verdaccio-audit 13.0.3 → 13.1.0

package/build/_virtual/_rolldown/runtime.js

@@ -0,0 +1,23 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+exports.__toESM = __toESM;

package/build/audit.js

@@ -1,169 +1,73 @@
-"use strict";
+const require_runtime = require("./_virtual/_rolldown/runtime.js");
+let express = require("express");
+express = require_runtime.__toESM(express);
+let https_proxy_agent = require("https-proxy-agent");
+https_proxy_agent = require_runtime.__toESM(https_proxy_agent);
+let node_fetch = require("node-fetch");
+node_fetch = require_runtime.__toESM(node_fetch);
+let node_https = require("node:https");
+node_https = require_runtime.__toESM(node_https);
+let _verdaccio_core = require("@verdaccio/core");
+//#region src/audit.ts
+var REGISTRY_DOMAIN = "https://registry.npmjs.org";
+var ProxyAudit = class extends _verdaccio_core.pluginUtils.Plugin {
+	enabled;
+	logger;
+	strict_ssl;
+	timeout;
+	constructor(config, options) {
+		super(config, options);
+		this.enabled = config.enabled || false;
+		this.strict_ssl = config.strict_ssl !== void 0 ? config.strict_ssl : true;
+		this.timeout = config.timeout ?? 1e3 * 60 * 1;
+		this.logger = options.logger;
+	}
+	register_middlewares(app, auth) {
+		const fetchAudit = async (req, res) => {
+			const headers = req.headers;
+			headers["host"] = "registry.npmjs.org";
+			headers["content-encoding"] = "gzip,deflate,br";
+			let requestOptions = {
+				agent: new node_https.default.Agent({ rejectUnauthorized: this.strict_ssl }),
+				body: JSON.stringify(req.body),
+				headers,
+				method: req.method
+			};
+			if (auth?.config?.https_proxy) {
+				const agent = (0, https_proxy_agent.default)(auth?.config?.https_proxy);
+				requestOptions = Object.assign({}, requestOptions, { agent });
+			}
+			try {
+				const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;
+				this.logger.debug("fetching audit from " + auditEndpoint);
+				const controller = new AbortController();
+				setTimeout(() => controller.abort(`Fetch ${auditEndpoint} timeout ${this.timeout}ms`), this.timeout);
+				const response = await (0, node_fetch.default)(auditEndpoint, {
+					...requestOptions,
+					signal: controller.signal
+				});
+				if (response.ok) res.status(response.status).send(await response.json());
+				else {
+					this.logger.warn("could not fetch audit: " + JSON.stringify(await response.json()));
+					res.status(response.status).end();
+				}
+			} catch (error) {
+				this.logger.warn("could not fetch audit: " + error);
+				res.status(500).end();
+			}
+		};
+		const handleAudit = async (req, res) => {
+			if (this.enabled) await fetchAudit(req, res);
+			else res.status(500).end();
+		};
+		const router = express.default.Router();
+		router.post("/audits", express.default.json({ limit: "10mb" }), handleAudit);
+		router.post("/audits/quick", express.default.json({ limit: "10mb" }), handleAudit);
+		router.post("/advisories/bulk", express.default.json({ limit: "10mb" }), handleAudit);
+		app.use("/-/npm/v1/security", router);
+	}
+};
+//#endregion
+exports.default = ProxyAudit;
 
-function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports["default"] = exports.REGISTRY_DOMAIN = void 0;
-var _express = _interopRequireDefault(require("express"));
-var _httpsProxyAgent = _interopRequireDefault(require("https-proxy-agent"));
-var _nodeFetch = _interopRequireDefault(require("node-fetch"));
-var _nodeHttps = _interopRequireDefault(require("node:https"));
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
-function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
-function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
-function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
-function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
-function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
-function _classCallCheck(a, n) { if (!(a instanceof n)) throw new TypeError("Cannot call a class as a function"); }
-function _defineProperties(e, r) { for (var t = 0; t < r.length; t++) { var o = r[t]; o.enumerable = o.enumerable || !1, o.configurable = !0, "value" in o && (o.writable = !0), Object.defineProperty(e, _toPropertyKey(o.key), o); } }
-function _createClass(e, r, t) { return r && _defineProperties(e.prototype, r), t && _defineProperties(e, t), Object.defineProperty(e, "prototype", { writable: !1 }), e; }
-function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
-function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
-function _callSuper(t, o, e) { return o = _getPrototypeOf(o), _possibleConstructorReturn(t, _isNativeReflectConstruct() ? Reflect.construct(o, e || [], _getPrototypeOf(t).constructor) : o.apply(t, e)); }
-function _possibleConstructorReturn(t, e) { if (e && ("object" == _typeof(e) || "function" == typeof e)) return e; if (void 0 !== e) throw new TypeError("Derived constructors may only return object or undefined"); return _assertThisInitialized(t); }
-function _assertThisInitialized(e) { if (void 0 === e) throw new ReferenceError("this hasn't been initialised - super() hasn't been called"); return e; }
-function _isNativeReflectConstruct() { try { var t = !Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {})); } catch (t) {} return (_isNativeReflectConstruct = function _isNativeReflectConstruct() { return !!t; })(); }
-function _getPrototypeOf(t) { return _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function (t) { return t.__proto__ || Object.getPrototypeOf(t); }, _getPrototypeOf(t); }
-function _inherits(t, e) { if ("function" != typeof e && null !== e) throw new TypeError("Super expression must either be null or a function"); t.prototype = Object.create(e && e.prototype, { constructor: { value: t, writable: !0, configurable: !0 } }), Object.defineProperty(t, "prototype", { writable: !1 }), e && _setPrototypeOf(t, e); }
-function _setPrototypeOf(t, e) { return _setPrototypeOf = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function (t, e) { return t.__proto__ = e, t; }, _setPrototypeOf(t, e); }
-// FUTURE: we should be able to overwrite this
-var REGISTRY_DOMAIN = exports.REGISTRY_DOMAIN = 'https://registry.npmjs.org';
-var ProxyAudit = exports["default"] = /*#__PURE__*/function (_pluginUtils$Plugin) {
-  function ProxyAudit(config, options) {
-    var _config$timeout;
-    var _this;
-    _classCallCheck(this, ProxyAudit);
-    _this = _callSuper(this, ProxyAudit, [config, options]);
-    _this.enabled = config.enabled || false;
-    _this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;
-    _this.timeout = (_config$timeout = config.timeout) !== null && _config$timeout !== void 0 ? _config$timeout : 1000 * 60 * 1;
-    _this.logger = options.logger;
-    return _this;
-  }
-  _inherits(ProxyAudit, _pluginUtils$Plugin);
-  return _createClass(ProxyAudit, [{
-    key: "register_middlewares",
-    value: function register_middlewares(app, auth) {
-      var _this2 = this;
-      var fetchAudit = /*#__PURE__*/function () {
-        var _ref = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(req, res) {
-          var _auth$config;
-          var headers, requestOptions, _auth$config2, agent, auditEndpoint, controller, response, _t, _t2, _t3, _t4, _t5;
-          return _regenerator().w(function (_context) {
-            while (1) switch (_context.p = _context.n) {
-              case 0:
-                headers = req.headers;
-                headers['host'] = 'registry.npmjs.org';
-                headers['content-encoding'] = 'gzip,deflate,br';
-                requestOptions = {
-                  agent: new _nodeHttps["default"].Agent({
-                    rejectUnauthorized: _this2.strict_ssl
-                  }),
-                  body: JSON.stringify(req.body),
-                  headers: headers,
-                  method: req.method
-                };
-                if (auth !== null && auth !== void 0 && (_auth$config = auth.config) !== null && _auth$config !== void 0 && _auth$config.https_proxy) {
-                  // we should check whether this works fine after this migration
-                  // please notify if anyone is having issues
-                  agent = (0, _httpsProxyAgent["default"])(auth === null || auth === void 0 || (_auth$config2 = auth.config) === null || _auth$config2 === void 0 ? void 0 : _auth$config2.https_proxy);
-                  requestOptions = Object.assign({}, requestOptions, {
-                    agent: agent
-                  });
-                }
-                _context.p = 1;
-                auditEndpoint = "".concat(REGISTRY_DOMAIN).concat(req.baseUrl).concat(req.route.path);
-                _this2.logger.debug('fetching audit from ' + auditEndpoint);
-                controller = new AbortController();
-                setTimeout(function () {
-                  return controller.abort("Fetch ".concat(auditEndpoint, " timeout ").concat(_this2.timeout, "ms"));
-                }, _this2.timeout);
-                _context.n = 2;
-                return (0, _nodeFetch["default"])(auditEndpoint, _objectSpread(_objectSpread({}, requestOptions), {}, {
-                  signal: controller.signal
-                }));
-              case 2:
-                response = _context.v;
-                if (!response.ok) {
-                  _context.n = 4;
-                  break;
-                }
-                _t = res.status(response.status);
-                _context.n = 3;
-                return response.json();
-              case 3:
-                _t.send.call(_t, _context.v);
-                _context.n = 6;
-                break;
-              case 4:
-                _t2 = _this2.logger;
-                _t3 = JSON;
-                _context.n = 5;
-                return response.json();
-              case 5:
-                _t4 = _t3.stringify.call(_t3, _context.v);
-                _t2.warn.call(_t2, 'could not fetch audit: ' + _t4);
-                res.status(response.status).end();
-              case 6:
-                _context.n = 8;
-                break;
-              case 7:
-                _context.p = 7;
-                _t5 = _context.v;
-                _this2.logger.warn('could not fetch audit: ' + _t5);
-                res.status(500).end();
-              case 8:
-                return _context.a(2);
-            }
-          }, _callee, null, [[1, 7]]);
-        }));
-        return function fetchAudit(_x, _x2) {
-          return _ref.apply(this, arguments);
-        };
-      }();
-      var handleAudit = /*#__PURE__*/function () {
-        var _ref2 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(req, res) {
-          return _regenerator().w(function (_context2) {
-            while (1) switch (_context2.n) {
-              case 0:
-                if (!_this2.enabled) {
-                  _context2.n = 2;
-                  break;
-                }
-                _context2.n = 1;
-                return fetchAudit(req, res);
-              case 1:
-                _context2.n = 3;
-                break;
-              case 2:
-                res.status(500).end();
-              case 3:
-                return _context2.a(2);
-            }
-          }, _callee2);
-        }));
-        return function handleAudit(_x3, _x4) {
-          return _ref2.apply(this, arguments);
-        };
-      }();
-
-      /* eslint new-cap:off */
-      var router = _express["default"].Router();
-      router.post('/audits', _express["default"].json({
-        limit: '10mb'
-      }), handleAudit);
-      router.post('/audits/quick', _express["default"].json({
-        limit: '10mb'
-      }), handleAudit);
-      router.post('/advisories/bulk', _express["default"].json({
-        limit: '10mb'
-      }), handleAudit);
-      app.use('/-/npm/v1/security', router);
-    }
-  }]);
-}(_core.pluginUtils.Plugin);
 //# sourceMappingURL=audit.js.map

package/build/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","names":["_express","_interopRequireDefault","require","_httpsProxyAgent","_nodeFetch","_nodeHttps","_core","e","__esModule","_regenerator","t","r","Symbol","n","iterator","o","toStringTag","i","c","prototype","Generator","u","Object","create","_regeneratorDefine2","f","p","y","G","v","a","d","bind","length","l","TypeError","call","done","value","GeneratorFunction","GeneratorFunctionPrototype","getPrototypeOf","setPrototypeOf","__proto__","displayName","w","m","defineProperty","_regeneratorDefine","_invoke","enumerable","configurable","writable","ownKeys","keys","getOwnPropertySymbols","filter","getOwnPropertyDescriptor","push","apply","_objectSpread","arguments","forEach","_defineProperty","getOwnPropertyDescriptors","defineProperties","_toPropertyKey","asyncGeneratorStep","Promise","resolve","then","_asyncToGenerator","_next","_throw","_classCallCheck","_defineProperties","key","_createClass","_toPrimitive","_typeof","toPrimitive","String","Number","_callSuper","_getPrototypeOf","_possibleConstructorReturn","_isNativeReflectConstruct","Reflect","construct","constructor","_assertThisInitialized","ReferenceError","Boolean","valueOf","_inherits","_setPrototypeOf","REGISTRY_DOMAIN","exports","ProxyAudit","_pluginUtils$Plugin","config","options","_config$timeout","_this","enabled","strict_ssl","undefined","timeout","logger","register_middlewares","app","auth","_this2","fetchAudit","_ref","_callee","req","res","_auth$config","headers","requestOptions","_auth$config2","agent","auditEndpoint","controller","response","_t","_t2","_t3","_t4","_t5","_context","https","Agent","rejectUnauthorized","body","JSON","stringify","method","https_proxy","createHttpsProxyAgent","assign","concat","baseUrl","route","path","debug","AbortController","setTimeout","abort","fetch","signal","ok","status","json","send","warn","end","_x","_x2","handleAudit","_ref2","_callee2","_context2","_x3","_x4","router","express","Router","post","limit","use","pluginUtils","Plugin"],"sources":["../src/audit.ts"],"sourcesContent":["import express, { type Express, type Request, type Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport fetch from 'node-fetch';\nimport https from 'node:https';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { pluginUtils } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit\n  extends pluginUtils.Plugin<ConfigAudit>\n  implements pluginUtils.ExpressMiddleware<ConfigAudit, {}, Auth>\n{\n  public enabled: boolean;\n  public logger: Logger;\n  public strict_ssl: boolean;\n  public timeout: number;\n\n  public constructor(config: ConfigAudit, options: pluginUtils.PluginOptions) {\n    super(config, options);\n    this.enabled = config.enabled || false;\n    this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n    this.timeout = config.timeout ?? 1000 * 60 * 1;\n    this.logger = options.logger;\n  }\n\n  public register_middlewares(app: Express, auth: Auth): void {\n    const fetchAudit = async (\n      req: Request,\n      res: Response & { report_error?: Function }\n    ): Promise<void> => {\n      const headers = req.headers;\n\n      headers['host'] = 'registry.npmjs.org';\n      headers['content-encoding'] = 'gzip,deflate,br';\n\n      let requestOptions: any = {\n        agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n        body: JSON.stringify(req.body),\n        headers,\n        method: req.method,\n      };\n\n      if (auth?.config?.https_proxy) {\n        // we should check whether this works fine after this migration\n        // please notify if anyone is having issues\n        const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n        requestOptions = Object.assign({}, requestOptions, {\n          agent,\n        });\n      }\n\n      try {\n        const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n        this.logger.debug('fetching audit from ' + auditEndpoint);\n\n        const controller = new AbortController();\n\n        setTimeout(\n          () => controller.abort(`Fetch ${auditEndpoint} timeout ${this.timeout}ms`),\n          this.timeout\n        );\n\n        const response = await fetch(auditEndpoint, {\n          ...requestOptions,\n          signal: controller.signal,\n        });\n\n        if (response.ok) {\n          res.status(response.status).send(await response.json());\n        } else {\n          this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n          res.status(response.status).end();\n        }\n      } catch (error) {\n        this.logger.warn('could not fetch audit: ' + error);\n        res.status(500).end();\n      }\n    };\n\n    const handleAudit = async (req: Request, res: Response): Promise<void> => {\n      if (this.enabled) {\n        await fetchAudit(req, res);\n      } else {\n        res.status(500).end();\n      }\n    };\n\n    /* eslint new-cap:off */\n    const router = express.Router();\n\n    router.post('/audits', express.json({ limit: '10mb' }), handleAudit);\n    router.post('/audits/quick', express.json({ limit: '10mb' }), handleAudit);\n\n    router.post('/advisories/bulk', express.json({ limit: '10mb' }), handleAudit);\n\n    app.use('/-/npm/v1/security', router);\n  }\n}\n"],"mappings":";;;;;;;AAAA,IAAAA,QAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,gBAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,UAAA,GAAAH,sBAAA,CAAAC,OAAA;AACA,IAAAG,UAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAGA,IAAAI,KAAA,GAAAJ,OAAA;AAA8C,SAAAD,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,SAAAE,aAAA,IAL9C,uKAAAF,CAAA,EAAAG,CAAA,EAAAC,CAAA,wBAAAC,MAAA,GAAAA,MAAA,OAAAC,CAAA,GAAAF,CAAA,CAAAG,QAAA,kBAAAC,CAAA,GAAAJ,CAAA,CAAAK,WAAA,8BAAAC,EAAAN,CAAA,EAAAE,CAAA,EAAAE,CAAA,EAAAE,CAAA,QAAAC,CAAA,GAAAL,CAAA,IAAAA,CAAA,CAAAM,SAAA,YAAAC,SAAA,GAAAP,CAAA,GAAAO,SAAA,EAAAC,CAAA,GAAAC,MAAA,CAAAC,MAAA,CAAAL,CAAA,CAAAC,SAAA,UAAAK,mBAAA,CAAAH,CAAA,uBAAAV,CAAA,EAAAE,CAAA,EAAAE,CAAA,QAAAE,CAAA,EAAAC,CAAA,EAAAG,CAAA,EAAAI,CAAA,MAAAC,CAAA,GAAAX,CAAA,QAAAY,CAAA,OAAAC,CAAA,KAAAF,CAAA,KAAAb,CAAA,KAAAgB,CAAA,EAAAtB,CAAA,EAAAuB,CAAA,EAAAC,CAAA,EAAAN,CAAA,EAAAM,CAAA,CAAAC,IAAA,CAAAzB,CAAA,MAAAwB,CAAA,WAAAA,EAAArB,CAAA,EAAAC,CAAA,WAAAM,CAAA,GAAAP,CAAA,EAAAQ,CAAA,MAAAG,CAAA,GAAAd,CAAA,EAAAqB,CAAA,CAAAf,CAAA,GAAAF,CAAA,EAAAmB,CAAA,gBAAAC,EAAApB,CAAA,EAAAE,CAAA,SAAAK,CAAA,GAAAP,CAAA,EAAAU,CAAA,GAAAR,CAAA,EAAAH,CAAA,OAAAiB,CAAA,IAAAF,CAAA,KAAAV,CAAA,IAAAL,CAAA,GAAAgB,CAAA,CAAAO,MAAA,EAAAvB,CAAA,UAAAK,CAAA,EAAAE,CAAA,GAAAS,CAAA,CAAAhB,CAAA,GAAAqB,CAAA,GAAAH,CAAA,CAAAF,CAAA,EAAAQ,CAAA,GAAAjB,CAAA,KAAAN,CAAA,QAAAI,CAAA,GAAAmB,CAAA,KAAArB,CAAA,MAAAQ,CAAA,GAAAJ,CAAA,EAAAC,CAAA,GAAAD,CAAA,YAAAC,CAAA,WAAAD,CAAA,MAAAA,CAAA,MAAAV,CAAA,IAAAU,CAAA,OAAAc,CAAA,MAAAhB,CAAA,GAAAJ,CAAA,QAAAoB,CAAA,GAAAd,CAAA,QAAAC,CAAA,MAAAU,CAAA,CAAAC,CAAA,GAAAhB,CAAA,EAAAe,CAAA,CAAAf,CAAA,GAAAI,CAAA,OAAAc,CAAA,GAAAG,CAAA,KAAAnB,CAAA,GAAAJ,CAAA,QAAAM,CAAA,MAAAJ,CAAA,IAAAA,CAAA,GAAAqB,CAAA,MAAAjB,CAAA,MAAAN,CAAA,EAAAM,CAAA,MAAAJ,CAAA,EAAAe,CAAA,CAAAf,CAAA,GAAAqB,CAAA,EAAAhB,CAAA,cAAAH,CAAA,IAAAJ,CAAA,aAAAmB,CAAA,QAAAH,CAAA,OAAAd,CAAA,qBAAAE,CAAA,EAAAW,CAAA,EAAAQ,CAAA,QAAAT,CAAA,YAAAU,SAAA,uCAAAR,CAAA,UAAAD,CAAA,IAAAK,CAAA,CAAAL,CAAA,EAAAQ,CAAA,GAAAhB,CAAA,GAAAQ,CAAA,EAAAL,CAAA,GAAAa,CAAA,GAAAxB,CAAA,GAAAQ,CAAA,OAAAX,CAAA,GAAAc,CAAA,MAAAM,CAAA,KAAAV,CAAA,KAAAC,CAAA,GAAAA,CAAA,QAAAA,CAAA,SAAAU,CAAA,CAAAf,CAAA,QAAAkB,CAAA,CAAAb,CAAA,EAAAG,CAAA,KAAAO,CAAA,CAAAf,CAAA,GAAAQ,CAAA,GAAAO,CAAA,CAAAC,CAAA,GAAAR,CAAA,aAAAI,CAAA,MAAAR,CAAA,QAAAC,CAAA,KAAAH,CAAA,YAAAL,CAAA,GAAAO,CAAA,CAAAF,CAAA,WAAAL,CAAA,GAAAA,CAAA,CAAA0B,IAAA,CAAAnB,CAAA,EAAAI,CAAA,UAAAc,SAAA,2CAAAzB,CAAA,CAAA2B,IAAA,SAAA3B,CAAA,EAAAW,CAAA,GAAAX,CAAA,CAAA4B,KAAA,EAAApB,CAAA,SAAAA,CAAA,oBAAAA,CAAA,KAAAR,CAAA,GAAAO,CAAA,eAAAP,CAAA,CAAA0B,IAAA,CAAAnB,CAAA,GAAAC,CAAA,SAAAG,CAAA,GAAAc,SAAA,uCAAApB,CAAA,gBAAAG,CAAA,OAAAD,CAAA,GAAAV,CAAA,cAAAG,CAAA,IAAAiB,CAAA,GAAAC,CAAA,CAAAf,CAAA,QAAAQ,CAAA,GAAAV,CAAA,CAAAyB,IAAA,CAAAvB,CAAA,EAAAe,CAAA,OAAAE,CAAA,kBAAApB,CAAA,IAAAO,CAAA,GAAAV,CAAA,EAAAW,CAAA,MAAAG,CAAA,GAAAX,CAAA,cAAAe,CAAA,mBAAAa,KAAA,EAAA5B,CAAA,EAAA2B,IAAA,EAAAV,CAAA,SAAAhB,CAAA,EAAAI,CAAA,EAAAE,CAAA,QAAAI,CAAA,QAAAS,CAAA,gBAAAV,UAAA,cAAAmB,kBAAA,cAAAC,2BAAA,KAAA9B,CAAA,GAAAY,MAAA,CAAAmB,cAAA,MAAAvB,CAAA,MAAAL,CAAA,IAAAH,CAAA,CAAAA,CAAA,IAAAG,CAAA,SAAAW,mBAAA,CAAAd,CAAA,OAAAG,CAAA,iCAAAH,CAAA,GAAAW,CAAA,GAAAmB,0BAAA,CAAArB,SAAA,GAAAC,SAAA,CAAAD,SAAA,GAAAG,MAAA,CAAAC,MAAA,CAAAL,CAAA,YAAAO,EAAAlB,CAAA,WAAAe,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAoB,cAAA,CAAAnC,CAAA,EAAAiC,0BAAA,KAAAjC,CAAA,CAAAoC,SAAA,GAAAH,0BAAA,EAAAhB,mBAAA,CAAAjB,CAAA,EAAAQ,CAAA,yBAAAR,CAAA,CAAAY,SAAA,GAAAG,MAAA,CAAAC,MAAA,CAAAF,CAAA,GAAAd,CAAA,WAAAgC,iBAAA,CAAApB,SAAA,GAAAqB,0BAAA,EAAAhB,mBAAA,CAAAH,CAAA,iBAAAmB,0BAAA,GAAAhB,mBAAA,CAAAgB,0BAAA,iBAAAD,iBAAA,GAAAA,iBAAA,CAAAK,WAAA,wBAAApB,mBAAA,CAAAgB,0BAAA,EAAAzB,CAAA,wBAAAS,mBAAA,CAAAH,CAAA,GAAAG,mBAAA,CAAAH,CAAA,EAAAN,CAAA,gBAAAS,mBAAA,CAAAH,CAAA,EAAAR,CAAA,iCAAAW,mBAAA,CAAAH,CAAA,8DAAAZ,YAAA,YAAAA,aAAA,aAAAoC,CAAA,EAAA5B,CAAA,EAAA6B,CAAA,EAAArB,CAAA;AAAA,SAAAD,oBAAAjB,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA,QAAAO,CAAA,GAAAK,MAAA,CAAAyB,cAAA,QAAA9B,CAAA,uBAAAV,CAAA,IAAAU,CAAA,QAAAO,mBAAA,YAAAwB,mBAAAzC,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA,aAAAK,EAAAJ,CAAA,EAAAE,CAAA,IAAAW,mBAAA,CAAAjB,CAAA,EAAAI,CAAA,YAAAJ,CAAA,gBAAA0C,OAAA,CAAAtC,CAAA,EAAAE,CAAA,EAAAN,CAAA,SAAAI,CAAA,GAAAM,CAAA,GAAAA,CAAA,CAAAV,CAAA,EAAAI,CAAA,IAAA2B,KAAA,EAAAzB,CAAA,EAAAqC,UAAA,GAAAxC,CAAA,EAAAyC,YAAA,GAAAzC,CAAA,EAAA0C,QAAA,GAAA1C,CAAA,MAAAH,CAAA,CAAAI,CAAA,IAAAE,CAAA,IAAAE,CAAA,aAAAA,CAAA,cAAAA,CAAA,mBAAAS,mBAAA,CAAAjB,CAAA,EAAAI,CAAA,EAAAE,CAAA,EAAAH,CAAA;AAAA,SAAA2C,QAAA9C,CAAA,EAAAI,CAAA,QAAAD,CAAA,GAAAY,MAAA,CAAAgC,IAAA,CAAA/C,CAAA,OAAAe,MAAA,CAAAiC,qBAAA,QAAAxC,CAAA,GAAAO,MAAA,CAAAiC,qBAAA,CAAAhD,CAAA,GAAAI,CAAA,KAAAI,CAAA,GAAAA,CAAA,CAAAyC,MAAA,WAAA7C,CAAA,WAAAW,MAAA,CAAAmC,wBAAA,CAAAlD,CAAA,EAAAI,CAAA,EAAAuC,UAAA,OAAAxC,CAAA,CAAAgD,IAAA,CAAAC,KAAA,CAAAjD,CAAA,EAAAK,CAAA,YAAAL,CAAA;AAAA,SAAAkD,cAAArD,CAAA,aAAAI,CAAA,MAAAA,CAAA,GAAAkD,SAAA,CAAA5B,MAAA,EAAAtB,CAAA,UAAAD,CAAA,WAAAmD,SAAA,CAAAlD,CAAA,IAAAkD,SAAA,CAAAlD,CAAA,QAAAA,CAAA,OAAA0C,OAAA,CAAA/B,MAAA,CAAAZ,CAAA,OAAAoD,OAAA,WAAAnD,CAAA,IAAAoD,eAAA,CAAAxD,CAAA,EAAAI,CAAA,EAAAD,CAAA,CAAAC,CAAA,SAAAW,MAAA,CAAA0C,yBAAA,GAAA1C,MAAA,CAAA2C,gBAAA,CAAA1D,CAAA,EAAAe,MAAA,CAAA0C,yBAAA,CAAAtD,CAAA,KAAA2C,OAAA,CAAA/B,MAAA,CAAAZ,CAAA,GAAAoD,OAAA,WAAAnD,CAAA,IAAAW,MAAA,CAAAyB,cAAA,CAAAxC,CAAA,EAAAI,CAAA,EAAAW,MAAA,CAAAmC,wBAAA,CAAA/C,CAAA,EAAAC,CAAA,iBAAAJ,CAAA;AAAA,SAAAwD,gBAAAxD,CAAA,EAAAI,CAAA,EAAAD,CAAA,YAAAC,CAAA,GAAAuD,cAAA,CAAAvD,CAAA,MAAAJ,CAAA,GAAAe,MAAA,CAAAyB,cAAA,CAAAxC,CAAA,EAAAI,CAAA,IAAA2B,KAAA,EAAA5B,CAAA,EAAAwC,UAAA,MAAAC,YAAA,MAAAC,QAAA,UAAA7C,CAAA,CAAAI,CAAA,IAAAD,CAAA,EAAAH,CAAA;AAAA,SAAA4D,mBAAAtD,CAAA,EAAAH,CAAA,EAAAH,CAAA,EAAAI,CAAA,EAAAI,CAAA,EAAAe,CAAA,EAAAZ,CAAA,cAAAD,CAAA,GAAAJ,CAAA,CAAAiB,CAAA,EAAAZ,CAAA,GAAAG,CAAA,GAAAJ,CAAA,CAAAqB,KAAA,WAAAzB,CAAA,gBAAAN,CAAA,CAAAM,CAAA,KAAAI,CAAA,CAAAoB,IAAA,GAAA3B,CAAA,CAAAW,CAAA,IAAA+C,OAAA,CAAAC,OAAA,CAAAhD,CAAA,EAAAiD,IAAA,CAAA3D,CAAA,EAAAI,CAAA;AAAA,SAAAwD,kBAAA1D,CAAA,6BAAAH,CAAA,SAAAH,CAAA,GAAAsD,SAAA,aAAAO,OAAA,WAAAzD,CAAA,EAAAI,CAAA,QAAAe,CAAA,GAAAjB,CAAA,CAAA8C,KAAA,CAAAjD,CAAA,EAAAH,CAAA,YAAAiE,MAAA3D,CAAA,IAAAsD,kBAAA,CAAArC,CAAA,EAAAnB,CAAA,EAAAI,CAAA,EAAAyD,KAAA,EAAAC,MAAA,UAAA5D,CAAA,cAAA4D,OAAA5D,CAAA,IAAAsD,kBAAA,CAAArC,CAAA,EAAAnB,CAAA,EAAAI,CAAA,EAAAyD,KAAA,EAAAC,MAAA,WAAA5D,CAAA,KAAA2D,KAAA;AAAA,SAAAE,gBAAA5C,CAAA,EAAAjB,CAAA,UAAAiB,CAAA,YAAAjB,CAAA,aAAAsB,SAAA;AAAA,SAAAwC,kBAAApE,CAAA,EAAAI,CAAA,aAAAD,CAAA,MAAAA,CAAA,GAAAC,CAAA,CAAAsB,MAAA,EAAAvB,CAAA,UAAAK,CAAA,GAAAJ,CAAA,CAAAD,CAAA,GAAAK,CAAA,CAAAmC,UAAA,GAAAnC,CAAA,CAAAmC,UAAA,QAAAnC,CAAA,CAAAoC,YAAA,kBAAApC,CAAA,KAAAA,CAAA,CAAAqC,QAAA,QAAA9B,MAAA,CAAAyB,cAAA,CAAAxC,CAAA,EAAA2D,cAAA,CAAAnD,CAAA,CAAA6D,GAAA,GAAA7D,CAAA;AAAA,SAAA8D,aAAAtE,CAAA,EAAAI,CAAA,EAAAD,CAAA,WAAAC,CAAA,IAAAgE,iBAAA,CAAApE,CAAA,CAAAY,SAAA,EAAAR,CAAA,GAAAD,CAAA,IAAAiE,iBAAA,CAAApE,CAAA,EAAAG,CAAA,GAAAY,MAAA,CAAAyB,cAAA,CAAAxC,CAAA,iBAAA6C,QAAA,SAAA7C,CAAA;AAAA,SAAA2D,eAAAxD,CAAA,QAAAO,CAAA,GAAA6D,YAAA,CAAApE,CAAA,gCAAAqE,OAAA,CAAA9D,CAAA,IAAAA,CAAA,GAAAA,CAAA;AAAA,SAAA6D,aAAApE,CAAA,EAAAC,CAAA,oBAAAoE,OAAA,CAAArE,CAAA,MAAAA,CAAA,SAAAA,CAAA,MAAAH,CAAA,GAAAG,CAAA,CAAAE,MAAA,CAAAoE,WAAA,kBAAAzE,CAAA,QAAAU,CAAA,GAAAV,CAAA,CAAA6B,IAAA,CAAA1B,CAAA,EAAAC,CAAA,gCAAAoE,OAAA,CAAA9D,CAAA,UAAAA,CAAA,YAAAkB,SAAA,yEAAAxB,CAAA,GAAAsE,MAAA,GAAAC,MAAA,EAAAxE,CAAA;AAAA,SAAAyE,WAAAzE,CAAA,EAAAK,CAAA,EAAAR,CAAA,WAAAQ,CAAA,GAAAqE,eAAA,CAAArE,CAAA,GAAAsE,0BAAA,CAAA3E,CAAA,EAAA4E,yBAAA,KAAAC,OAAA,CAAAC,SAAA,CAAAzE,CAAA,EAAAR,CAAA,QAAA6E,eAAA,CAAA1E,CAAA,EAAA+E,WAAA,IAAA1E,CAAA,CAAA4C,KAAA,CAAAjD,CAAA,EAAAH,CAAA;AAAA,SAAA8E,2BAAA3E,CAAA,EAAAH,CAAA,QAAAA,CAAA,iBAAAwE,OAAA,CAAAxE,CAAA,0BAAAA,CAAA,UAAAA,CAAA,iBAAAA,CAAA,YAAA4B,SAAA,qEAAAuD,sBAAA,CAAAhF,CAAA;AAAA,SAAAgF,uBAAAnF,CAAA,mBAAAA,CAAA,YAAAoF,cAAA,sEAAApF,CAAA;AAAA,SAAA+E,0BAAA,cAAA5E,CAAA,IAAAkF,OAAA,CAAAzE,SAAA,CAAA0E,OAAA,CAAAzD,IAAA,CAAAmD,OAAA,CAAAC,SAAA,CAAAI,OAAA,iCAAAlF,CAAA,aAAA4E,yBAAA,YAAAA,0BAAA,aAAA5E,CAAA;AAAA,SAAA0E,gBAAA1E,CAAA,WAAA0E,eAAA,GAAA9D,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAmB,cAAA,CAAAT,IAAA,eAAAtB,CAAA,WAAAA,CAAA,CAAAiC,SAAA,IAAArB,MAAA,CAAAmB,cAAA,CAAA/B,CAAA,MAAA0E,eAAA,CAAA1E,CAAA;AAAA,SAAAoF,UAAApF,CAAA,EAAAH,CAAA,6BAAAA,CAAA,aAAAA,CAAA,YAAA4B,SAAA,wDAAAzB,CAAA,CAAAS,SAAA,GAAAG,MAAA,CAAAC,MAAA,CAAAhB,CAAA,IAAAA,CAAA,CAAAY,SAAA,IAAAsE,WAAA,IAAAnD,KAAA,EAAA5B,CAAA,EAAA0C,QAAA,MAAAD,YAAA,WAAA7B,MAAA,CAAAyB,cAAA,CAAArC,CAAA,iBAAA0C,QAAA,SAAA7C,CAAA,IAAAwF,eAAA,CAAArF,CAAA,EAAAH,CAAA;AAAA,SAAAwF,gBAAArF,CAAA,EAAAH,CAAA,WAAAwF,eAAA,GAAAzE,MAAA,CAAAoB,cAAA,GAAApB,MAAA,CAAAoB,cAAA,CAAAV,IAAA,eAAAtB,CAAA,EAAAH,CAAA,WAAAG,CAAA,CAAAiC,SAAA,GAAApC,CAAA,EAAAG,CAAA,KAAAqF,eAAA,CAAArF,CAAA,EAAAH,CAAA;AAUA;AACO,IAAMyF,eAAe,GAAAC,OAAA,CAAAD,eAAA,GAAG,4BAA4B;AAAC,IAEvCE,UAAU,GAAAD,OAAA,qCAAAE,mBAAA;EAS7B,SAAAD,WAAmBE,MAAmB,EAAEC,OAAkC,EAAE;IAAA,IAAAC,eAAA;IAAA,IAAAC,KAAA;IAAA7B,eAAA,OAAAwB,UAAA;IAC1EK,KAAA,GAAApB,UAAA,OAAAe,UAAA,GAAME,MAAM,EAAEC,OAAO;IACrBE,KAAA,CAAKC,OAAO,GAAGJ,MAAM,CAACI,OAAO,IAAI,KAAK;IACtCD,KAAA,CAAKE,UAAU,GAAGL,MAAM,CAACK,UAAU,KAAKC,SAAS,GAAGN,MAAM,CAACK,UAAU,GAAG,IAAI;IAC5EF,KAAA,CAAKI,OAAO,IAAAL,eAAA,GAAGF,MAAM,CAACO,OAAO,cAAAL,eAAA,cAAAA,eAAA,GAAI,IAAI,GAAG,EAAE,GAAG,CAAC;IAC9CC,KAAA,CAAKK,MAAM,GAAGP,OAAO,CAACO,MAAM;IAAC,OAAAL,KAAA;EAC/B;EAACT,SAAA,CAAAI,UAAA,EAAAC,mBAAA;EAAA,OAAAtB,YAAA,CAAAqB,UAAA;IAAAtB,GAAA;IAAAtC,KAAA,EAED,SAAOuE,oBAAoBA,CAACC,GAAY,EAAEC,IAAU,EAAQ;MAAA,IAAAC,MAAA;MAC1D,IAAMC,UAAU;QAAA,IAAAC,IAAA,GAAA3C,iBAAA,cAAA9D,YAAA,GAAAqC,CAAA,CAAG,SAAAqE,QACjBC,GAAY,EACZC,GAA2C;UAAA,IAAAC,YAAA;UAAA,IAAAC,OAAA,EAAAC,cAAA,EAAAC,aAAA,EAAAC,KAAA,EAAAC,aAAA,EAAAC,UAAA,EAAAC,QAAA,EAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA;UAAA,OAAAzH,YAAA,GAAAoC,CAAA,WAAAsF,QAAA;YAAA,kBAAAA,QAAA,CAAAzG,CAAA,GAAAyG,QAAA,CAAAtH,CAAA;cAAA;gBAErC0G,OAAO,GAAGH,GAAG,CAACG,OAAO;gBAE3BA,OAAO,CAAC,MAAM,CAAC,GAAG,oBAAoB;gBACtCA,OAAO,CAAC,kBAAkB,CAAC,GAAG,iBAAiB;gBAE3CC,cAAmB,GAAG;kBACxBE,KAAK,EAAE,IAAIU,qBAAK,CAACC,KAAK,CAAC;oBAAEC,kBAAkB,EAAEtB,MAAI,CAACP;kBAAW,CAAC,CAAC;kBAC/D8B,IAAI,EAAEC,IAAI,CAACC,SAAS,CAACrB,GAAG,CAACmB,IAAI,CAAC;kBAC9BhB,OAAO,EAAPA,OAAO;kBACPmB,MAAM,EAAEtB,GAAG,CAACsB;gBACd,CAAC;gBAED,IAAI3B,IAAI,aAAJA,IAAI,gBAAAO,YAAA,GAAJP,IAAI,CAAEX,MAAM,cAAAkB,YAAA,eAAZA,YAAA,CAAcqB,WAAW,EAAE;kBAC7B;kBACA;kBACMjB,KAAK,GAAG,IAAAkB,2BAAqB,EAAC7B,IAAI,aAAJA,IAAI,gBAAAU,aAAA,GAAJV,IAAI,CAAEX,MAAM,cAAAqB,aAAA,uBAAZA,aAAA,CAAckB,WAAW,CAAC;kBAC9DnB,cAAc,GAAGlG,MAAM,CAACuH,MAAM,CAAC,CAAC,CAAC,EAAErB,cAAc,EAAE;oBACjDE,KAAK,EAALA;kBACF,CAAC,CAAC;gBACJ;gBAACS,QAAA,CAAAzG,CAAA;gBAGOiG,aAAa,MAAAmB,MAAA,CAAM9C,eAAe,EAAA8C,MAAA,CAAG1B,GAAG,CAAC2B,OAAO,EAAAD,MAAA,CAAG1B,GAAG,CAAC4B,KAAK,CAACC,IAAI;gBACvEjC,MAAI,CAACJ,MAAM,CAACsC,KAAK,CAAC,sBAAsB,GAAGvB,aAAa,CAAC;gBAEnDC,UAAU,GAAG,IAAIuB,eAAe,CAAC,CAAC;gBAExCC,UAAU,CACR;kBAAA,OAAMxB,UAAU,CAACyB,KAAK,UAAAP,MAAA,CAAUnB,aAAa,eAAAmB,MAAA,CAAY9B,MAAI,CAACL,OAAO,OAAI,CAAC;gBAAA,GAC1EK,MAAI,CAACL,OACP,CAAC;gBAACwB,QAAA,CAAAtH,CAAA;gBAAA,OAEqB,IAAAyI,qBAAK,EAAC3B,aAAa,EAAA/D,aAAA,CAAAA,aAAA,KACrC4D,cAAc;kBACjB+B,MAAM,EAAE3B,UAAU,CAAC2B;gBAAM,EAC1B,CAAC;cAAA;gBAHI1B,QAAQ,GAAAM,QAAA,CAAAtG,CAAA;gBAAA,KAKVgG,QAAQ,CAAC2B,EAAE;kBAAArB,QAAA,CAAAtH,CAAA;kBAAA;gBAAA;gBAAAiH,EAAA,GACbT,GAAG,CAACoC,MAAM,CAAC5B,QAAQ,CAAC4B,MAAM,CAAC;gBAAAtB,QAAA,CAAAtH,CAAA;gBAAA,OAAYgH,QAAQ,CAAC6B,IAAI,CAAC,CAAC;cAAA;gBAAA5B,EAAA,CAA1B6B,IAAI,CAAAvH,IAAA,CAAA0F,EAAA,EAAAK,QAAA,CAAAtG,CAAA;gBAAAsG,QAAA,CAAAtH,CAAA;gBAAA;cAAA;gBAAAkH,GAAA,GAEhCf,MAAI,CAACJ,MAAM;gBAAAoB,GAAA,GAAkCQ,IAAI;gBAAAL,QAAA,CAAAtH,CAAA;gBAAA,OAAiBgH,QAAQ,CAAC6B,IAAI,CAAC,CAAC;cAAA;gBAAAzB,GAAA,GAAAD,GAAA,CAA/BS,SAAS,CAAArG,IAAA,CAAA4F,GAAA,EAAAG,QAAA,CAAAtG,CAAA;gBAAAkG,GAAA,CAA/C6B,IAAI,CAAAxH,IAAA,CAAA2F,GAAA,EAAC,yBAAyB,GAAAE,GAAA;gBAC1CZ,GAAG,CAACoC,MAAM,CAAC5B,QAAQ,CAAC4B,MAAM,CAAC,CAACI,GAAG,CAAC,CAAC;cAAC;gBAAA1B,QAAA,CAAAtH,CAAA;gBAAA;cAAA;gBAAAsH,QAAA,CAAAzG,CAAA;gBAAAwG,GAAA,GAAAC,QAAA,CAAAtG,CAAA;gBAGpCmF,MAAI,CAACJ,MAAM,CAACgD,IAAI,CAAC,yBAAyB,GAAA1B,GAAQ,CAAC;gBACnDb,GAAG,CAACoC,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,CAAC,CAAC;cAAC;gBAAA,OAAA1B,QAAA,CAAArG,CAAA;YAAA;UAAA,GAAAqF,OAAA;QAAA,CAEzB;QAAA,gBAnDKF,UAAUA,CAAA6C,EAAA,EAAAC,GAAA;UAAA,OAAA7C,IAAA,CAAAvD,KAAA,OAAAE,SAAA;QAAA;MAAA,GAmDf;MAED,IAAMmG,WAAW;QAAA,IAAAC,KAAA,GAAA1F,iBAAA,cAAA9D,YAAA,GAAAqC,CAAA,CAAG,SAAAoH,SAAO9C,GAAY,EAAEC,GAAa;UAAA,OAAA5G,YAAA,GAAAoC,CAAA,WAAAsH,SAAA;YAAA,kBAAAA,SAAA,CAAAtJ,CAAA;cAAA;gBAAA,KAChDmG,MAAI,CAACR,OAAO;kBAAA2D,SAAA,CAAAtJ,CAAA;kBAAA;gBAAA;gBAAAsJ,SAAA,CAAAtJ,CAAA;gBAAA,OACRoG,UAAU,CAACG,GAAG,EAAEC,GAAG,CAAC;cAAA;gBAAA8C,SAAA,CAAAtJ,CAAA;gBAAA;cAAA;gBAE1BwG,GAAG,CAACoC,MAAM,CAAC,GAAG,CAAC,CAACI,GAAG,CAAC,CAAC;cAAC;gBAAA,OAAAM,SAAA,CAAArI,CAAA;YAAA;UAAA,GAAAoI,QAAA;QAAA,CAEzB;QAAA,gBANKF,WAAWA,CAAAI,GAAA,EAAAC,GAAA;UAAA,OAAAJ,KAAA,CAAAtG,KAAA,OAAAE,SAAA;QAAA;MAAA,GAMhB;;MAED;MACA,IAAMyG,MAAM,GAAGC,mBAAO,CAACC,MAAM,CAAC,CAAC;MAE/BF,MAAM,CAACG,IAAI,CAAC,SAAS,EAAEF,mBAAO,CAACb,IAAI,CAAC;QAAEgB,KAAK,EAAE;MAAO,CAAC,CAAC,EAAEV,WAAW,CAAC;MACpEM,MAAM,CAACG,IAAI,CAAC,eAAe,EAAEF,mBAAO,CAACb,IAAI,CAAC;QAAEgB,KAAK,EAAE;MAAO,CAAC,CAAC,EAAEV,WAAW,CAAC;MAE1EM,MAAM,CAACG,IAAI,CAAC,kBAAkB,EAAEF,mBAAO,CAACb,IAAI,CAAC;QAAEgB,KAAK,EAAE;MAAO,CAAC,CAAC,EAAEV,WAAW,CAAC;MAE7ElD,GAAG,CAAC6D,GAAG,CAAC,oBAAoB,EAAEL,MAAM,CAAC;IACvC;EAAC;AAAA,EAvFOM,iBAAW,CAACC,MAAM","ignoreList":[]}
+{"version":3,"file":"audit.js","names":[],"sources":["../src/audit.ts"],"sourcesContent":["import express, { type Express, type Request, type Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport fetch from 'node-fetch';\nimport https from 'node:https';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { pluginUtils } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit\n  extends pluginUtils.Plugin<ConfigAudit>\n  implements pluginUtils.ExpressMiddleware<ConfigAudit, {}, Auth>\n{\n  public enabled: boolean;\n  public logger: Logger;\n  public strict_ssl: boolean;\n  public timeout: number;\n\n  public constructor(config: ConfigAudit, options: pluginUtils.PluginOptions) {\n    super(config, options);\n    this.enabled = config.enabled || false;\n    this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n    this.timeout = config.timeout ?? 1000 * 60 * 1;\n    this.logger = options.logger;\n  }\n\n  public register_middlewares(app: Express, auth: Auth): void {\n    const fetchAudit = async (\n      req: Request,\n      res: Response & { report_error?: Function }\n    ): Promise<void> => {\n      const headers = req.headers;\n\n      headers['host'] = 'registry.npmjs.org';\n      headers['content-encoding'] = 'gzip,deflate,br';\n\n      let requestOptions: any = {\n        agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n        body: JSON.stringify(req.body),\n        headers,\n        method: req.method,\n      };\n\n      if (auth?.config?.https_proxy) {\n        // we should check whether this works fine after this migration\n        // please notify if anyone is having issues\n        const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n        requestOptions = Object.assign({}, requestOptions, {\n          agent,\n        });\n      }\n\n      try {\n        const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n        this.logger.debug('fetching audit from ' + auditEndpoint);\n\n        const controller = new AbortController();\n\n        setTimeout(\n          () => controller.abort(`Fetch ${auditEndpoint} timeout ${this.timeout}ms`),\n          this.timeout\n        );\n\n        const response = await fetch(auditEndpoint, {\n          ...requestOptions,\n          signal: controller.signal,\n        });\n\n        if (response.ok) {\n          res.status(response.status).send(await response.json());\n        } else {\n          this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n          res.status(response.status).end();\n        }\n      } catch (error) {\n        this.logger.warn('could not fetch audit: ' + error);\n        res.status(500).end();\n      }\n    };\n\n    const handleAudit = async (req: Request, res: Response): Promise<void> => {\n      if (this.enabled) {\n        await fetchAudit(req, res);\n      } else {\n        res.status(500).end();\n      }\n    };\n\n    const router = express.Router();\n\n    router.post('/audits', express.json({ limit: '10mb' }), handleAudit);\n    router.post('/audits/quick', express.json({ limit: '10mb' }), handleAudit);\n\n    router.post('/advisories/bulk', express.json({ limit: '10mb' }), handleAudit);\n\n    app.use('/-/npm/v1/security', router);\n  }\n}\n"],"mappings":";;;;;;;;;;;AAYA,IAAa,kBAAkB;AAE/B,IAAqB,aAArB,cACU,gBAAA,YAAY,OAEtB;CACE;CACA;CACA;CACA;CAEA,YAAmB,QAAqB,SAAoC;EAC1E,MAAM,QAAQ,OAAO;EACrB,KAAK,UAAU,OAAO,WAAW;EACjC,KAAK,aAAa,OAAO,eAAe,KAAA,IAAY,OAAO,aAAa;EACxE,KAAK,UAAU,OAAO,WAAW,MAAO,KAAK;EAC7C,KAAK,SAAS,QAAQ;CACxB;CAEA,qBAA4B,KAAc,MAAkB;EAC1D,MAAM,aAAa,OACjB,KACA,QACkB;GAClB,MAAM,UAAU,IAAI;GAEpB,QAAQ,UAAU;GAClB,QAAQ,sBAAsB;GAE9B,IAAI,iBAAsB;IACxB,OAAO,IAAI,WAAA,QAAM,MAAM,EAAE,oBAAoB,KAAK,WAAW,CAAC;IAC9D,MAAM,KAAK,UAAU,IAAI,IAAI;IAC7B;IACA,QAAQ,IAAI;GACd;GAEA,IAAI,MAAM,QAAQ,aAAa;IAG7B,MAAM,SAAA,GAAA,kBAAA,SAA8B,MAAM,QAAQ,WAAW;IAC7D,iBAAiB,OAAO,OAAO,CAAC,GAAG,gBAAgB,EACjD,MACF,CAAC;GACH;GAEA,IAAI;IACF,MAAM,gBAAgB,GAAG,kBAAkB,IAAI,UAAU,IAAI,MAAM;IACnE,KAAK,OAAO,MAAM,yBAAyB,aAAa;IAExD,MAAM,aAAa,IAAI,gBAAgB;IAEvC,iBACQ,WAAW,MAAM,SAAS,cAAc,WAAW,KAAK,QAAQ,GAAG,GACzE,KAAK,OACP;IAEA,MAAM,WAAW,OAAA,GAAA,WAAA,SAAY,eAAe;KAC1C,GAAG;KACH,QAAQ,WAAW;IACrB,CAAC;IAED,IAAI,SAAS,IACX,IAAI,OAAO,SAAS,MAAM,EAAE,KAAK,MAAM,SAAS,KAAK,CAAC;SACjD;KACL,KAAK,OAAO,KAAK,4BAA4B,KAAK,UAAU,MAAM,SAAS,KAAK,CAAC,CAAC;KAClF,IAAI,OAAO,SAAS,MAAM,EAAE,IAAI;IAClC;GACF,SAAS,OAAO;IACd,KAAK,OAAO,KAAK,4BAA4B,KAAK;IAClD,IAAI,OAAO,GAAG,EAAE,IAAI;GACtB;EACF;EAEA,MAAM,cAAc,OAAO,KAAc,QAAiC;GACxE,IAAI,KAAK,SACP,MAAM,WAAW,KAAK,GAAG;QAEzB,IAAI,OAAO,GAAG,EAAE,IAAI;EAExB;EAEA,MAAM,SAAS,QAAA,QAAQ,OAAO;EAE9B,OAAO,KAAK,WAAW,QAAA,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EACnE,OAAO,KAAK,iBAAiB,QAAA,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EAEzE,OAAO,KAAK,oBAAoB,QAAA,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EAE5E,IAAI,IAAI,sBAAsB,MAAM;CACtC;AACF"}

package/build/audit.mjs

@@ -0,0 +1,68 @@
+import express from "express";
+import createHttpsProxyAgent from "https-proxy-agent";
+import fetch from "node-fetch";
+import https from "node:https";
+import { pluginUtils } from "@verdaccio/core";
+//#region src/audit.ts
+var REGISTRY_DOMAIN = "https://registry.npmjs.org";
+var ProxyAudit = class extends pluginUtils.Plugin {
+	enabled;
+	logger;
+	strict_ssl;
+	timeout;
+	constructor(config, options) {
+		super(config, options);
+		this.enabled = config.enabled || false;
+		this.strict_ssl = config.strict_ssl !== void 0 ? config.strict_ssl : true;
+		this.timeout = config.timeout ?? 1e3 * 60 * 1;
+		this.logger = options.logger;
+	}
+	register_middlewares(app, auth) {
+		const fetchAudit = async (req, res) => {
+			const headers = req.headers;
+			headers["host"] = "registry.npmjs.org";
+			headers["content-encoding"] = "gzip,deflate,br";
+			let requestOptions = {
+				agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),
+				body: JSON.stringify(req.body),
+				headers,
+				method: req.method
+			};
+			if (auth?.config?.https_proxy) {
+				const agent = createHttpsProxyAgent(auth?.config?.https_proxy);
+				requestOptions = Object.assign({}, requestOptions, { agent });
+			}
+			try {
+				const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;
+				this.logger.debug("fetching audit from " + auditEndpoint);
+				const controller = new AbortController();
+				setTimeout(() => controller.abort(`Fetch ${auditEndpoint} timeout ${this.timeout}ms`), this.timeout);
+				const response = await fetch(auditEndpoint, {
+					...requestOptions,
+					signal: controller.signal
+				});
+				if (response.ok) res.status(response.status).send(await response.json());
+				else {
+					this.logger.warn("could not fetch audit: " + JSON.stringify(await response.json()));
+					res.status(response.status).end();
+				}
+			} catch (error) {
+				this.logger.warn("could not fetch audit: " + error);
+				res.status(500).end();
+			}
+		};
+		const handleAudit = async (req, res) => {
+			if (this.enabled) await fetchAudit(req, res);
+			else res.status(500).end();
+		};
+		const router = express.Router();
+		router.post("/audits", express.json({ limit: "10mb" }), handleAudit);
+		router.post("/audits/quick", express.json({ limit: "10mb" }), handleAudit);
+		router.post("/advisories/bulk", express.json({ limit: "10mb" }), handleAudit);
+		app.use("/-/npm/v1/security", router);
+	}
+};
+//#endregion
+export { ProxyAudit as default };
+
+//# sourceMappingURL=audit.mjs.map

package/build/audit.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.mjs","names":[],"sources":["../src/audit.ts"],"sourcesContent":["import express, { type Express, type Request, type Response } from 'express';\nimport createHttpsProxyAgent from 'https-proxy-agent';\nimport fetch from 'node-fetch';\nimport https from 'node:https';\n\nimport type { Auth } from '@verdaccio/auth';\nimport { pluginUtils } from '@verdaccio/core';\nimport type { Logger } from '@verdaccio/types';\n\nimport type { ConfigAudit } from './types';\n\n// FUTURE: we should be able to overwrite this\nexport const REGISTRY_DOMAIN = 'https://registry.npmjs.org';\n\nexport default class ProxyAudit\n  extends pluginUtils.Plugin<ConfigAudit>\n  implements pluginUtils.ExpressMiddleware<ConfigAudit, {}, Auth>\n{\n  public enabled: boolean;\n  public logger: Logger;\n  public strict_ssl: boolean;\n  public timeout: number;\n\n  public constructor(config: ConfigAudit, options: pluginUtils.PluginOptions) {\n    super(config, options);\n    this.enabled = config.enabled || false;\n    this.strict_ssl = config.strict_ssl !== undefined ? config.strict_ssl : true;\n    this.timeout = config.timeout ?? 1000 * 60 * 1;\n    this.logger = options.logger;\n  }\n\n  public register_middlewares(app: Express, auth: Auth): void {\n    const fetchAudit = async (\n      req: Request,\n      res: Response & { report_error?: Function }\n    ): Promise<void> => {\n      const headers = req.headers;\n\n      headers['host'] = 'registry.npmjs.org';\n      headers['content-encoding'] = 'gzip,deflate,br';\n\n      let requestOptions: any = {\n        agent: new https.Agent({ rejectUnauthorized: this.strict_ssl }),\n        body: JSON.stringify(req.body),\n        headers,\n        method: req.method,\n      };\n\n      if (auth?.config?.https_proxy) {\n        // we should check whether this works fine after this migration\n        // please notify if anyone is having issues\n        const agent = createHttpsProxyAgent(auth?.config?.https_proxy);\n        requestOptions = Object.assign({}, requestOptions, {\n          agent,\n        });\n      }\n\n      try {\n        const auditEndpoint = `${REGISTRY_DOMAIN}${req.baseUrl}${req.route.path}`;\n        this.logger.debug('fetching audit from ' + auditEndpoint);\n\n        const controller = new AbortController();\n\n        setTimeout(\n          () => controller.abort(`Fetch ${auditEndpoint} timeout ${this.timeout}ms`),\n          this.timeout\n        );\n\n        const response = await fetch(auditEndpoint, {\n          ...requestOptions,\n          signal: controller.signal,\n        });\n\n        if (response.ok) {\n          res.status(response.status).send(await response.json());\n        } else {\n          this.logger.warn('could not fetch audit: ' + JSON.stringify(await response.json()));\n          res.status(response.status).end();\n        }\n      } catch (error) {\n        this.logger.warn('could not fetch audit: ' + error);\n        res.status(500).end();\n      }\n    };\n\n    const handleAudit = async (req: Request, res: Response): Promise<void> => {\n      if (this.enabled) {\n        await fetchAudit(req, res);\n      } else {\n        res.status(500).end();\n      }\n    };\n\n    const router = express.Router();\n\n    router.post('/audits', express.json({ limit: '10mb' }), handleAudit);\n    router.post('/audits/quick', express.json({ limit: '10mb' }), handleAudit);\n\n    router.post('/advisories/bulk', express.json({ limit: '10mb' }), handleAudit);\n\n    app.use('/-/npm/v1/security', router);\n  }\n}\n"],"mappings":";;;;;;AAYA,IAAa,kBAAkB;AAE/B,IAAqB,aAArB,cACU,YAAY,OAEtB;CACE;CACA;CACA;CACA;CAEA,YAAmB,QAAqB,SAAoC;EAC1E,MAAM,QAAQ,OAAO;EACrB,KAAK,UAAU,OAAO,WAAW;EACjC,KAAK,aAAa,OAAO,eAAe,KAAA,IAAY,OAAO,aAAa;EACxE,KAAK,UAAU,OAAO,WAAW,MAAO,KAAK;EAC7C,KAAK,SAAS,QAAQ;CACxB;CAEA,qBAA4B,KAAc,MAAkB;EAC1D,MAAM,aAAa,OACjB,KACA,QACkB;GAClB,MAAM,UAAU,IAAI;GAEpB,QAAQ,UAAU;GAClB,QAAQ,sBAAsB;GAE9B,IAAI,iBAAsB;IACxB,OAAO,IAAI,MAAM,MAAM,EAAE,oBAAoB,KAAK,WAAW,CAAC;IAC9D,MAAM,KAAK,UAAU,IAAI,IAAI;IAC7B;IACA,QAAQ,IAAI;GACd;GAEA,IAAI,MAAM,QAAQ,aAAa;IAG7B,MAAM,QAAQ,sBAAsB,MAAM,QAAQ,WAAW;IAC7D,iBAAiB,OAAO,OAAO,CAAC,GAAG,gBAAgB,EACjD,MACF,CAAC;GACH;GAEA,IAAI;IACF,MAAM,gBAAgB,GAAG,kBAAkB,IAAI,UAAU,IAAI,MAAM;IACnE,KAAK,OAAO,MAAM,yBAAyB,aAAa;IAExD,MAAM,aAAa,IAAI,gBAAgB;IAEvC,iBACQ,WAAW,MAAM,SAAS,cAAc,WAAW,KAAK,QAAQ,GAAG,GACzE,KAAK,OACP;IAEA,MAAM,WAAW,MAAM,MAAM,eAAe;KAC1C,GAAG;KACH,QAAQ,WAAW;IACrB,CAAC;IAED,IAAI,SAAS,IACX,IAAI,OAAO,SAAS,MAAM,EAAE,KAAK,MAAM,SAAS,KAAK,CAAC;SACjD;KACL,KAAK,OAAO,KAAK,4BAA4B,KAAK,UAAU,MAAM,SAAS,KAAK,CAAC,CAAC;KAClF,IAAI,OAAO,SAAS,MAAM,EAAE,IAAI;IAClC;GACF,SAAS,OAAO;IACd,KAAK,OAAO,KAAK,4BAA4B,KAAK;IAClD,IAAI,OAAO,GAAG,EAAE,IAAI;GACtB;EACF;EAEA,MAAM,cAAc,OAAO,KAAc,QAAiC;GACxE,IAAI,KAAK,SACP,MAAM,WAAW,KAAK,GAAG;QAEzB,IAAI,OAAO,GAAG,EAAE,IAAI;EAExB;EAEA,MAAM,SAAS,QAAQ,OAAO;EAE9B,OAAO,KAAK,WAAW,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EACnE,OAAO,KAAK,iBAAiB,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EAEzE,OAAO,KAAK,oBAAoB,QAAQ,KAAK,EAAE,OAAO,OAAO,CAAC,GAAG,WAAW;EAE5E,IAAI,IAAI,sBAAsB,MAAM;CACtC;AACF"}

package/build/index.d.ts

@@ -1,4 +1,4 @@
 import AuditPlugin from './audit';
-import { ConfigAudit } from './types';
-export { ConfigAudit };
+import type { ConfigAudit } from './types';
+export type { ConfigAudit };
 export default AuditPlugin;

package/build/index.js

@@ -1,17 +1,10 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "ConfigAudit", {
-  enumerable: true,
-  get: function get() {
-    return _types.ConfigAudit;
-  }
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
 });
-exports["default"] = void 0;
-var _audit = _interopRequireDefault(require("./audit"));
-var _types = require("./types");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
-var _default = exports["default"] = _audit["default"];
+//#region src/index.ts
+var src_default = require("./audit.js").default;
+//#endregion
+exports.default = src_default;
+
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_audit","_interopRequireDefault","require","_types","e","__esModule","_default","exports","AuditPlugin"],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport { ConfigAudit } from './types';\n\nexport { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAAsC,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,gBAAAA,CAAA;AAAA,IAAAE,QAAA,GAAAC,OAAA,cAIvBC,iBAAW","ignoreList":[]}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport type { ConfigAudit } from './types';\n\nexport type { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;;;;AAKA,IAAA,kCAAe,EAAA"}

package/build/index.mjs

@@ -0,0 +1,7 @@
+import ProxyAudit from "./audit.mjs";
+//#region src/index.ts
+var src_default = ProxyAudit;
+//#endregion
+export { src_default as default };
+
+//# sourceMappingURL=index.mjs.map

package/build/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/index.ts"],"sourcesContent":["import AuditPlugin from './audit';\nimport type { ConfigAudit } from './types';\n\nexport type { ConfigAudit };\n\nexport default AuditPlugin;\n"],"mappings":";;AAKA,IAAA,cAAe"}

package/package.json

@@ -1,60 +1,73 @@
 {
   "name": "verdaccio-audit",
-  "version": "13.0.3",
+  "version": "13.1.0",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
-    "private",
-    "package",
-    "repository",
-    "registry",
     "enterprise",
     "modules",
+    "package",
+    "private",
     "proxy",
+    "registry",
+    "repository",
     "server",
     "verdaccio"
   ],
-  "author": "Juan Picado <juanpicado19@gmail.com>",
-  "license": "MIT",
   "homepage": "https://verdaccio.org",
+  "bugs": {
+    "url": "https://github.com/verdaccio/verdaccio/issues"
+  },
+  "license": "MIT",
+  "author": "Juan Picado <juanpicado19@gmail.com>",
   "repository": {
     "type": "https",
     "url": "https://github.com/verdaccio/verdaccio",
     "directory": "packages/plugins/audit"
   },
-  "bugs": {
-    "url": "https://github.com/verdaccio/verdaccio/issues"
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/verdaccio"
   },
-  "main": "build/index.js",
-  "types": "build/index.d.ts",
-  "engines": {
-    "node": ">=18"
+  "main": "./build/index.js",
+  "module": "./build/index.mjs",
+  "types": "./build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.mjs"
+      },
+      "require": {
+        "types": "./build/index.d.ts",
+        "default": "./build/index.js"
+      }
+    },
+    "./build/*": "./build/*"
   },
   "dependencies": {
-    "@verdaccio/config": "8.1.2",
-    "@verdaccio/core": "8.1.2",
+    "@verdaccio/config": "8.2.0",
+    "@verdaccio/core": "8.2.0",
     "express": "4.22.1",
     "https-proxy-agent": "5.0.1",
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/auth": "8.0.3",
-    "@verdaccio/logger": "8.0.3",
-    "@verdaccio/types": "13.0.2",
+    "@verdaccio/auth": "8.1.0",
+    "@verdaccio/logger": "8.1.0",
+    "@verdaccio/types": "13.0.5",
     "nock": "13.5.6",
     "supertest": "7.1.4",
+    "vite": "8.0.16",
     "vitest": "4.1.2"
   },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
+  "engines": {
+    "node": ">=22"
   },
   "scripts": {
     "clean": "rimraf ./build",
     "type-check": "tsc --noEmit -p tsconfig.build.json",
-    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
-    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
-    "build": "pnpm run build:js && pnpm run build:types",
-    "watch": "pnpm build:js -- --watch",
+    "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.build.json",
+    "watch": "vite build --watch",
     "test": "vitest run"
   }
 }

package/build/types.js

@@ -1,6 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-//# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","names":[],"sources":["../src/types.ts"],"sourcesContent":["export interface ConfigAudit {\n  enabled: boolean;\n  max_body?: string;\n  strict_ssl?: boolean;\n  timeout?: number;\n}\n"],"mappings":"","ignoreList":[]}