|
25
|
+
- @verdaccio/core@7.0.0-next.3
|
|
26
|
+
|
|
3
27
|
## 12.0.0-next.2
|
|
4
28
|
|
|
5
29
|
### Patch Changes
|
package/build/audit.js
CHANGED
|
@@ -11,8 +11,7 @@ var _nodeFetch = _interopRequireDefault(require("node-fetch"));
|
|
|
11
11
|
var _core = require("@verdaccio/core");
|
|
12
12
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
13
13
|
// FUTURE: we should be able to overwrite this
|
|
14
|
-
const REGISTRY_DOMAIN = 'https://registry.npmjs.org';
|
|
15
|
-
exports.REGISTRY_DOMAIN = REGISTRY_DOMAIN;
|
|
14
|
+
const REGISTRY_DOMAIN = exports.REGISTRY_DOMAIN = 'https://registry.npmjs.org';
|
|
16
15
|
class ProxyAudit extends _core.pluginUtils.Plugin {
|
|
17
16
|
constructor(config, options) {
|
|
18
17
|
super(config, options);
|
package/build/audit.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"audit.js","names":["_express","_interopRequireDefault","require","_https","_httpsProxyAgent","_nodeFetch","_core","obj","__esModule","default","REGISTRY_DOMAIN","exports","ProxyAudit","pluginUtils","Plugin","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","_auth$config","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","_auth$config2","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import express, { Express, Request, Response } from 'express';\nimport https from 'https';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport fetch from 'node-fetch';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { pluginUtils } from '@verdaccio/core';\nimport { Logger } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit\n extends pluginUtils.Plugin<ConfigAudit>\n implements pluginUtils.ExpressMiddleware<ConfigAudit, {}, Auth>\n{\n public enabled: boolean;\n public logger: Logger;\n public strict_ssl: boolean;\n\n public constructor(config: ConfigAudit, options: pluginUtils.PluginOptions) {\n super(config, options);\n this.enabled = config.enabled || false;\n this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n this.logger = options.logger;\n }\n\n public register_middlewares(app: Express, auth: Auth): void {\n const fetchAudit = async (\n req: Request,\n res: Response & { report_error?: Function }\n ): Promise<void> => {\n const headers = req.headers;\n\n headers['host'] = 'registry.npmjs.org';\n headers['content-encoding'] = 'gzip,deflate,br';\n\n let requestOptions: any = {\n agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n body: JSON.stringify(req.body),\n headers,\n method: req.method,\n };\n\n if (auth?.config?.https_proxy) {\n // we should check whether this works fine after this migration\n // please notify if anyone is having issues\n const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n requestOptions = Object.assign({}, requestOptions, {\n agent,\n });\n }\n\n try {\n const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n this.logger.debug('fetching audit from ' + auditEndpoint);\n\n const response = await fetch(auditEndpoint, requestOptions);\n\n if (response.ok) {\n res.status(response.status).send(await response.json());\n } else {\n this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n res.status(response.status).end();\n }\n } catch (error) {\n this.logger.warn('could not fetch audit: ' + error);\n res.status(500).end();\n }\n };\n\n const handleAudit = async (req: Request, res: Response): Promise<void> => {\n if (this.enabled) {\n await fetchAudit(req, res);\n } else {\n res.status(500).end();\n }\n };\n\n /* eslint new-cap:off */\n const router = express.Router();\n /* eslint new-cap:off */\n\n router.post('/audits', express.json({ limit: '10mb' }), handleAudit);\n router.post('/audits/quick', express.json({ limit: '10mb' }), handleAudit);\n\n router.post('/advisories/bulk', express.json({ limit: '10mb' }), handleAudit);\n\n app.use('/-/npm/v1/security', router);\n }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,gBAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,UAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAGA,IAAAI,KAAA,GAAAJ,OAAA;AAA8C,SAAAD,uBAAAM,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAK9C;AACO,MAAMG,eAAe,
|
|
1
|
+
{"version":3,"file":"audit.js","names":["_express","_interopRequireDefault","require","_https","_httpsProxyAgent","_nodeFetch","_core","obj","__esModule","default","REGISTRY_DOMAIN","exports","ProxyAudit","pluginUtils","Plugin","constructor","config","options","enabled","strict_ssl","undefined","logger","register_middlewares","app","auth","fetchAudit","req","res","_auth$config","headers","requestOptions","agent","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","_auth$config2","createHttpsProxyAgent","Object","assign","auditEndpoint","baseUrl","route","path","debug","response","fetch","ok","status","send","json","warn","end","error","handleAudit","router","express","Router","post","limit","use"],"sources":["../src/audit.ts"],"sourcesContent":["import express, { Express, Request, Response } from 'express';\nimport https from 'https';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport fetch from 'node-fetch';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { pluginUtils } from '@verdaccio/core';\nimport { Logger } from '@verdaccio/types';\n\nimport { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit\n extends pluginUtils.Plugin<ConfigAudit>\n implements pluginUtils.ExpressMiddleware<ConfigAudit, {}, Auth>\n{\n public enabled: boolean;\n public logger: Logger;\n public strict_ssl: boolean;\n\n public constructor(config: ConfigAudit, options: pluginUtils.PluginOptions) {\n super(config, options);\n this.enabled = config.enabled || false;\n this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n this.logger = options.logger;\n }\n\n public register_middlewares(app: Express, auth: Auth): void {\n const fetchAudit = async (\n req: Request,\n res: Response & { report_error?: Function }\n ): Promise<void> => {\n const headers = req.headers;\n\n headers['host'] = 'registry.npmjs.org';\n headers['content-encoding'] = 'gzip,deflate,br';\n\n let requestOptions: any = {\n agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n body: JSON.stringify(req.body),\n headers,\n method: req.method,\n };\n\n if (auth?.config?.https_proxy) {\n // we should check whether this works fine after this migration\n // please notify if anyone is having issues\n const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n requestOptions = Object.assign({}, requestOptions, {\n agent,\n });\n }\n\n try {\n const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n this.logger.debug('fetching audit from ' + auditEndpoint);\n\n const response = await fetch(auditEndpoint, requestOptions);\n\n if (response.ok) {\n res.status(response.status).send(await response.json());\n } else {\n this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n res.status(response.status).end();\n }\n } catch (error) {\n this.logger.warn('could not fetch audit: ' + error);\n res.status(500).end();\n }\n };\n\n const handleAudit = async (req: Request, res: Response): Promise<void> => {\n if (this.enabled) {\n await fetchAudit(req, res);\n } else {\n res.status(500).end();\n }\n };\n\n /* eslint new-cap:off */\n const router = express.Router();\n /* eslint new-cap:off */\n\n router.post('/audits', express.json({ limit: '10mb' }), handleAudit);\n router.post('/audits/quick', express.json({ limit: '10mb' }), handleAudit);\n\n router.post('/advisories/bulk', express.json({ limit: '10mb' }), handleAudit);\n\n app.use('/-/npm/v1/security', router);\n }\n}\n"],"mappings":";;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,gBAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,UAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAGA,IAAAI,KAAA,GAAAJ,OAAA;AAA8C,SAAAD,uBAAAM,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAK9C;AACO,MAAMG,eAAe,GAAAC,OAAA,CAAAD,eAAA,GAAG,4BAA4B;AAE5C,MAAME,UAAU,SACrBC,iBAAW,CAACC,MAAM,CAE5B;EAKSC,WAAWA,CAACC,MAAmB,EAAEC,OAAkC,EAAE;IAC1E,KAAK,CAACD,MAAM,EAAEC,OAAO,CAAC;IACtB,IAAI,CAACC,OAAO,GAAGF,MAAM,CAACE,OAAO,IAAI,KAAK;IACtC,IAAI,CAACC,UAAU,GAAGH,MAAM,CAACG,UAAU,KAAKC,SAAS,GAAGJ,MAAM,CAACG,UAAU,GAAG,IAAI;IAC5E,IAAI,CAACE,MAAM,GAAGJ,OAAO,CAACI,MAAM;EAC9B;EAEOC,oBAAoBA,CAACC,GAAY,EAAEC,IAAU,EAAQ;IAC1D,MAAMC,UAAU,GAAG,MAAAA,CACjBC,GAAY,EACZC,GAA2C,KACzB;MAAA,IAAAC,YAAA;MAClB,MAAMC,OAAO,GAAGH,GAAG,CAACG,OAAO;MAE3BA,OAAO,CAAC,MAAM,CAAC,GAAG,oBAAoB;MACtCA,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB;MAE/C,IAAIC,cAAmB,GAAG;QACxBC,KAAK,EAAE,IAAIC,cAAK,CAACC,KAAK,CAAC;UAAEC,kBAAkB,EAAE,IAAI,CAACf;QAAW,CAAC,CAAC;QAC/DgB,IAAI,EAAEC,IAAI,CAACC,SAAS,CAACX,GAAG,CAACS,IAAI,CAAC;QAC9BN,OAAO;QACPS,MAAM,EAAEZ,GAAG,CAACY;MACd,CAAC;MAED,IAAId,IAAI,aAAJA,IAAI,gBAAAI,YAAA,GAAJJ,IAAI,CAAER,MAAM,cAAAY,YAAA,eAAZA,YAAA,CAAcW,WAAW,EAAE;QAAA,IAAAC,aAAA;QAC7B;QACA;QACA,MAAMT,KAAK,GAAG,IAAAU,wBAAqB,EAACjB,IAAI,aAAJA,IAAI,wBAAAgB,aAAA,GAAJhB,IAAI,CAAER,MAAM,cAAAwB,aAAA,uBAAZA,aAAA,CAAcD,WAAW,CAAC;QAC9DT,cAAc,GAAGY,MAAM,CAACC,MAAM,CAAC,CAAC,CAAC,EAAEb,cAAc,EAAE;UACjDC;QACF,CAAC,CAAC;MACJ;MAEA,IAAI;QACF,MAAMa,aAAa,GAAI,GAAElC,eAAgB,GAAEgB,GAAG,CAACmB,OAAQ,GAAEnB,GAAG,CAACoB,KAAK,CAACC,IAAK,EAAC;QACzE,IAAI,CAAC1B,MAAM,CAAC2B,KAAK,CAAC,sBAAsB,GAAGJ,aAAa,CAAC;QAEzD,MAAMK,QAAQ,GAAG,MAAM,IAAAC,kBAAK,EAACN,aAAa,EAAEd,cAAc,CAAC;QAE3D,IAAImB,QAAQ,CAACE,EAAE,EAAE;UACfxB,GAAG,CAACyB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACC,IAAI,CAAC,MAAMJ,QAAQ,CAACK,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC,MAAM;UACL,IAAI,CAACjC,MAAM,CAACkC,IAAI,CAAC,yBAAyB,GAAGnB,IAAI,CAACC,SAAS,CAAC,MAAMY,QAAQ,CAACK,IAAI,CAAC,CAAC,CAAC,CAAC;UACnF3B,GAAG,CAACyB,MAAM,CAACH,QAAQ,CAACG,MAAM,CAAC,CAACI,GAAG,CAAC,CAAC;QACnC;MACF,CAAC,CAAC,OAAOC,KAAK,EAAE;QACd,IAAI,CAACpC,MAAM,CAACkC,IAAI,CAAC,yBAAyB,GAAGE,KAAK,CAAC;QACnD9B,GAAG,CAACyB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,CAAC,CAAC;MACvB;IACF,CAAC;IAED,MAAME,WAAW,GAAG,MAAAA,CAAOhC,GAAY,EAAEC,GAAa,KAAoB;MACxE,IAAI,IAAI,CAACT,OAAO,EAAE;QAChB,MAAMO,UAAU,CAACC,GAAG,EAAEC,GAAG,CAAC;MAC5B,CAAC,MAAM;QACLA,GAAG,CAACyB,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,CAAC,CAAC;MACvB;IACF,CAAC;;IAED;IACA,MAAMG,MAAM,GAAGC,gBAAO,CAACC,MAAM,CAAC,CAAC;IAC/B;;IAEAF,MAAM,CAACG,IAAI,CAAC,SAAS,EAAEF,gBAAO,CAACN,IAAI,CAAC;MAAES,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEL,WAAW,CAAC;IACpEC,MAAM,CAACG,IAAI,CAAC,eAAe,EAAEF,gBAAO,CAACN,IAAI,CAAC;MAAES,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEL,WAAW,CAAC;IAE1EC,MAAM,CAACG,IAAI,CAAC,kBAAkB,EAAEF,gBAAO,CAACN,IAAI,CAAC;MAAES,KAAK,EAAE;IAAO,CAAC,CAAC,EAAEL,WAAW,CAAC;IAE7EnC,GAAG,CAACyC,GAAG,CAAC,oBAAoB,EAAEL,MAAM,CAAC;EACvC;AACF;AAAChD,OAAA,CAAAF,OAAA,GAAAG,UAAA"}
|
package/build/index.js
CHANGED
|
@@ -13,6 +13,5 @@ exports.default = void 0;
|
|
|
13
13
|
var _audit = _interopRequireDefault(require("./audit"));
|
|
14
14
|
var _types = require("./types");
|
|
15
15
|
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
|
|
16
|
-
var _default = _audit.default;
|
|
17
|
-
exports.default = _default;
|
|
16
|
+
var _default = exports.default = _audit.default;
|
|
18
17
|
//# sourceMappingURL=index.js.map
|
package/build/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","names":["_audit","_interopRequireDefault","require","_types","obj","__esModule","default","_default","
|
|
1
|
+
{"version":3,"file":"index.js","names":["_audit","_interopRequireDefault","require","_types","obj","__esModule","default","_default","exports","AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAAsC,SAAAD,uBAAAG,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAAA,IAAAG,QAAA,GAAAC,OAAA,CAAAF,OAAA,GAIvBG,cAAW"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "verdaccio-audit",
|
|
3
|
-
"version": "12.0.0-next.
|
|
3
|
+
"version": "12.0.0-next.4",
|
|
4
4
|
"description": "Verdaccio Middleware plugin to bypass npmjs audit",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"private",
|
|
@@ -30,17 +30,17 @@
|
|
|
30
30
|
"node": ">=12"
|
|
31
31
|
},
|
|
32
32
|
"dependencies": {
|
|
33
|
-
"@verdaccio/
|
|
34
|
-
"@verdaccio/
|
|
33
|
+
"@verdaccio/config": "7.0.0-next.4",
|
|
34
|
+
"@verdaccio/core": "7.0.0-next.4",
|
|
35
35
|
"express": "4.18.2",
|
|
36
36
|
"https-proxy-agent": "5.0.1",
|
|
37
37
|
"node-fetch": "cjs"
|
|
38
38
|
},
|
|
39
39
|
"devDependencies": {
|
|
40
|
-
"@verdaccio/
|
|
41
|
-
"@verdaccio/
|
|
42
|
-
"@verdaccio/
|
|
43
|
-
"nock": "13.
|
|
40
|
+
"@verdaccio/auth": "7.0.0-next.4",
|
|
41
|
+
"@verdaccio/logger": "7.0.0-next.4",
|
|
42
|
+
"@verdaccio/types": "12.0.0-next.1",
|
|
43
|
+
"nock": "13.3.3",
|
|
44
44
|
"supertest": "6.3.3"
|
|
45
45
|
},
|
|
46
46
|
"funding": {
|