Socket
Socket
Sign inDemoInstall

verdaccio

Package Overview
Dependencies
33
Maintainers
6
Versions
338
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

verdaccio

A lightweight private npm proxy registry


Version published
Maintainers
6
Created

Package description

What is verdaccio?

Verdaccio is a lightweight private npm proxy registry that allows you to host your own npm registry and cache npm packages. It is useful for speeding up npm installs, working offline, and hosting private packages.

What are verdaccio's main functionalities?

Private Registry

This configuration sets up Verdaccio as a private npm registry with authentication and proxying to the official npm registry.

const config = {
  storage: './storage',
  auth: {
    htpasswd: {
      file: './htpasswd'
    }
  },
  uplinks: {
    npmjs: {
      url: 'https://registry.npmjs.org/'
    }
  },
  packages: {
    '@*/*': {
      access: '$all',
      publish: '$authenticated',
      proxy: 'npmjs'
    },
    '**': {
      access: '$all',
      publish: '$authenticated',
      proxy: 'npmjs'
    }
  }
};

module.exports = config;

Caching

This configuration allows Verdaccio to cache packages from the official npm registry, speeding up subsequent installs.

const config = {
  storage: './storage',
  uplinks: {
    npmjs: {
      url: 'https://registry.npmjs.org/'
    }
  },
  packages: {
    '**': {
      access: '$all',
      proxy: 'npmjs'
    }
  }
};

module.exports = config;

Offline Mode

This configuration sets up Verdaccio to work in offline mode, using only the locally cached packages.

const config = {
  storage: './storage',
  uplinks: {},
  packages: {
    '**': {
      access: '$all'
    }
  }
};

module.exports = config;

Other packages similar to verdaccio

Readme

Source

verdaccio logo

Version 4

⚠️⚠️ Verdaccio 4.x is deprecated and won't longer receive security support, please upgrade to 5.x or higher ⚠️⚠

Please read the migration guidelines.

Open Collective Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

sponsor sponsor sponsor sponsor sponsor sponsor sponsor sponsor sponsor sponsor

Open Collective Backers

Thank you to all our backers! 🙏 [Become a backer]

backers

Special Thanks

Thanks to the following companies to help us to achieve our goals providing free open source licenses.

jetbrain crowdin browserstack balsamiq

License

Verdaccio is MIT licensed

The Verdaccio documentation and logos (excluding /thanks, e.g., .md, .png, .sketch) files within the /assets folder) is Creative Commons licensed.

Keywords

FAQs

Last updated on 16 Apr 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc