verdaccio 5.15.4 → 5.16.0

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [5.16.0](https://github.com/verdaccio/verdaccio/compare/v5.15.4...v5.16.0) (2022-11-08)
+
+
+### Features
+
+* docker image refactor a new internal binary run  ([#3475](https://github.com/verdaccio/verdaccio/issues/3475)) ([ebaaf3f](https://github.com/verdaccio/verdaccio/commit/ebaaf3f6811c11f5407482628df40198d97c4b83))
+* update to docker base image to node v18.12.0 ([#3469](https://github.com/verdaccio/verdaccio/issues/3469)) ([644938c](https://github.com/verdaccio/verdaccio/commit/644938c0f31dd375af6023362ea9596de1dfa3c5))
+
+
+### Bug Fixes
+
+* **deps:** update dependency body-parser to v1.20.1 ([#3438](https://github.com/verdaccio/verdaccio/issues/3438)) ([b3b44f6](https://github.com/verdaccio/verdaccio/commit/b3b44f6317cf7e47689e336bfa6e2c8c8e3d1a93))
+* **deps:** update dependency dayjs to v1.11.6 ([#3459](https://github.com/verdaccio/verdaccio/issues/3459)) ([106e00a](https://github.com/verdaccio/verdaccio/commit/106e00a751ff7f89b660861e5cdd95811a8069a3))
+* **deps:** update dependency express to v4.18.2 ([#3435](https://github.com/verdaccio/verdaccio/issues/3435)) ([128ab21](https://github.com/verdaccio/verdaccio/commit/128ab21a8ae6a83a8650acc1021a460339b0ba74))
+* **deps:** update dependency marked to v4.1.1 ([#3439](https://github.com/verdaccio/verdaccio/issues/3439)) ([1a1572f](https://github.com/verdaccio/verdaccio/commit/1a1572ff9e8eeffb35f2beac2bb24a760b6326bc))
+* update core deps ([#3485](https://github.com/verdaccio/verdaccio/issues/3485)) ([7a000bc](https://github.com/verdaccio/verdaccio/commit/7a000bccdb2af156936a7118cb8b64c51a27015e))
+
 ### [5.15.4](https://github.com/verdaccio/verdaccio/compare/v5.15.3...v5.15.4) (2022-09-29)
 
 

package/build/index.js

@@ -27,10 +27,7 @@ Object.defineProperty(exports, "startVerdaccio", {
     return _bootstrap.startVerdaccio;
   }
 });
-
 var _utils = require("./lib/utils");
-
 var _bootstrap = require("./lib/bootstrap");
-
 var _bootstrap2 = require("./lib/bootstrap.v2");
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjozLCJuYW1lcyI6W10sInNvdXJjZXMiOlsiLi4vc3JjL2luZGV4LnRzIl0sInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB7IHBhcnNlQ29uZmlnRmlsZSB9IGZyb20gJy4vbGliL3V0aWxzJztcbmV4cG9ydCB7IHN0YXJ0VmVyZGFjY2lvIGFzIGRlZmF1bHQsIHN0YXJ0VmVyZGFjY2lvIH0gZnJvbSAnLi9saWIvYm9vdHN0cmFwJztcbi8vIFNpbWlsYXIgc3RydWN0dXJlIGFzIHY2IGJ1dCB3aXRoIGRpZmZlcmVudCBmdW5jdGlvbnNcbi8vIHRoaXMgaXMgYSBicmlkZ2UgZm9yIGVhc3kgbWlncmF0aW9uIHRvIHY2XG5leHBvcnQgeyBydW5TZXJ2ZXIgfSBmcm9tICcuL2xpYi9ib290c3RyYXAudjInO1xuIl0sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQTs7QUFDQTs7QUFHQSJ9
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio",
-  "version": "5.15.4",
+  "version": "5.16.0",
   "description": "A lightweight private npm proxy registry",
   "author": {
     "name": "Verdaccio Maintainers",
@@ -17,24 +17,29 @@
     "type": "opencollective",
     "url": "https://opencollective.com/verdaccio"
   },
+  "files": [
+    "./build",
+    "./index.js",
+    "./conf/"
+  ],
   "dependencies": {
     "@verdaccio/commons-api": "10.2.0",
     "@verdaccio/local-storage": "10.3.1",
-    "@verdaccio/readme": "10.4.1",
+    "@verdaccio/readme": "10.4.2",
     "@verdaccio/streams": "10.2.0",
-    "@verdaccio/ui-theme": "6.0.0-6-next.48",
+    "@verdaccio/ui-theme": "6.0.0-6-next.50",
     "JSONStream": "1.3.5",
     "async": "3.2.4",
-    "body-parser": "1.20.0",
+    "body-parser": "1.20.1",
     "clipanion": "3.1.0",
     "compression": "1.7.4",
     "cookies": "0.8.0",
     "cors": "2.8.5",
-    "dayjs": "1.11.5",
-    "debug": "^4.3.3",
+    "dayjs": "1.11.6",
+    "debug": "^4.3.4",
     "envinfo": "7.8.1",
     "eslint-import-resolver-node": "0.3.6",
-    "express": "4.18.1",
+    "express": "4.18.2",
     "express-rate-limit": "5.5.1",
     "fast-safe-stringify": "2.1.1",
     "handlebars": "4.7.7",
@@ -45,7 +50,7 @@
     "lodash": "4.17.21",
     "lru-cache": "7.14.0",
     "lunr-mutable-indexes": "2.3.2",
-    "marked": "4.1.0",
+    "marked": "4.2.2",
     "memoizee": "0.4.15",
     "mime": "3.0.0",
     "minimatch": "5.1.0",
@@ -58,15 +63,15 @@
     "request": "2.88.0",
     "semver": "7.3.7",
     "validator": "13.7.0",
-    "verdaccio-audit": "10.2.2",
-    "verdaccio-htpasswd": "10.5.0"
+    "verdaccio-audit": "10.2.3",
+    "verdaccio-htpasswd": "10.5.1"
   },
   "devDependencies": {
-    "@babel/cli": "7.18.10",
-    "@babel/core": "7.18.10",
-    "@babel/node": "7.18.10",
+    "@babel/cli": "7.19.3",
+    "@babel/core": "7.19.3",
+    "@babel/node": "7.19.1",
     "@babel/plugin-proposal-class-properties": "7.18.6",
-    "@babel/plugin-proposal-decorators": "7.18.10",
+    "@babel/plugin-proposal-decorators": "7.19.3",
     "@babel/plugin-proposal-export-namespace-from": "7.18.9",
     "@babel/plugin-proposal-function-sent": "7.18.6",
     "@babel/plugin-proposal-json-strings": "7.18.6",
@@ -78,19 +83,19 @@
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
     "@babel/plugin-transform-async-to-generator": "7.18.6",
-    "@babel/plugin-transform-classes": "7.18.9",
-    "@babel/plugin-transform-runtime": "7.18.10",
+    "@babel/plugin-transform-classes": "7.19.0",
+    "@babel/plugin-transform-runtime": "7.19.1",
     "@babel/polyfill": "^7.12.1",
-    "@babel/preset-env": "7.18.10",
+    "@babel/preset-env": "7.19.3",
     "@babel/preset-typescript": "7.18.6",
     "@babel/register": "7.18.9",
-    "@babel/runtime": "7.18.9",
+    "@babel/runtime": "7.19.0",
     "@commitlint/cli": "12.1.4",
     "@commitlint/config-conventional": "12.1.4",
     "@octokit/rest": "18.12.0",
     "@trivago/prettier-plugin-sort-imports": "3.2.0",
     "@types/async": "3.2.13",
-    "@types/express": "4.17.13",
+    "@types/express": "4.17.14",
     "@types/express-rate-limit": "5.1.3",
     "@types/express-serve-static-core": "4.17.28",
     "@types/http-errors": "1.8.2",
@@ -105,12 +110,10 @@
     "@typescript-eslint/eslint-plugin": "5.22.0",
     "@typescript-eslint/parser": "5.22.0",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
-    "@verdaccio/eslint-config": "^10.0.0",
     "@verdaccio/types": "10.7.0",
     "all-contributors-cli": "6.20.0",
     "babel-eslint": "10.1.0",
     "babel-jest": "26.6.3",
-    "babel-loader": "^8.2.3",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "cross-env": "7.0.3",
     "detect-secrets": "1.0.6",
@@ -136,7 +139,6 @@
     "node-mocks-http": "^1.10.1",
     "pinst": "2.1.6",
     "prettier": "2.7.1",
-    "puppeteer": "5.5.0",
     "rimraf": "3.0.2",
     "selfsigned": "1.10.14",
     "standard-version": "9.5.0",
@@ -168,11 +170,10 @@
     "test:unit": "cross-env NODE_ENV=test TZ=UTC FORCE_COLOR=1 jest --config ./jest.config.js --maxWorkers 2 --passWithNoTests",
     "test:functional": "cross-env NODE_ENV=test jest --config ./test/jest.config.functional.js --testPathPattern ./test/functional/index* --passWithNoTests",
     "test:e2e:cli": "cross-env NODE_ENV=test jest --config ./test/e2e-cli/jest.config.e2e.cli.js --passWithNoTests",
-    "test:e2e": "yarn jest --config ./test/jest.config.e2e.js",
-    "test:all": "yarn run test && yarn run test:functional && yarn run test:e2e & yarn run test:e2e:pkg",
+    "test:all": "yarn run test && yarn run test:functional",
     "pre:ci": "yarn run lint",
-    "lint": "yarn run type-check && yarn run lint:ts",
-    "lint:ts": "eslint \"**/*.{js,jsx,ts}\" --max-warnings 145 -c ./eslintrc.js",
+    "lint:ts": "yarn run type-check",
+    "lint": "eslint \"**/*.{js,jsx,ts}\" --max-warnings 145 -c ./eslintrc.js",
     "lint:lockfile": "lockfile-lint --path yarn.lock --type yarn --validate-https --allowed-hosts verdaccio npm yarn",
     "start": "yarn babel-node --extensions \".ts,.tsx\" src/lib/cli --inspect",
     "start:brk": "yarn babel-node --extensions \".ts,.tsx\" src/lib/cli --inspect-brk",
@@ -205,5 +206,6 @@
     "type": "opencollective",
     "url": "https://opencollective.com/verdaccio",
     "logo": "https://opencollective.com/verdaccio/logo.txt"
-  }
+  },
+  "packageManager": "yarn@3.2.3"
 }

package/CODE_OF_CONDUCT.md

@@ -1,46 +0,0 @@
-# Contributor Covenant Code of Conduct
-
-## Our Pledge
-
-In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
-
-## Our Standards
-
-Examples of behavior that contributes to creating a positive environment include:
-
-- Using welcoming and inclusive language
-- Being respectful of differing viewpoints and experiences
-- Gracefully accepting constructive criticism
-- Focusing on what is best for the community
-- Showing empathy towards other community members
-
-Examples of unacceptable behavior by participants include:
-
-- The use of sexualized language or imagery and unwelcome sexual attention or advances
-- Trolling, insulting/derogatory comments, and personal or political attacks
-- Public or private harassment
-- Publishing others' private information, such as a physical or electronic address, without explicit permission
-- Other conduct which could reasonably be considered inappropriate in a professional setting
-
-## Our Responsibilities
-
-Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
-
-Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
-
-## Scope
-
-This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at verdaccio.npm@gmail.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
-
-Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
-
-[homepage]: http://contributor-covenant.org
-[version]: http://contributor-covenant.org/version/1/4/

package/CONTRIBUTING.md

@@ -1,195 +0,0 @@
-# Contributing to Verdaccio
-
-> ⚠️ If you intend to file a PR with a new feature, please use the 5.x branch for it 🥰 . master branch is available only for **bug fixing** and dependencies updates.
-
-We are happy that you wish to contribute to this project. For that reason, we
-present you with this guide.
-
-Additional information is available on the
-[wiki](https://github.com/verdaccio/verdaccio/wiki).
-
-## Contents
-
-- [Contents](#contents)
-- [How Do I Contribute?](#how-do-i-contribute)
-- [Development](#development)
-- [Reporting Bugs](#reporting-bugs)
-  - [Issue Search](#issue-search)
-  - [Check Website For Solution](#check-website-for-solution)
-  - [Chat](#chat)
-  - [Check If It's Been Fixed](#check-if-its-been-fixed)
-- [Request Features](#request-features)
-  - [Submitting a Pull Request](#submitting-a-pull-request)
-  - [Make Changes and Commit](#make-changes-and-commit)
-- [Update Tests](#update-tests)
-- [Develop Plugins](#develop-plugins)
-
-## How Do I Contribute?
-
-There are different ways to contribute, each with a different level
-of involvement and technical knowledge required, such as:
-
-- [Reporting Bugs](#reporting-bugs)
-- [Request Features](#request-features)
-- [Develop Plugins](#develop-plugins)
-- [Improve Documentation](http://www.verdaccio.org/docs/en/installation.html)
-
-**Please read this document carefully. It will help maintainers and readers
-in solving your issue(s), evaluating your feature request, etc.**
-
-## Development
-
-Development guides can be found on the [wiki](https://github.com/verdaccio/verdaccio/wiki):
-
-- [Building the project](https://github.com/verdaccio/verdaccio/wiki/Build-Source-Code)
-- [Running, debugging, and testing](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests)
-
-## Reporting Bugs
-
-We welcome clear, detailed bug reports.
-
-**Bugs are considered features that are not working as described in
-documentation.**
-
-If you've found a bug in Verdaccio **that isn't a security risk**, please file
-a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
-
-**NOTE: Verdaccio still does not support all npm commands. Some were not
-considered important and others have not been requested yet.**
-
-### Issue Search
-
-Search to see if it has already been reported via
-the issue search.
-
-Additionally, we have labelled questions for easy follow-up as [questions](https://github.com/verdaccio/verdaccio/labels/question).
-
-If so, up-vote it (using GitHub reactions) or add additional helpful details to
-the existing issue to show that it's affecting multiple people.
-
-### Check Website For Solution
-
-Some of the most popular topics can be found in our website(http://www.verdaccio.org/docs/en/installation.html)
-
-### Chat
-
-Questions can be asked via [Discord](http://chat.verdaccio.org/)
-
-**Please use the `#questions#` and `#development` channels.**
-
-### Check If It's Been Fixed
-
-Check if the issue has been fixed — try to reproduce it using the latest
-`master` or development branch in the repository.
-
-## Request Features
-
-New feature requests are welcome. Analyse whether the idea fits within scope of
-the project. Then, detail your request, ensuring context and use case is provided.
-
-**Please provide:**
-
-- A detailed description the advantages of your request
-- Whether or not it's compatible with `npm` and `yarn`
-- A potential implementation or design
-- Whatever else you have in your mind 🤓
-
-### Submitting a Pull Request
-
-The following are the steps you should follow when creating a pull request.
-Subsequent pull requests only need to follow step 3 and beyond.
-
-1. Fork the repository on GitHub
-2. Clone the forked repository to your machine
-3. Make your changes and commit them to your local repository
-4. Rebase and push your commits to your GitHub remote fork/repository
-5. Issue a Pull Request to the official repository
-6. Your Pull Request is reviewed by a committer and merged into the repository
-
-**NOTE**: While there are other ways to accomplish the steps using other tools,
-the examples here will assume most actions will be performed via `git` on
-command line.
-
-For more information on maintaining a fork, please see the GitHub Help article
-titled [Fork a Repo](https://help.github.com/articles/fork-a-repo/), and
-information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing).
-
-### Make Changes and Commit
-
-#### Before Commit
-
-Before committing, **you must ensure there are no linting errors and
-all tests pass.**
-
-To do this, run all tests (including e2e):
-
-```bash
-yarn test:all
-```
-
-Then, and only then, you can create your pull request.
-
-#### Commit Guidelines
-
-We follow the [conventional commit messages](https://conventionalcommits.org/)
-convention in order to automate CHANGELOG generation and to automate
-semantic versioning.
-
-For example:
-
-- `feat: A new feature`
-- `fix: A bug fix`
-
-A commit of the type feat introduces a new feature to the codebase
-(this correlates with MINOR in semantic versioning).
-
-e.g.:
-
-```
-feat: xxxxxxxxxx
-```
-
-A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
-
-e.g.:
-
-```
-fix: xxxxxxxxxx
-```
-
-Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
-and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
-
-All commits message are going to be validated when they are created using husky hooks.
-
-**PRs that do not follow the commit message guidelines will not be merged.**
-
-## Update Tests
-
-**Any change in source code must include test updates**.
-
-If you need help with how testing works, please [refer to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
-
-**If you are introducing new features, you MUST include new tests. PRs for
-features without tests will not be merged.**
-
-Things excluded from tests:
-
-- Documentation
-- Website
-- Build
-- Deployment
-- Assets
-- Flow types
-
-## Develop Plugins
-
-Plugins are add-ons that extend the functionality of the application.
-
-If you want to develop your own plugin:
-
-1. Check whether there is a legacy Sinopia plugin for the feature that you need
-   via [npmjs](https://www.npmjs.com/search?q=sinopia)
-2. Keep in mind the [life-cycle to load a plugin](https://verdaccio.org/docs/en/dev-plugins)
-3. You are free to host your plugin in your repository or ours (just ask)
-4. Provide a detailed description of your plugin to help users understand it

package/CONTRIBUTORS.md

@@ -1,41 +0,0 @@
-<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
-<!-- prettier-ignore-start -->
-<!-- markdownlint-disable -->
-<table>
-  <tr>
-    <td align="center"><a href="https://www.linkedin.com/in/jotadeveloper/"><img src="https://avatars0.githubusercontent.com/u/558752?v=4" width="100px;" alt=""/><br /><sub><b>Juan Picado</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Documentation">📖</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Code">💻</a> <a href="#infra-juanpicado" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#eventOrganizing-juanpicado" title="Event Organizing">📋</a> <a href="#blog-juanpicado" title="Blogposts">📝</a> <a href="#maintenance-juanpicado" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://github.com/sergiohgz"><img src="https://avatars3.githubusercontent.com/u/14012309?v=4" width="100px;" alt=""/><br /><sub><b>Sergio Herrera</b></sub></a><br /><a href="#infra-sergiohgz" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-sergiohgz" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://daniel-ruf.de/"><img src="https://avatars1.githubusercontent.com/u/827205?v=4" width="100px;" alt=""/><br /><sub><b>Daniel Ruf</b></sub></a><br /><a href="#security-DanielRuf" title="Security">🛡️</a> <a href="#infra-DanielRuf" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-DanielRuf" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://priscilawebdev.github.io/priscilaoliveira/"><img src="https://avatars1.githubusercontent.com/u/29228205?v=4" width="100px;" alt=""/><br /><sub><b>Priscila Oliveira</b></sub></a><br /><a href="#design-priscilawebdev" title="Design">🎨</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=priscilawebdev" title="Code">💻</a> <a href="#maintenance-priscilawebdev" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="http://ayusharma.github.io/"><img src="https://avatars0.githubusercontent.com/u/6918450?v=4" width="100px;" alt=""/><br /><sub><b>Ayush Sharma</b></sub></a><br /><a href="#infra-ayusharma" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ayusharma" title="Code">💻</a> <a href="#design-ayusharma" title="Design">🎨</a></td>
-    <td align="center"><a href="https://github.com/trentearl"><img src="https://avatars2.githubusercontent.com/u/802857?v=4" width="100px;" alt=""/><br /><sub><b>Trent Earl</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=trentearl" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jmwilkinson"><img src="https://avatars0.githubusercontent.com/u/17836030?v=4" width="100px;" alt=""/><br /><sub><b>jmwilkinson</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jmwilkinson" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/bufferoverflow"><img src="https://avatars2.githubusercontent.com/u/378909?v=4" width="100px;" alt=""/><br /><sub><b>Roger Meier</b></sub></a><br /><a href="#plugin-bufferoverflow" title="Plugin/utility libraries">🔌</a></td>
-    <td align="center"><a href="https://ghuser.io/jamesgeorge007"><img src="https://avatars2.githubusercontent.com/u/25279263?v=4" width="100px;" alt=""/><br /><sub><b>James George</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jamesgeorge007" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/AvailCat"><img src="https://avatars3.githubusercontent.com/u/19658647?v=4" width="100px;" alt=""/><br /><sub><b>AvailCat</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=AvailCat" title="Code">💻</a> <a href="#infra-AvailCat" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-AvailCat" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://www.luciusgaitan.com/"><img src="https://avatars0.githubusercontent.com/u/5970350?v=4" width="100px;" alt=""/><br /><sub><b>Lucius Gaitán</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lgaitan" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ramonornela"><img src="https://avatars1.githubusercontent.com/u/187946?v=4" width="100px;" alt=""/><br /><sub><b>Ramon Henrique Ornelas</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ramonornela" title="Code">💻</a></td>
-    <td align="center"><a href="https://people.freebsd.org/~mi/resume/"><img src="https://avatars1.githubusercontent.com/u/1486340?v=4" width="100px;" alt=""/><br /><sub><b>UnitedMarsupials-zz</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=UnitedMarsupials-zz" title="Code">💻</a></td>
-    <td align="center"><a href="http://www.codingintrigue.co.uk/"><img src="https://avatars0.githubusercontent.com/u/9048902?v=4" width="100px;" alt=""/><br /><sub><b>Ryan Graham</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ryan-codingintrigue" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/coolsp"><img src="https://avatars1.githubusercontent.com/u/1246647?v=4" width="100px;" alt=""/><br /><sub><b>coolsp</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=coolsp" title="Code">💻</a></td>
-    <td align="center"><a href="http://ashishsurana.in/"><img src="https://avatars0.githubusercontent.com/u/5610944?v=4" width="100px;" alt=""/><br /><sub><b>Ashish Surana</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ashishsurana" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/buffaybu"><img src="https://avatars3.githubusercontent.com/u/2025661?v=4" width="100px;" alt=""/><br /><sub><b>Wang Yifei</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=buffaybu" title="Code">💻</a></td>
-    <td align="center"><a href="https://twitter.com/liran_tal"><img src="https://avatars1.githubusercontent.com/u/316371?v=4" width="100px;" alt=""/><br /><sub><b>Liran Tal</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lirantal" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/brenordr"><img src="https://avatars2.githubusercontent.com/u/19731692?v=4" width="100px;" alt=""/><br /><sub><b>Breno Rodrigues</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=brenordr" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jachstet-sea"><img src="https://avatars0.githubusercontent.com/u/7993508?v=4" width="100px;" alt=""/><br /><sub><b>jachstet-sea</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jachstet-sea" title="Code">💻</a></td>
-    <td align="center"><a href="https://patrik.votocek.cz/"><img src="https://avatars1.githubusercontent.com/u/112567?v=4" width="100px;" alt=""/><br /><sub><b>Patrik Votoček</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=Vrtak-CZ" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/monkeywithacupcake"><img src="https://avatars3.githubusercontent.com/u/7316730?v=4" width="100px;" alt=""/><br /><sub><b>jess</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=monkeywithacupcake" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/toolsofraj"><img src="https://avatars0.githubusercontent.com/u/2507152?v=4" width="100px;" alt=""/><br /><sub><b>toolsofraj</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=toolsofraj" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ddhp"><img src="https://avatars1.githubusercontent.com/u/1715380?v=4" width="100px;" alt=""/><br /><sub><b>Jian-Chen Chen (jesse)</b></sub></a><br /><a href="#translation-ddhp" title="Translation">🌍</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ddhp" title="Code">💻</a></td>
-  </tr>
-</table>
-
-<!-- markdownlint-enable -->
-<!-- prettier-ignore-end -->
-<!-- ALL-CONTRIBUTORS-LIST:END -->

package/SECURITY.md

@@ -1,76 +0,0 @@
-# Security Policy
-
-## Supported versions
-
-The following table describes the versions of this project that are currently supported with security updates:
-
-| Version | Supported                                |
-| ------- | ---------------------------------------- |
-| 2.x     | :x:                                      |
-| 3.x     | :x:                                      |
-| 4.x     | :white_check_mark: (until 1st July 2021) |
-| 5.x     | :white_check_mark:                       |
-
-## Responsible disclosure security policy
-
-A responsible disclosure policy helps protect users of the project from publicly disclosed security vulnerabilities without a fix by employing a process where vulnerabilities are first triaged in a private manner, and only publicly disclosed after a reasonable time period that allows patching the vulnerability and provides an upgrade path for users.
-
-When contacting us directly via email, we will do our best efforts to respond in a reasonable time to resolve the issue. When contacting a security program their disclosure policy will provide details on timeframe, processes and paid bounties.
-
-We kindly ask you to refrain from malicious acts that put our users, the project, or any of the project’s team members at risk.
-
-## Reporting a security issue
-
-> Please do not use the provided email address to report issues which are not related to security vulnerabilities
-
-At Verdaccio, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present.
-
-If you discover a security vulnerability, please use one of the following means of communications to report it to us:
-
-- Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
-
-Note that time-frame and processes are subject to each program’s own policy.
-
-- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
-
-Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
-
-## PGP key
-
-The following is this project’s PGP key which should be used to encrypt any sensitive information shared on unsecured medium such as e-mails:
-
-```
------BEGIN PGP PUBLIC KEY BLOCK-----
-Version: OpenPGP.js v4.5.1
-Comment: https://openpgpjs.org
-
-xsBNBFzm3asBCACxnJDv1r6dxiM2e8iqS6B7fxY2I3X1Rc+3m8mhXOwVwRG4
-AOrQ417oSzsVLf4iocg+DWrtxzY79odTLJEovVt79rxwqIIl4y96tH+29kLB
-ao7eaYZacfstonVkBAmxBLaYv1x7cqWuukm6sBCOxapW1X9BcbR3vOghDziY
-/1AwNjupAOPvKNMtghjrdh3w0iMfZS1hw28zjM1oCeezEil+CTjgQDN+69qS
-UFG/BInJ7CVn9TvhU85inSwpxVa576fkhvFoNUrGvFvYRWtXRJndbRdBodVj
-C9At/Gb2IeNf7xqXH2KloZ1yaVNVSzLX4jqrMWeF+9Z12SjUyL6G9TwDABEB
-AAHNIXZlcmRhY2Npb0BwbS5tZSA8dmVyZGFjY2lvQHBtLm1lPsLAdQQQAQgA
-HwUCXObdqwYLCQcIAwIEFQgKAgMWAgECGQECGwMCHgEACgkQpSvoGbwFJYhn
-2wf+JF+yLQXh1EFMih6lpbx243hvglgOWmcigYVRh5mSfULcdW2pmkPQXqhE
-DW73qqwN9G9piiPnGMw7sKoB7XJVuFKyvHOYKtem5UQVRvs2rTxnSc5qFcUJ
-0w3Tw/pZ9B3fYAEYti2B/GsSOzaECfBKCFOg15xXGAdwfgff5FsorN1Gb6MG
-eCO9c8faSF/+fQUCfokwMDVzxXQFZEMx3q/rHVJ/Fm+XelZ+00c9fdyiuPW5
-dM9gATle7lz0iPtxaUDGLW8QZ/7b6O8IJ1kle0tL4AE++bXsVWxNdzhlNohH
-Hn09sIdFnG4ySTz4YJjiDd70ZdQjOGEGvutymEIN1xcNq87ATQRc5t2rAQgA
-yX2ZhUCtrz7lzK0992yveB+duVF//yo9Pei2ra9Z3GNmA+oWlRH1FTWpAmVH
-uDdUchTnxAwaKntabt3Mb1AgEZwrdiG4LuHFbdx2ls93BJ5lXdp7vB6pVf3N
-IrhHKyQ/Y5L5kMSj/GjrhO19zmj6mPPEgb3M3ZIZjQUF4pro0pExuAPA9Wxe
-awn5+0BUYFs4mZQDtTdiVuz5tWA0fNtt1aBfOPA97tmn18y4b1b0iQIJQpep
-BVVnFLeAZOevDcBJFbmQOdAjufWSSgpzX+FZ3rx6RVwwKxUiVQyUuwSQkKh5
-RufZ5zE0y7Fe/YlWXbKoj4zNJqYtjPSPngQRWf7UpwARAQABwsBfBBgBCAAJ
-BQJc5t2rAhsMAAoJEKUr6Bm8BSWIoYQH+QDw0Z84tZK4N1lh49hYyohs6vNU
-9kG69nKLQA5NymPtTxh8YOJhdJL697FkvKI4OGEO2FXUmcJS3CBJ2nBVKMq2
-1biDRKC4OhIU2RgFhS6bHy6VOn24EYs77T+zX8YXpz8ulYVln2b0QZCubN0Z
-L50tEC8HnuVMVN+/pqITdD3FjzwGZgHdW8qkKgD6qhObHCl8/cW2buCsaIAY
-eZWVPgPY1S1U0V608qYNtUCkrmUW5Sl6YLvz7JTvTsaym5mzyFXF3ErAURgI
-/v4XaWmRgNGIxbIxsFGuEs+KIKBQDJmtvJCVpBNS5IYnFf5h/LA5cfkwMKJt
-wXhyE0b/iDs60ZM=
-=QWXs
------END PGP PUBLIC KEY BLOCK-----
-```

package/babel.config.js

@@ -1,22 +0,0 @@
-module.exports = {
-  presets: [
-    [
-      '@babel/env',
-      {
-        targets: {
-          node: '12',
-        },
-      },
-    ],
-    '@babel/typescript',
-  ],
-  plugins: [
-    'babel-plugin-dynamic-import-node',
-    '@babel/proposal-class-properties',
-    '@babel/proposal-object-rest-spread',
-    '@babel/plugin-proposal-optional-chaining',
-    '@babel/plugin-proposal-nullish-coalescing-operator',
-    '@babel/syntax-dynamic-import',
-  ],
-  ignore: ['**/*.d.ts'],
-};

package/build/api/debug/index.js

@@ -1,33 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = void 0;
-
-var _lodash = _interopRequireDefault(require("lodash"));
-
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
-
-var _default = (app, selfPath) => {
-  // Hook for tests only
-  app.get('/-/_debug', function (req, res, next) {
-    const doGarbabeCollector = _lodash.default.isNil(global.gc) === false;
-
-    if (doGarbabeCollector) {
-      global.gc();
-    }
-
-    next({
-      pid: process.pid,
-      // @ts-ignore
-      main: process.mainModule.filename,
-      conf: selfPath,
-      mem: process.memoryUsage(),
-      gc: doGarbabeCollector
-    });
-  });
-};
-
-exports.default = _default;
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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