
Product
Socket Firewall Now Blocks Malicious VS Code and Open VSX Extensions
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.
@playerdata/verdaccio-storage-expiry
Advanced tools
A plugin to automatically remove packages not used recently
A plugin to automatically remove packages not used recently
Set it as a storage backend and load the middleware:
store:
"@playerdata/verdaccio-storage-expiry":
storage_maximum_usage_kb: SPACE_IN_KB
Configure your expiry policies per package group if storage_culling_enabled is not set it will be assumed false:
packages:
'**':
...
storage_culling_enabled: true
When the storage directory size exceeds storage_maximum_usage_kb the plugin will start deleting package versions. First ones that havent been accessed since the server started then the ones least recent used since the server started.
Compile this repo:
yarn build
download verdaccio repo at the version you are developing for
configure it to use this plugin:
store:
storage-expiry:
# path to a directory with plugins to include
plugins: /PATH/TO/DIR/CONTAINING/THIS/ONE
and run its debug script npm run debug
FAQs
A plugin to automatically remove packages not used recently
The npm package @playerdata/verdaccio-storage-expiry receives a total of 42 weekly downloads. As such, @playerdata/verdaccio-storage-expiry popularity was classified as not popular.
We found that @playerdata/verdaccio-storage-expiry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Research
/Security News
A new npm package tests AI malware scanners with prompt injection, safety-triggering comments, context flooding, and obfuscated JavaScript.