@verdaccio/streams - npm Package Compare versions

Comparing version 10.0.0 to 11.0.0-6-next.4

CHANGELOG.md

 # Change Log
 
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+## 11.0.0-6-next.4
 
-# [10.0.0](https://github.com/verdaccio/monorepo/compare/v9.7.5...v10.0.0) (2021-03-29)
+### Major Changes
 
-**Note:** Version bump only for package @verdaccio/streams
+- 459b6fa7: refactor: search v1 endpoint and local-database
 
+  - refactor search `api v1` endpoint, improve performance
+  - remove usage of `async` dependency https://github.com/verdaccio/verdaccio/issues/1225
+  - refactor method storage class
+  - create new module `core` to reduce the ammount of modules with utilities
+  - use `undici` instead `node-fetch`
+  - use `fastify` instead `express` for functional test
 
+  ### Breaking changes
 
+  - plugin storage API changes
+  - remove old search endpoint (return 404)
+  - filter local private packages at plugin level
 
+  The storage api changes for methods `get`, `add`, `remove` as promise base. The `search` methods also changes and recieves a `query` object that contains all query params from the client.
 
-## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
+  ```ts
+  export interface IPluginStorage<T> extends IPlugin {
+    add(name: string): Promise<void>;
+    remove(name: string): Promise<void>;
+    get(): Promise<any>;
+    init(): Promise<void>;
+    getSecret(): Promise<string>;
+    setSecret(secret: string): Promise<any>;
+    getPackageStorage(packageInfo: string): IPackageStorage;
+    search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
+    saveToken(token: Token): Promise<any>;
+    deleteToken(user: string, tokenKey: string): Promise<any>;
+    readTokens(filter: TokenFilter): Promise<Token[]>;
+  }
+  ```
 
-**Note:** Version bump only for package @verdaccio/streams
+## 10.0.0-alpha.3
 
+### Patch Changes
 
+- fecbb9be: chore: add release step to private regisry on merge changeset pr
 
+## 10.0.0-alpha.2
 
+### Minor Changes
 
-## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
+- 54c58d1e: feat: add server rate limit protection to all request
 
-**Note:** Version bump only for package @verdaccio/streams
+  To modify custom values, use the server settings property.
 
+  ```markdown
+  server:
 
+  ## https://www.npmjs.com/package/express-rate-limit#configuration-options
 
+  rateLimit:
+  windowMs: 1000
+  max: 10000
+  ```
 
+  The values are intended to be high, if you want to improve security of your server consider
+  using different values.
 
-# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
+## 10.0.0-alpha.1
 
-**Note:** Version bump only for package @verdaccio/streams
+### Major Changes
 
+- d87fa026: feat!: experiments config renamed to flags
 
+  - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
 
+  ```js
+  flags: token: false;
+  search: false;
+  ```
 
+  - The `self_path` property from the config file is being removed in favor of `config_file` full path.
+  - Refactor `config` module, better types and utilities
 
-## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+- da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
 
-**Note:** Version bump only for package @verdaccio/streams
+  - Introduce environment variables for legacy tokens
 
+  ### Code Improvements
 
+  - Add debug library for improve developer experience
 
+  ### Breaking change
 
+  - The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+  - The secret key must have 32 characters long.
 
-# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
+  ### New environment variables
 
-**Note:** Version bump only for package @verdaccio/streams
+  - `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+  - `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
 
+### Minor Changes
 
+- 26b494cb: feat: add typescript project references settings
 
+  Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
 
+  It allows to navigate (IDE) trough the packages without need compile the packages.
 
-# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
+  Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).
 
-**Note:** Version bump only for package @verdaccio/streams
+### Patch Changes
 
+- b57b4338: Enable prerelease mode with **changesets**
 
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
 
+**Note:** Version bump only for package @verdaccio/streams
 
-## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
+## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
 
 **Note:** Version bump only for package @verdaccio/streams
 
+# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
 
+**Note:** Version bump only for package @verdaccio/streams
 
+## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
 
+**Note:** Version bump only for package @verdaccio/streams
 
-## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
+# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
 
 **Note:** Version bump only for package @verdaccio/streams
 
+# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
 
+**Note:** Version bump only for package @verdaccio/streams
 
+## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
 
+**Note:** Version bump only for package @verdaccio/streams
 
-# [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
+## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
 
 **Note:** Version bump only for package @verdaccio/streams
 
+# [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
 
+**Note:** Version bump only for package @verdaccio/streams
 
-
-
 # [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
@@ -90,6 +158,2 @@
 
-
-
-
-
 ## [8.5.2](https://github.com/verdaccio/monorepo/compare/v8.5.1...v8.5.2) (2019-12-25)
@@ -99,6 +163,2 @@
 
-
-
-
-
 ## [8.5.1](https://github.com/verdaccio/monorepo/compare/v8.5.0...v8.5.1) (2019-12-24)
@@ -108,6 +168,2 @@
 
-
-
-
-
 # [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
@@ -117,6 +173,2 @@
 
-
-
-
-
 ## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
@@ -126,6 +178,2 @@
 
-
-
-
-
 ## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
@@ -135,6 +183,2 @@
 
-
-
-
-
 # [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
@@ -144,6 +188,2 @@
 
-
-
-
-
 # [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
@@ -153,6 +193,2 @@
 
-
-
-
-
 # [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
@@ -162,6 +198,2 @@
 
-
-
-
-
 # [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
@@ -171,6 +203,2 @@
 
-
-
-
-
 ## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
@@ -180,6 +208,2 @@
 
-
-
-
-
 ## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
@@ -189,6 +213,2 @@
 
-
-
-
-
 # [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
@@ -198,6 +218,2 @@
 
-
-
-
-
 ## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
@@ -207,6 +223,2 @@
 
-
-
-
-
 ## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
@@ -216,6 +228,2 @@
 
-
-
-
-
 # [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
@@ -225,6 +233,2 @@
 
-
-
-
-
 # [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
@@ -234,6 +238,2 @@
 
-
-
-
-
 # [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
@@ -243,6 +243,2 @@
 
-
-
-
-
 # [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
@@ -252,26 +248,16 @@
 
-
-
-
-
 # [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
 
-
 ### Bug Fixes
 
-* add es6 imports ([932a22d](https://github.com/verdaccio/monorepo/commit/932a22d))
-* lint warnings ([444a99e](https://github.com/verdaccio/monorepo/commit/444a99e))
+- add es6 imports ([932a22d](https://github.com/verdaccio/monorepo/commit/932a22d))
+- lint warnings ([444a99e](https://github.com/verdaccio/monorepo/commit/444a99e))
 
-
 ### Features
 
-* drop node v6 support ([bb319c4](https://github.com/verdaccio/monorepo/commit/bb319c4))
-* **build:** use typescript, jest 24 and babel 7 as stack BREAKING CHANGE: typescript build system requires a major release to avoid issues with old installations ([4743a9a](https://github.com/verdaccio/monorepo/commit/4743a9a))
-* add stream library ([434628f](https://github.com/verdaccio/monorepo/commit/434628f))
-* migration to typescript ([748ca92](https://github.com/verdaccio/monorepo/commit/748ca92))
+- drop node v6 support ([bb319c4](https://github.com/verdaccio/monorepo/commit/bb319c4))
+- **build:** use typescript, jest 24 and babel 7 as stack BREAKING CHANGE: typescript build system requires a major release to avoid issues with old installations ([4743a9a](https://github.com/verdaccio/monorepo/commit/4743a9a))
+- add stream library ([434628f](https://github.com/verdaccio/monorepo/commit/434628f))
+- migration to typescript ([748ca92](https://github.com/verdaccio/monorepo/commit/748ca92))
 
-
-
-
-
 # Change Log
@@ -283,21 +269,17 @@
 
-
 ### Features
 
-* drop node v6 support ([5771eed](https://github.com/verdaccio/streams/commit/5771eed))
+- drop node v6 support ([5771eed](https://github.com/verdaccio/streams/commit/5771eed))
 
+<a name="2.0.0-beta.0"></a>
 
-
-<a name="2.0.0-beta.0"></a>
 # [2.0.0-beta.0](https://github.com/verdaccio/streams/compare/v1.0.0...v2.0.0-beta.0) (2019-01-27)
 
-
 ### Features
 
-* migration to typescript ([4e1e959](https://github.com/verdaccio/streams/commit/4e1e959))
-* **build:** use typescript, jest 24 and babel 7 as stack ([c93a980](https://github.com/verdaccio/streams/commit/c93a980))
+- migration to typescript ([4e1e959](https://github.com/verdaccio/streams/commit/4e1e959))
+- **build:** use typescript, jest 24 and babel 7 as stack ([c93a980](https://github.com/verdaccio/streams/commit/c93a980))
 
-
 ### BREAKING CHANGES
 
-* **build:** typescript build system requires a major release to avoid issues with old installations
+- **build:** typescript build system requires a major release to avoid issues with old installations

package.json

 {
-  "name": "@verdaccio/streams",
-  "version": "10.0.0",
-  "description": "Stream extension for Verdaccio",
-  "keywords": [
-    "verdaccio",
-    "streams"
-  ],
-  "author": "Juan Picado <[e-mail]>",
-  "license": "MIT",
-  "homepage": "https://verdaccio.org",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/verdaccio/monorepo",
-    "directory": "core/streams"
-  },
-  "bugs": {
-    "url": "https://github.com/verdaccio/monorepo/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "files": [
-    "lib"
-  ],
-  "engines": {
-    "node": ">=8",
-    "npm": ">=5"
-  },
-  "devDependencies": {
-    "@verdaccio/babel-preset": "^10.0.0",
-    "@verdaccio/eslint-config": "^10.0.0",
-    "@verdaccio/types": "^10.0.0"
-  },
-  "scripts": {
-    "build": "npm run build:types && npm run build:js",
-    "build:js": "babel src --out-dir lib --extensions \".ts,.tsx\" --source-maps inline",
-    "build:types": "tsc --emitDeclarationOnly",
-    "coverage:publish": "codecov --root=../../ -F core",
-    "lint": "eslint \"**/*.{js,ts}\"",
-    "lint:stage": "lint-staged",
-    "test": "jest",
-    "type-check": "tsc --noEmit",
-    "type-check:watch": "npm run type-check -- --watch"
-  },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
-  },
-  "gitHead": "e33b0509f6dcb10c9b893fdcd3846ca69eca0bd9"
+	"name": "@verdaccio/streams",
+	"version": "11.0.0-6-next.4",
+	"description": "Stream extension for Verdaccio",
+	"keywords": [
+		"private",
+		"package",
+		"repository",
+		"registry",
+		"enterprise",
+		"modules",
+		"proxy",
+		"server",
+		"verdaccio"
+	],
+	"main": "./build/index.js",
+	"types": "./build/index.d.ts",
+	"author": "Juan Picado <[e-mail]>",
+	"license": "MIT",
+	"homepage": "https://verdaccio.org",
+	"engines": {
+		"node": ">=10",
+		"npm": ">=6"
+	},
+	"repository": {
+		"type": "https",
+		"url": "https://github.com/verdaccio/verdaccio",
+		"directory": "packages/core/streams"
+	},
+	"bugs": {
+		"url": "https://github.com/verdaccio/verdaccio/issues"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"devDependencies": {
+		"@verdaccio/types": "11.0.0-6-next.8"
+	},
+	"funding": {
+		"type": "opencollective",
+		"url": "https://opencollective.com/verdaccio"
+	},
+	"scripts": {
+		"clean": "rimraf ./build",
+		"test": "cross-env NODE_ENV=test BABEL_ENV=test jest",
+		"type-check": "tsc --noEmit -p tsconfig.build.json",
+		"build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+		"build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+		"watch": "pnpm build:js -- --watch",
+		"build": "pnpm run build:js && pnpm run build:types"
+	}
 }

README.md

@@ -11,3 +11,2 @@ # Streams
 
-
 This project provides an extension of `PassThrough` stream.
@@ -14,0 +13,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22994

increased by34.56%

Dev dependency count

1

decreased by-66.67%

Number of package files

15

increased by150%

Lines of code

224

increased by119.61%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of lines in readme file

20

decreased by-4.76%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes