@verdaccio/file-locking - npm Package Compare versions

Comparing version 10.0.0 to 11.0.0-alpha.3

CHANGELOG.md

 # Change Log
 
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+## 10.0.0-alpha.3
 
-# [10.0.0](https://github.com/verdaccio/monorepo/compare/v9.7.5...v10.0.0) (2021-03-29)
+### Patch Changes
 
-**Note:** Version bump only for package @verdaccio/file-locking
+- fecbb9be: chore: add release step to private regisry on merge changeset pr
 
+## 10.0.0-alpha.2
 
+### Minor Changes
 
+- 54c58d1e: feat: add server rate limit protection to all request
 
+  To modify custom values, use the server settings property.
 
-## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
+  ```markdown
+  server:
 
-**Note:** Version bump only for package @verdaccio/file-locking
+  ## https://www.npmjs.com/package/express-rate-limit#configuration-options
 
+  rateLimit:
+  windowMs: 1000
+  max: 10000
+  ```
 
+  The values are intended to be high, if you want to improve security of your server consider
+  using different values.
 
+## 10.0.0-alpha.1
 
+### Major Changes
 
-## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
+- d87fa026: feat!: experiments config renamed to flags
 
-**Note:** Version bump only for package @verdaccio/file-locking
+  - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
 
+  ```js
+  flags: token: false;
+  search: false;
+  ```
 
+  - The `self_path` property from the config file is being removed in favor of `config_file` full path.
+  - Refactor `config` module, better types and utilities
 
+- da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
 
+  - Introduce environment variables for legacy tokens
 
-# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
+  ### Code Improvements
 
-**Note:** Version bump only for package @verdaccio/file-locking
+  - Add debug library for improve developer experience
 
+  ### Breaking change
 
+  - The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+  - The secret key must have 32 characters long.
 
+  ### New environment variables
 
+  - `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+  - `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
 
-## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+### Minor Changes
 
-**Note:** Version bump only for package @verdaccio/file-locking
+- 26b494cb: feat: add typescript project references settings
 
+  Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
 
+  It allows to navigate (IDE) trough the packages without need compile the packages.
 
+  Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).
 
+### Patch Changes
 
-# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
+- b57b4338: Enable prerelease mode with **changesets**
+- 31af0164: ESLint Warnings Fixed
 
-**Note:** Version bump only for package @verdaccio/file-locking
+  Related to issue #1461
 
+  - max-len: most of the sensible max-len errors are fixed
+  - no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
+  - @typescript-eslint/no-unused-vars: same as above
 
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
 
+**Note:** Version bump only for package @verdaccio/file-locking
 
-# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
+## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
 
 **Note:** Version bump only for package @verdaccio/file-locking
 
+# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
 
+**Note:** Version bump only for package @verdaccio/file-locking
 
+## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
 
+**Note:** Version bump only for package @verdaccio/file-locking
 
-## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
+# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
 
 **Note:** Version bump only for package @verdaccio/file-locking
 
+# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
 
+**Note:** Version bump only for package @verdaccio/file-locking
 
+## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
 
+**Note:** Version bump only for package @verdaccio/file-locking
 
@@ -74,6 +120,2 @@ ## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
 
-
-
-
-
 # [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
@@ -83,17 +125,8 @@
 
-
-
-
-
 # [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
 
-
 ### Features
 
-* **eslint-config:** enable eslint curly ([#308](https://github.com/verdaccio/monorepo/issues/308)) ([91acb12](https://github.com/verdaccio/monorepo/commit/91acb121847018e737c21b367fcaab8baa918347))
+- **eslint-config:** enable eslint curly ([#308](https://github.com/verdaccio/monorepo/issues/308)) ([91acb12](https://github.com/verdaccio/monorepo/commit/91acb121847018e737c21b367fcaab8baa918347))
 
-
-
-
-
 ## [8.5.2](https://github.com/verdaccio/monorepo/compare/v8.5.1...v8.5.2) (2019-12-25)
@@ -103,6 +136,2 @@
 
-
-
-
-
 ## [8.5.1](https://github.com/verdaccio/monorepo/compare/v8.5.0...v8.5.1) (2019-12-24)
@@ -112,6 +141,2 @@
 
-
-
-
-
 # [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
@@ -121,6 +146,2 @@
 
-
-
-
-
 ## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
@@ -130,6 +151,2 @@
 
-
-
-
-
 ## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
@@ -139,6 +156,2 @@
 
-
-
-
-
 # [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
@@ -148,6 +161,2 @@
 
-
-
-
-
 # [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
@@ -157,6 +166,2 @@
 
-
-
-
-
 # [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
@@ -166,19 +171,10 @@
 
-
-
-
-
 # [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
 
-
 ### Bug Fixes
 
-* fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
-* fixed lint errors ([c80e915](https://github.com/verdaccio/monorepo/commit/c80e915))
-* quotes should be single ([ae9aa44](https://github.com/verdaccio/monorepo/commit/ae9aa44))
+- fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
+- fixed lint errors ([c80e915](https://github.com/verdaccio/monorepo/commit/c80e915))
+- quotes should be single ([ae9aa44](https://github.com/verdaccio/monorepo/commit/ae9aa44))
 
-
-
-
-
 ## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
@@ -188,6 +184,2 @@
 
-
-
-
-
 ## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
@@ -197,6 +189,2 @@
 
-
-
-
-
 # [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
@@ -206,6 +194,2 @@
 
-
-
-
-
 ## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
@@ -215,6 +199,2 @@
 
-
-
-
-
 ## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
@@ -224,6 +204,2 @@
 
-
-
-
-
 # [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
@@ -233,6 +209,2 @@
 
-
-
-
-
 # [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
@@ -242,6 +214,2 @@
 
-
-
-
-
 # [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
@@ -251,6 +219,2 @@
 
-
-
-
-
 # [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
@@ -260,23 +224,13 @@
 
-
-
-
-
 # [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
 
-
 ### Bug Fixes
 
-* eslint and typescript errors ([8b3f153](https://github.com/verdaccio/monorepo/commit/8b3f153))
-* lint issues ([d195fff](https://github.com/verdaccio/monorepo/commit/d195fff))
+- eslint and typescript errors ([8b3f153](https://github.com/verdaccio/monorepo/commit/8b3f153))
+- lint issues ([d195fff](https://github.com/verdaccio/monorepo/commit/d195fff))
 
-
 ### Features
 
-* remote lodash as dependency ([affb65b](https://github.com/verdaccio/monorepo/commit/affb65b))
+- remote lodash as dependency ([affb65b](https://github.com/verdaccio/monorepo/commit/affb65b))
 
-
-
-
-
 # Changelog
@@ -288,31 +242,25 @@
 
-
 ### Build System
 
-* **deps:** update dependencies ([45b12de](https://github.com/verdaccio/file-locking/commit/45b12de))
-* **deps:** update husky dependency ([bdb7bad](https://github.com/verdaccio/file-locking/commit/bdb7bad))
+- **deps:** update dependencies ([45b12de](https://github.com/verdaccio/file-locking/commit/45b12de))
+- **deps:** update husky dependency ([bdb7bad](https://github.com/verdaccio/file-locking/commit/bdb7bad))
 
+<a name="1.0.3"></a>
 
-
-<a name="1.0.3"></a>
 ## [1.0.3](https://github.com/verdaccio/file-locking/compare/v1.0.2...v1.0.3) (2019-06-22)
 
-
 ### Bug Fixes
 
-* update build script and remove source map ([ec3db50](https://github.com/verdaccio/file-locking/commit/ec3db50))
+- update build script and remove source map ([ec3db50](https://github.com/verdaccio/file-locking/commit/ec3db50))
 
+<a name="1.0.2"></a>
 
-
-<a name="1.0.2"></a>
 ## [1.0.2](https://github.com/verdaccio/file-locking/compare/v1.0.1...v1.0.2) (2019-06-15)
 
+<a name="1.0.1"></a>
 
-
-<a name="1.0.1"></a>
 ## [1.0.1](https://github.com/verdaccio/file-locking/compare/v1.0.0...v1.0.1) (2019-06-15)
 
-
 ### Bug Fixes
 
-* eslint and typescript errors ([3538e7c](https://github.com/verdaccio/file-locking/commit/3538e7c))
+- eslint and typescript errors ([3538e7c](https://github.com/verdaccio/file-locking/commit/3538e7c))

package.json

 {
-  "name": "@verdaccio/file-locking",
-  "version": "10.0.0",
-  "description": "library that handle file locking",
-  "keywords": [
-    "verdaccio",
-    "lock",
-    "fs"
-  ],
-  "author": "Juan Picado <[e-mail]>",
-  "license": "MIT",
-  "homepage": "https://verdaccio.org",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/verdaccio/monorepo",
-    "directory": "core/file-locking"
-  },
-  "bugs": {
-    "url": "https://github.com/verdaccio/monorepo/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "files": [
-    "lib"
-  ],
-  "engines": {
-    "node": ">=8"
-  },
-  "dependencies": {
-    "lockfile": "1.0.4"
-  },
-  "devDependencies": {
-    "@verdaccio/babel-preset": "^10.0.0",
-    "@verdaccio/eslint-config": "^10.0.0",
-    "@verdaccio/types": "^10.0.0"
-  },
-  "scripts": {
-    "build": "npm run build:types && npm run build:js",
-    "build:js": "babel src/ --out-dir lib/  --ignore **/__tests__ --extensions \".ts,.tsx\"",
-    "build:types": "tsc --emitDeclarationOnly",
-    "coverage:publish": "codecov --root=../../ -F core",
-    "lint": "eslint \"**/*.{js,ts}\"",
-    "lint:stage": "lint-staged",
-    "test": "jest",
-    "type-check": "tsc --noEmit",
-    "type-check:watch": "npm run type-check -- --watch"
-  },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
-  },
-  "gitHead": "e33b0509f6dcb10c9b893fdcd3846ca69eca0bd9"
+	"name": "@verdaccio/file-locking",
+	"version": "11.0.0-alpha.3",
+	"description": "library that handle file locking",
+	"keywords": [
+		"private",
+		"package",
+		"repository",
+		"registry",
+		"enterprise",
+		"modules",
+		"proxy",
+		"server",
+		"verdaccio"
+	],
+	"author": "Juan Picado <[e-mail]>",
+	"license": "MIT",
+	"homepage": "https://verdaccio.org",
+	"engines": {
+		"node": ">=10",
+		"npm": ">=6"
+	},
+	"repository": {
+		"type": "https",
+		"url": "https://github.com/verdaccio/verdaccio",
+		"directory": "packages/core/file-locking"
+	},
+	"bugs": {
+		"url": "https://github.com/verdaccio/verdaccio/issues"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"main": "build/index.js",
+	"types": "build/index.d.ts",
+	"files": [
+		"build"
+	],
+	"dependencies": {
+		"lockfile": "1.0.4"
+	},
+	"devDependencies": {
+		"@verdaccio/types": "11.0.0-6-next.7"
+	},
+	"funding": {
+		"type": "opencollective",
+		"url": "https://opencollective.com/verdaccio"
+	},
+	"scripts": {
+		"clean": "rimraf ./build",
+		"test": "cross-env NODE_ENV=test BABEL_ENV=test jest",
+		"build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+		"build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+		"watch": "pnpm build:js -- --watch",
+		"build": "pnpm run build:js && pnpm run build:types"
+	}
 }

README.md

@@ -9,3 +9,3 @@ ## Deprecated repository
 
-This an utility to lock and unlock files 
+This an utility to lock and unlock files
 
@@ -21,4 +21,3 @@ [![verdaccio (latest)](https://img.shields.io/npm/v/@verdaccio/file-locking/latest.svg)](https://www.npmjs.com/package/verdaccio)
 
-
 [![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

30003

increased by70.01%

Dev dependency count

1

decreased by-66.67%

Number of package files

19

increased by35.71%

Lines of code

233

increased by4.02%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of lines in readme file

22

decreased by-4.35%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes