@verdaccio/streams - npm Package Compare versions

Comparing version 10.0.0 to 11.0.0-alpha.3

CHANGELOG.md

 # Change Log
 
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+## 10.0.0-alpha.3
 
-# [10.0.0](https://github.com/verdaccio/monorepo/compare/v9.7.5...v10.0.0) (2021-03-29)
+### Patch Changes
 
-**Note:** Version bump only for package @verdaccio/streams
+- fecbb9be: chore: add release step to private regisry on merge changeset pr
 
+## 10.0.0-alpha.2
 
+### Minor Changes
 
+- 54c58d1e: feat: add server rate limit protection to all request
 
+  To modify custom values, use the server settings property.
 
-## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
+  ```markdown
+  server:
 
-**Note:** Version bump only for package @verdaccio/streams
+  ## https://www.npmjs.com/package/express-rate-limit#configuration-options
 
+  rateLimit:
+  windowMs: 1000
+  max: 10000
+  ```
 
+  The values are intended to be high, if you want to improve security of your server consider
+  using different values.
 
+## 10.0.0-alpha.1
 
+### Major Changes
 
-## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
+- d87fa026: feat!: experiments config renamed to flags
 
-**Note:** Version bump only for package @verdaccio/streams
+  - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
 
+  ```js
+  flags: token: false;
+  search: false;
+  ```
 
+  - The `self_path` property from the config file is being removed in favor of `config_file` full path.
+  - Refactor `config` module, better types and utilities
 
+- da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
 
+  - Introduce environment variables for legacy tokens
 
-# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
+  ### Code Improvements
 
-**Note:** Version bump only for package @verdaccio/streams
+  - Add debug library for improve developer experience
 
+  ### Breaking change
 
+  - The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+  - The secret key must have 32 characters long.
 
+  ### New environment variables
 
+  - `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+  - `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
 
-## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
+### Minor Changes
 
-**Note:** Version bump only for package @verdaccio/streams
+- 26b494cb: feat: add typescript project references settings
 
+  Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
 
+  It allows to navigate (IDE) trough the packages without need compile the packages.
 
+  Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).
 
+### Patch Changes
 
-# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
+- b57b4338: Enable prerelease mode with **changesets**
 
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+
+## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
+
 **Note:** Version bump only for package @verdaccio/streams
 
+## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
 
+**Note:** Version bump only for package @verdaccio/streams
 
+# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
 
+**Note:** Version bump only for package @verdaccio/streams
 
-# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
+## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
 
 **Note:** Version bump only for package @verdaccio/streams
 
+# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
 
+**Note:** Version bump only for package @verdaccio/streams
 
+# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
 
+**Note:** Version bump only for package @verdaccio/streams
 
@@ -66,6 +109,2 @@ ## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
 
-
-
-
-
 ## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
@@ -75,6 +114,2 @@
 
-
-
-
-
 # [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
@@ -84,6 +119,2 @@
 
-
-
-
-
 # [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
@@ -93,6 +124,2 @@
 
-
-
-
-
 ## [8.5.2](https://github.com/verdaccio/monorepo/compare/v8.5.1...v8.5.2) (2019-12-25)
@@ -102,6 +129,2 @@
 
-
-
-
-
 ## [8.5.1](https://github.com/verdaccio/monorepo/compare/v8.5.0...v8.5.1) (2019-12-24)
@@ -111,6 +134,2 @@
 
-
-
-
-
 # [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
@@ -120,6 +139,2 @@
 
-
-
-
-
 ## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
@@ -129,6 +144,2 @@
 
-
-
-
-
 ## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
@@ -138,6 +149,2 @@
 
-
-
-
-
 # [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
@@ -147,6 +154,2 @@
 
-
-
-
-
 # [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
@@ -156,6 +159,2 @@
 
-
-
-
-
 # [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
@@ -165,6 +164,2 @@
 
-
-
-
-
 # [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
@@ -174,6 +169,2 @@
 
-
-
-
-
 ## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
@@ -183,6 +174,2 @@
 
-
-
-
-
 ## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
@@ -192,6 +179,2 @@
 
-
-
-
-
 # [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
@@ -201,6 +184,2 @@
 
-
-
-
-
 ## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
@@ -210,6 +189,2 @@
 
-
-
-
-
 ## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
@@ -219,6 +194,2 @@
 
-
-
-
-
 # [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
@@ -228,6 +199,2 @@
 
-
-
-
-
 # [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
@@ -237,6 +204,2 @@
 
-
-
-
-
 # [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
@@ -246,6 +209,2 @@
 
-
-
-
-
 # [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
@@ -255,26 +214,16 @@
 
-
-
-
-
 # [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
 
-
 ### Bug Fixes
 
-* add es6 imports ([932a22d](https://github.com/verdaccio/monorepo/commit/932a22d))
-* lint warnings ([444a99e](https://github.com/verdaccio/monorepo/commit/444a99e))
+- add es6 imports ([932a22d](https://github.com/verdaccio/monorepo/commit/932a22d))
+- lint warnings ([444a99e](https://github.com/verdaccio/monorepo/commit/444a99e))
 
-
 ### Features
 
-* drop node v6 support ([bb319c4](https://github.com/verdaccio/monorepo/commit/bb319c4))
-* **build:** use typescript, jest 24 and babel 7 as stack BREAKING CHANGE: typescript build system requires a major release to avoid issues with old installations ([4743a9a](https://github.com/verdaccio/monorepo/commit/4743a9a))
-* add stream library ([434628f](https://github.com/verdaccio/monorepo/commit/434628f))
-* migration to typescript ([748ca92](https://github.com/verdaccio/monorepo/commit/748ca92))
+- drop node v6 support ([bb319c4](https://github.com/verdaccio/monorepo/commit/bb319c4))
+- **build:** use typescript, jest 24 and babel 7 as stack BREAKING CHANGE: typescript build system requires a major release to avoid issues with old installations ([4743a9a](https://github.com/verdaccio/monorepo/commit/4743a9a))
+- add stream library ([434628f](https://github.com/verdaccio/monorepo/commit/434628f))
+- migration to typescript ([748ca92](https://github.com/verdaccio/monorepo/commit/748ca92))
 
-
-
-
-
 # Change Log
@@ -286,21 +235,17 @@
 
-
 ### Features
 
-* drop node v6 support ([5771eed](https://github.com/verdaccio/streams/commit/5771eed))
+- drop node v6 support ([5771eed](https://github.com/verdaccio/streams/commit/5771eed))
 
+<a name="2.0.0-beta.0"></a>
 
-
-<a name="2.0.0-beta.0"></a>
 # [2.0.0-beta.0](https://github.com/verdaccio/streams/compare/v1.0.0...v2.0.0-beta.0) (2019-01-27)
 
-
 ### Features
 
-* migration to typescript ([4e1e959](https://github.com/verdaccio/streams/commit/4e1e959))
-* **build:** use typescript, jest 24 and babel 7 as stack ([c93a980](https://github.com/verdaccio/streams/commit/c93a980))
+- migration to typescript ([4e1e959](https://github.com/verdaccio/streams/commit/4e1e959))
+- **build:** use typescript, jest 24 and babel 7 as stack ([c93a980](https://github.com/verdaccio/streams/commit/c93a980))
 
-
 ### BREAKING CHANGES
 
-* **build:** typescript build system requires a major release to avoid issues with old installations
+- **build:** typescript build system requires a major release to avoid issues with old installations

package.json

 {
-  "name": "@verdaccio/streams",
-  "version": "10.0.0",
-  "description": "Stream extension for Verdaccio",
-  "keywords": [
-    "verdaccio",
-    "streams"
-  ],
-  "author": "Juan Picado <[e-mail]>",
-  "license": "MIT",
-  "homepage": "https://verdaccio.org",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/verdaccio/monorepo",
-    "directory": "core/streams"
-  },
-  "bugs": {
-    "url": "https://github.com/verdaccio/monorepo/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "files": [
-    "lib"
-  ],
-  "engines": {
-    "node": ">=8",
-    "npm": ">=5"
-  },
-  "devDependencies": {
-    "@verdaccio/babel-preset": "^10.0.0",
-    "@verdaccio/eslint-config": "^10.0.0",
-    "@verdaccio/types": "^10.0.0"
-  },
-  "scripts": {
-    "build": "npm run build:types && npm run build:js",
-    "build:js": "babel src --out-dir lib --extensions \".ts,.tsx\" --source-maps inline",
-    "build:types": "tsc --emitDeclarationOnly",
-    "coverage:publish": "codecov --root=../../ -F core",
-    "lint": "eslint \"**/*.{js,ts}\"",
-    "lint:stage": "lint-staged",
-    "test": "jest",
-    "type-check": "tsc --noEmit",
-    "type-check:watch": "npm run type-check -- --watch"
-  },
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/verdaccio"
-  },
-  "gitHead": "e33b0509f6dcb10c9b893fdcd3846ca69eca0bd9"
+	"name": "@verdaccio/streams",
+	"version": "11.0.0-alpha.3",
+	"description": "Stream extension for Verdaccio",
+	"keywords": [
+		"private",
+		"package",
+		"repository",
+		"registry",
+		"enterprise",
+		"modules",
+		"proxy",
+		"server",
+		"verdaccio"
+	],
+	"main": "./build/index.js",
+	"types": "./build/index.d.ts",
+	"author": "Juan Picado <[e-mail]>",
+	"license": "MIT",
+	"homepage": "https://verdaccio.org",
+	"engines": {
+		"node": ">=10",
+		"npm": ">=6"
+	},
+	"repository": {
+		"type": "https",
+		"url": "https://github.com/verdaccio/verdaccio",
+		"directory": "packages/core/streams"
+	},
+	"bugs": {
+		"url": "https://github.com/verdaccio/verdaccio/issues"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"devDependencies": {
+		"@verdaccio/types": "11.0.0-6-next.7"
+	},
+	"funding": {
+		"type": "opencollective",
+		"url": "https://opencollective.com/verdaccio"
+	},
+	"scripts": {
+		"clean": "rimraf ./build",
+		"test": "cross-env NODE_ENV=test BABEL_ENV=test jest",
+		"type-check": "tsc --noEmit -p tsconfig.build.json",
+		"build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+		"build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+		"watch": "pnpm build:js -- --watch",
+		"build": "pnpm run build:js && pnpm run build:types"
+	}
 }

README.md

@@ -11,3 +11,2 @@ # Streams
 
-
 This project provides an extension of `PassThrough` stream.
@@ -14,0 +13,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21384

increased by25.14%

Dev dependency count

1

decreased by-66.67%

Number of package files

15

increased by150%

Lines of code

223

increased by118.63%

Worsened metrics

Number of low quality alerts

1

increased byInfinity%

Number of lines in readme file

20

decreased by-4.76%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes