@verdaccio/commons-api - npm Package Compare versions

Comparing version 10.0.0 to 11.0.0-6-next.4

CHANGELOG.md

 # Change Log
 
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+## 11.0.0-6-next.4
 
-# [10.0.0](https://github.com/verdaccio/monorepo/compare/v9.7.5...v10.0.0) (2021-03-29)
+### Major Changes
 
-**Note:** Version bump only for package @verdaccio/commons-api
+- 459b6fa7: refactor: search v1 endpoint and local-database
 
+  - refactor search `api v1` endpoint, improve performance
+  - remove usage of `async` dependency https://github.com/verdaccio/verdaccio/issues/1225
+  - refactor method storage class
+  - create new module `core` to reduce the ammount of modules with utilities
+  - use `undici` instead `node-fetch`
+  - use `fastify` instead `express` for functional test
 
+  ### Breaking changes
 
+  - plugin storage API changes
+  - remove old search endpoint (return 404)
+  - filter local private packages at plugin level
 
+  The storage api changes for methods `get`, `add`, `remove` as promise base. The `search` methods also changes and recieves a `query` object that contains all query params from the client.
 
-## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
+  ```ts
+  export interface IPluginStorage<T> extends IPlugin {
+    add(name: string): Promise<void>;
+    remove(name: string): Promise<void>;
+    get(): Promise<any>;
+    init(): Promise<void>;
+    getSecret(): Promise<string>;
+    setSecret(secret: string): Promise<any>;
+    getPackageStorage(packageInfo: string): IPackageStorage;
+    search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
+    saveToken(token: Token): Promise<any>;
+    deleteToken(user: string, tokenKey: string): Promise<any>;
+    readTokens(filter: TokenFilter): Promise<Token[]>;
+  }
+  ```
 
+## 10.0.0-alpha.3
 
-### Bug Fixes
+### Patch Changes
 
-* update dependencies ([#375](https://github.com/verdaccio/monorepo/issues/375)) ([1e7aeec](https://github.com/verdaccio/monorepo/commit/1e7aeec31b056979285e272793a95b8c75d57c77))
+- fecbb9be: chore: add release step to private regisry on merge changeset pr
 
+## 10.0.0-alpha.2
 
+### Minor Changes
 
+- 54c58d1e: feat: add server rate limit protection to all request
 
+  To modify custom values, use the server settings property.
 
-## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+  ```markdown
+  server:
 
-**Note:** Version bump only for package @verdaccio/commons-api
+  ## https://www.npmjs.com/package/express-rate-limit#configuration-options
 
+  rateLimit:
+  windowMs: 1000
+  max: 10000
+  ```
 
+  The values are intended to be high, if you want to improve security of your server consider
+  using different values.
 
+## 10.0.0-alpha.1
 
+### Major Changes
 
-# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
+- d87fa026: feat!: experiments config renamed to flags
 
-**Note:** Version bump only for package @verdaccio/commons-api
+  - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
 
+  ```js
+  flags: token: false;
+  search: false;
+  ```
 
+  - The `self_path` property from the config file is being removed in favor of `config_file` full path.
+  - Refactor `config` module, better types and utilities
 
+- da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
 
+  - Introduce environment variables for legacy tokens
 
-## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
+  ### Code Improvements
 
-**Note:** Version bump only for package @verdaccio/commons-api
+  - Add debug library for improve developer experience
 
+  ### Breaking change
 
+  - The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+  - The secret key must have 32 characters long.
 
+  ### New environment variables
 
+  - `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+  - `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
 
-## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
+### Minor Changes
 
-**Note:** Version bump only for package @verdaccio/commons-api
+- 26b494cb: feat: add typescript project references settings
 
+  Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
 
+  It allows to navigate (IDE) trough the packages without need compile the packages.
 
+  Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).
 
+### Patch Changes
 
-# [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
+- b57b4338: Enable prerelease mode with **changesets**
+- 31af0164: ESLint Warnings Fixed
 
-**Note:** Version bump only for package @verdaccio/commons-api
+  Related to issue #1461
 
+  - max-len: most of the sensible max-len errors are fixed
+  - no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
+  - @typescript-eslint/no-unused-vars: same as above
 
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
 
+### Bug Fixes
 
-# [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
+- update dependencies ([#375](https://github.com/verdaccio/monorepo/issues/375)) ([1e7aeec](https://github.com/verdaccio/monorepo/commit/1e7aeec31b056979285e272793a95b8c75d57c77))
 
+## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+
 **Note:** Version bump only for package @verdaccio/commons-api
 
+# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
 
+**Note:** Version bump only for package @verdaccio/commons-api
 
+## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
 
+**Note:** Version bump only for package @verdaccio/commons-api
 
-## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
+## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
 
 **Note:** Version bump only for package @verdaccio/commons-api
 
+# [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
 
+**Note:** Version bump only for package @verdaccio/commons-api
 
+# [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
 
+**Note:** Version bump only for package @verdaccio/commons-api
 
-## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
+## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
 
 **Note:** Version bump only for package @verdaccio/commons-api
 
+## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
 
+**Note:** Version bump only for package @verdaccio/commons-api
 
-
-
 # [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
@@ -93,17 +167,8 @@
 
-
-
-
-
 # [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
 
-
 ### Features
 
-* add http-status-codes dep ([#212](https://github.com/verdaccio/monorepo/issues/212)) ([00b66af](https://github.com/verdaccio/monorepo/commit/00b66af))
+- add http-status-codes dep ([#212](https://github.com/verdaccio/monorepo/issues/212)) ([00b66af](https://github.com/verdaccio/monorepo/commit/00b66af))
 
-
-
-
-
 # [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
@@ -113,19 +178,10 @@
 
-
-
-
-
 # [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
 
-
 ### Bug Fixes
 
-* fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
-* fixed lint errors ([c80e915](https://github.com/verdaccio/monorepo/commit/c80e915))
-* quotes should be single ([ae9aa44](https://github.com/verdaccio/monorepo/commit/ae9aa44))
+- fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
+- fixed lint errors ([c80e915](https://github.com/verdaccio/monorepo/commit/c80e915))
+- quotes should be single ([ae9aa44](https://github.com/verdaccio/monorepo/commit/ae9aa44))
 
-
-
-
-
 ## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
@@ -135,6 +191,2 @@
 
-
-
-
-
 ## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
@@ -144,6 +196,2 @@
 
-
-
-
-
 # [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
@@ -153,6 +201,2 @@
 
-
-
-
-
 ## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
@@ -162,6 +206,2 @@
 
-
-
-
-
 ## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
@@ -171,6 +211,2 @@
 
-
-
-
-
 # [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
@@ -180,6 +216,2 @@
 
-
-
-
-
 # [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
@@ -189,6 +221,2 @@
 
-
-
-
-
 # [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
@@ -198,6 +226,2 @@
 
-
-
-
-
 # [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
@@ -207,17 +231,8 @@
 
-
-
-
-
 # [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
 
-
 ### Features
 
-* **commons-api:** add commons-api package ([13dfa76](https://github.com/verdaccio/monorepo/commit/13dfa76))
+- **commons-api:** add commons-api package ([13dfa76](https://github.com/verdaccio/monorepo/commit/13dfa76))
 
-
-
-
-
 # Changelog
@@ -229,23 +244,16 @@
 
-
 ### Build System
 
-* build before publish ([f3d952d](https://github.com/verdaccio/commons-api/commit/f3d952d))
+- build before publish ([f3d952d](https://github.com/verdaccio/commons-api/commit/f3d952d))
 
-
-
 ### [0.1.1](https://github.com/verdaccio/commons-api/compare/v0.1.0...v0.1.1) (2019-07-12)
 
-
 ### Bug Fixes
 
-* remove unecessary shallow copy ([af7bc7c](https://github.com/verdaccio/commons-api/commit/af7bc7c))
+- remove unecessary shallow copy ([af7bc7c](https://github.com/verdaccio/commons-api/commit/af7bc7c))
 
-
-
 ## 0.1.0 (2019-06-25)
 
-
 ### Features
 
-* add error handler modules ([936212b](https://github.com/verdaccio/commons-api/commit/936212b))
+- add error handler modules ([936212b](https://github.com/verdaccio/commons-api/commit/936212b))

package.json

 {
   "name": "@verdaccio/commons-api",
-  "version": "10.0.0",
+  "version": "11.0.0-6-next.4",
   "description": "Commons API utilities for Verdaccio",
   "keywords": [
-    "http",
-    "verdaccio",
-    "api"
+    "private",
+    "package",
+    "repository",
+    "registry",
+    "enterprise",
+    "modules",
+    "proxy",
+    "server",
+    "verdaccio"
   ],
@@ -14,8 +20,8 @@ "author": "Juan Picado <[e-mail]>",
   "repository": {
-    "type": "git",
-    "url": "https://github.com/verdaccio/monorepo",
-    "directory": "core/commons-api"
+    "type": "https",
+    "url": "https://github.com/verdaccio/verdaccio",
+    "directory": "packages/core/commons-api"
   },
   "bugs": {
-    "url": "https://github.com/verdaccio/monorepo/issues"
+    "url": "https://github.com/verdaccio/verdaccio/issues"
   },
@@ -25,27 +31,22 @@ "publishConfig": {
   },
-  "main": "lib/index.js",
+  "main": "build/index.js",
+  "types": "build/index.d.ts",
   "files": [
-    "lib"
+    "build"
   ],
   "engines": {
-    "node": ">=8"
+    "node": ">=10",
+    "npm": ">=6"
   },
   "dependencies": {
     "http-errors": "1.8.0",
-    "http-status-codes": "1.4.0"
+    "http-status-codes": "2.1.4"
   },
-  "devDependencies": {
-    "@verdaccio/babel-preset": "^10.0.0",
-    "@verdaccio/eslint-config": "^10.0.0"
-  },
   "scripts": {
-    "build": "npm run build:types && npm run build:js",
-    "build:js": "babel src/ --out-dir lib --extensions \".ts,.tsx\"",
-    "build:types": "tsc --emitDeclarationOnly",
-    "coverage:publish": "codecov --root=../../ -F core",
-    "lint": "eslint \"**/*.{js,ts}\"",
-    "lint:stage": "lint-staged",
-    "test": "jest",
-    "type-check": "tsc --noEmit",
-    "type-check:watch": "npm run type-check -- --watch"
+    "clean": "rimraf ./build",
+    "test": "cross-env NODE_ENV=test BABEL_ENV=test jest",
+    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+    "watch": "pnpm build:js -- --watch",
+    "build": "pnpm run build:js && pnpm run build:types"
   },
@@ -55,4 +56,3 @@ "funding": {
     "url": "https://opencollective.com/verdaccio"
-  },
-  "gitHead": "e33b0509f6dcb10c9b893fdcd3846ca69eca0bd9"
+  }
 }

README.md

@@ -14,4 +14,3 @@ # @verdaccio/commons-api
 
-
 [![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

49547

increased by175.37%

Dev dependency count

0

decreased by-100%

Number of package files

10

increased by66.67%

Lines of code

447

increased by92.67%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of lines in readme file

16

decreased by-5.88%

Number of medium supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedhttp-status-codes@2.1.4(transitive)

• - Removedhttp-status-codes@1.4.0(transitive)

• Updatedhttp-status-codes@2.1.4