.eslintignore

@@ -14,4 +14,5 @@ Dockerfile
 *.scss
 *.png
 *.jpg
+*.sh
 test/unit/partials/

.github/lock.yml

@@ -1,7 +1,7 @@
 # Configuration for lock-threads - https://github.com/dessant/lock-threads
 
 # Number of days of inactivity before a closed issue or pull request is locked
-daysUntilLock: 200
+daysUntilLock: 90
 
 # Issues and pull requests with these labels will not be locked. Set to `[]` to disable
 exemptLabels: []
@@ -11,9 +11,15 @@ lockLabel: false
 
 # Comment to post before locking. Set to `false` to disable
 lockComment: >
-  This thread has been automatically locked since there has not been
-  any recent activity after it was closed. Please open a new issue for
-  related bugs.
+  🤖This thread has been automatically locked 🔒 since there has not been
+  any recent activity after it was closed. 
+  
+  We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data 
+  and to provide you better feedback 🤝and better visibility 👀. 
+  
+  If you consider, can attach this ticket 📨to the new one as a reference for better context.
+
+  Thanks for being a part of the Verdaccio community! 💘
 
 # Limit to only `issues` or `pulls`
 # only: issues
@@ -25,4 +31,4 @@ issues:
  lockLabel: outdated
 
 pulls:
- daysUntilLock: 90
+ daysUntilLock: 10

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 30
+daysUntilStale: 15
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 5
+daysUntilClose: 10
 # Issues with these labels will never be considered stale
 exemptLabels:
   - dev: high priority
@@ -13,8 +13,14 @@ exemptLabels:
 staleLabel: issue: wontfix
 # Comment to post when marking an issue as stale. Set to `false` to disable
 markComment: >
-  This issue has been automatically marked as stale because it has not had
-  recent activity. It will be closed if no further activity occurs. Thank you
-  for your contributions.
+ Hi pal 👋🏼!
+
+ This issue has gone quiet 😶.
+
+  We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
+  If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
+  As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
+
+  Thanks for being a part of the Verdaccio community! 💘
 # Comment to post when closing a stale issue. Set to `false` to disable
 closeComment: false

.gitignore

@@ -6,6 +6,7 @@ build/
 ### Test
 
 test/unit/partials/store/test-*-storage/*
+test/unit/partials/store/*-storage/*
 test/unit/partials/store/storage_default_storage/*
 .verdaccio-db.json
 .sinopia-db.json

CHANGELOG.md

@@ -1,7 +1,32 @@
-# Change Log
+# Changelog
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [4.1.0](https://github.com/verdaccio/verdaccio/compare/v4.0.4...v4.1.0) (2019-07-08)
+
+
+### Features
+
+* parse YAML/JSON/JS config file ([#1258](https://github.com/verdaccio/verdaccio/issues/1258)) ([95d134b](https://github.com/verdaccio/verdaccio/commit/95d134b))
+* plugin support to filter packages ([b9ffac5](https://github.com/verdaccio/verdaccio/commit/b9ffac5)), closes [#818](https://github.com/verdaccio/verdaccio/issues/818)
+* **chore:** Included provision to show up local environment information ([#1365](https://github.com/verdaccio/verdaccio/issues/1365)) ([eb6bf51](https://github.com/verdaccio/verdaccio/commit/eb6bf51)), closes [#1364](https://github.com/verdaccio/verdaccio/issues/1364)
+
+
+### Tests
+
+*  increase usage of constants ([2f3ec2c](https://github.com/verdaccio/verdaccio/commit/2f3ec2c))
+* fix broken test for validate parameters ([4bf6b3b](https://github.com/verdaccio/verdaccio/commit/4bf6b3b))
+* relocate api spec test ([8786a37](https://github.com/verdaccio/verdaccio/commit/8786a37))
+* relocate helpers ([d052bce](https://github.com/verdaccio/verdaccio/commit/d052bce))
+* relocate notification test ([596c727](https://github.com/verdaccio/verdaccio/commit/596c727))
+* relocate plugin storage ([e7400ce](https://github.com/verdaccio/verdaccio/commit/e7400ce))
+* relocate spec test ([b4c42c1](https://github.com/verdaccio/verdaccio/commit/b4c42c1))
+* relocate test ([3929633](https://github.com/verdaccio/verdaccio/commit/3929633))
+* relocate unit test ([ca2e23c](https://github.com/verdaccio/verdaccio/commit/ca2e23c))
+* relocate unit test cli, proxy, utils ([b1eb7c6](https://github.com/verdaccio/verdaccio/commit/b1eb7c6))
+
+
+
 ## [4.0.4](https://github.com/verdaccio/verdaccio/compare/v4.0.3...v4.0.4) (2019-06-20)
 
 

README.md

@@ -170,7 +170,7 @@ If you want to report a security vulnerability, please follow the steps which we
 
 ## Core Team
 
-The core team is the responsable for drive this project, team is ordered by antiquity and areas of responsability.
+The core team is responsible for driving this project ahead, team is ordered by antiquity and areas of responsibility.
 
 |  [Juan Picado](https://github.com/juanpicado) |  [Ayush Sharma](https://github.com/ayusharma)  | [Sergio Hg](https://github.com/sergiohgz)  |  [Priscila Oliveria](https://github.com/priscilawebdev) | 
 |---|---|---|---|
@@ -185,6 +185,7 @@ You can find and chat with then over Discord, click [here](http://chat.verdaccio
 * [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#contributing-to-e2e-end-to-end-tests) *(+67k ⭐️)*
 * [Storybook](https://github.com/storybooks/storybook) *(+37k ⭐️)*
 * [Gatsby](https://github.com/gatsbyjs/gatsby) *(+34k ⭐️)* 
+* [Angular CLI](https://github.com/angular/angular-cli) *(+21k ⭐️)* 
 * [Uppy](https://github.com/transloadit/uppy) *(+19k ⭐️)*
 * [Aurelia Framework](https://github.com/aurelia) *(+11k ⭐️)*
 * [bit](https://github.com/teambit/bit) *(+6k ⭐️)*

package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio",
-  "version": "4.0.4",
+  "version": "4.1.0",
   "description": "A lightweight private npm proxy registry",
   "author": {
     "name": "Verdaccio Maintainers",
@@ -15,44 +15,45 @@
     "verdaccio": "./bin/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/local-storage": "2.1.0",
-    "@verdaccio/readme": "1.0.3",
+    "@verdaccio/local-storage": "2.2.1",
+    "@verdaccio/readme": "1.0.4",
     "@verdaccio/streams": "2.0.0",
     "@verdaccio/ui-theme": "0.1.11",
     "JSONStream": "1.3.5",
-    "async": "3.0.1",
+    "async": "3.1.0",
     "body-parser": "1.19.0",
     "bunyan": "1.8.12",
     "commander": "2.20.0",
     "compression": "1.7.4",
     "cookies": "0.7.3",
     "cors": "2.8.5",
     "dayjs": "1.8.14",
+    "envinfo": "7.3.1",
     "express": "4.16.4",
     "handlebars": "4.1.2",
-    "http-errors": "1.7.2",
+    "http-errors": "1.7.3",
     "js-yaml": "3.13.1",
     "jsonwebtoken": "8.5.1",
     "kleur": "3.0.3",
     "lodash": "4.17.11",
     "lunr-mutable-indexes": "2.3.2",
-    "marked": "0.6.2",
+    "marked": "0.7.0",
     "mime": "2.4.4",
     "minimatch": "3.0.4",
     "mkdirp": "0.5.1",
     "mv": "2.1.1",
     "pkginfo": "0.4.1",
     "request": "2.87.0",
-    "semver": "6.1.1",
+    "semver": "6.2.0",
     "verdaccio-audit": "1.2.0",
     "verdaccio-htpasswd": "2.0.0"
   },
   "devDependencies": {
-    "@commitlint/cli": "7.5.2",
-    "@commitlint/config-conventional": "7.5.0",
-    "@octokit/rest": "16.25.0",
-    "@verdaccio/babel-preset": "0.1.0",
-    "@verdaccio/types": "5.0.0-beta.4",
+    "@commitlint/cli": "8.0.0",
+    "@commitlint/config-conventional": "8.0.0",
+    "@octokit/rest": "16.28.2",
+    "@verdaccio/babel-preset": "0.2.1",
+    "@verdaccio/types": "5.0.2",
     "codecov": "3.3.0",
     "cross-env": "5.2.0",
     "eslint": "5.16.0",
@@ -70,14 +71,14 @@
     "get-stdin": "7.0.0",
     "husky": "2.1.0",
     "in-publish": "2.0.0",
-    "jest": "24.7.1",
-    "jest-environment-node": "24.7.1",
+    "jest": "24.8.0",
+    "jest-environment-node": "24.8.0",
     "lint-staged": "8.1.5",
     "nock": "10.0.6",
     "prettier": "1.17.0",
     "puppeteer": "1.8.0",
     "rimraf": "2.6.3",
-    "standard-version": "5.0.2",
+    "standard-version": "6.0.1",
     "supertest": "4.0.2",
     "verdaccio-auth-memory": "0.0.4",
     "verdaccio-memory": "2.0.0"

src/api/index.js

@@ -20,7 +20,7 @@ import web from './web';
 
 import type { $Application } from 'express';
 import type { $ResponseExtend, $RequestExtend, $NextFunctionVer, IStorageHandler, IAuth } from '../../types';
-import type { Config as IConfig, IPluginMiddleware } from '@verdaccio/types';
+import type { Config as IConfig, IPluginMiddleware, IPluginStorageFilter } from '@verdaccio/types';
 import { setup, logger } from '../lib/logger';
 import { log, final, errorReportingMiddleware } from './middleware';
 
@@ -107,8 +107,14 @@ const defineAPI = function(config: IConfig, storage: IStorageHandler) {
 export default (async function(configHash: any) {
   setup(configHash.logs);
   const config: IConfig = new AppConfig(_.cloneDeep(configHash));
+  // register middleware plugins
+  const plugin_params = {
+    config: config,
+    logger: logger,
+  };
+  const filters = loadPlugin(config, config.filters || {}, plugin_params, (plugin: IPluginStorageFilter) => plugin.filter_metadata);
   const storage: IStorageHandler = new Storage(config);
   // waits until init calls have been initialized
-  await storage.init(config);
+  await storage.init(config, filters);
   return defineAPI(config, storage);
 });

src/lib/cli.js

@@ -31,46 +31,67 @@ process.title = 'verdaccio';
 const logger = require('./logger');
 logger.setup(); // default setup
 
+const envinfo = require('envinfo');
 const commander = require('commander');
 const pkgVersion = module.exports.version;
 const pkgName = module.exports.name;
 
 commander
+  .option('-i, --info', 'prints debugging information about the local environment')
   .option('-l, --listen <[host:]port>', 'host:port number to listen on (default: localhost:4873)')
   .option('-c, --config <config.yaml>', 'use this configuration file (default: ./config.yaml)')
   .version(pkgVersion)
   .parse(process.argv);
 
-if (commander.args.length == 1 && !commander.config) {
-  // handling "verdaccio [config]" case if "-c" is missing in command line
-  commander.config = commander.args.pop();
+function init() {
+  let verdaccioConfiguration;
+  let configPathLocation;
+  const cliListener = commander.listen;
+
+  try {
+    configPathLocation = findConfigFile(commander.config);
+    verdaccioConfiguration = parseConfigFile(configPathLocation);
+    process.title = verdaccioConfiguration.web && verdaccioConfiguration.web.title || 'verdaccio';
+
+    if (!verdaccioConfiguration.self_path) {
+      verdaccioConfiguration.self_path = path.resolve(configPathLocation);
+    }
+    if (!verdaccioConfiguration.https) {
+      verdaccioConfiguration.https = {enable: false};
+    }
+
+    logger.logger.warn({file: configPathLocation}, 'config file  - @{file}');
+
+    startVerdaccio(verdaccioConfiguration, cliListener, configPathLocation, pkgVersion, pkgName, listenDefaultCallback);
+  } catch (err) {
+    logger.logger.fatal({file: configPathLocation, err: err}, 'cannot open config file @{file}: @{!err.message}');
+    process.exit(1);
+  }
 }
 
-if (commander.args.length !== 0) {
+if (commander.info) {
+  // eslint-disable-next-line no-console
+	console.log('\nEnvironment Info:');
+  (async () => {
+    const data = await envinfo.run({
+        System: ['OS', 'CPU'],
+        Binaries: ['Node', 'Yarn', 'npm'],
+        Virtualization: ['Docker'],
+        Browsers: ['Chrome', 'Edge', 'Firefox', 'Safari'],
+        npmGlobalPackages: ['verdaccio'],
+      });
+    // eslint-disable-next-line no-console
+    console.log(data);
+    process.exit(1);
+  })();
+} else  if (commander.args.length == 1 && !commander.config) {
+  // handling "verdaccio [config]" case if "-c" is missing in command line
+  commander.config = commander.args.pop();
+  init();
+} else if (commander.args.length !== 0) {
   commander.help();
-}
-let verdaccioConfiguration;
-let configPathLocation;
-const cliListener = commander.listen;
-
-try {
-  configPathLocation = findConfigFile(commander.config);
-  verdaccioConfiguration = parseConfigFile(configPathLocation);
-  process.title = verdaccioConfiguration.web && verdaccioConfiguration.web.title || 'verdaccio';
-
-  if (!verdaccioConfiguration.self_path) {
-    verdaccioConfiguration.self_path = path.resolve(configPathLocation);
-  }
-  if (!verdaccioConfiguration.https) {
-    verdaccioConfiguration.https = {enable: false};
-  }
-
-  logger.logger.warn({file: configPathLocation}, 'config file  - @{file}');
-
-  startVerdaccio(verdaccioConfiguration, cliListener, configPathLocation, pkgVersion, pkgName, listenDefaultCallback);
-} catch (err) {
-  logger.logger.fatal({file: configPathLocation, err: err}, 'cannot open config file @{file}: @{!err.message}');
-  process.exit(1);
+} else {
+  init();
 }
 
 process.on('uncaughtException', function(err) {
@@ -79,4 +100,4 @@ process.on('uncaughtException', function(err) {
     },
   'uncaught exception, please report this\n@{err.stack}' );
   process.exit(255);
-});
+});

src/lib/constants.js

@@ -19,10 +19,15 @@ export const certPem = 'verdaccio-cert.pem';
 export const csrPem = 'verdaccio-csr.pem';
 
 export const HEADERS = {
+  ACCEPT: 'Accept',
+  ACCEPT_ENCODING: 'Accept-Encoding',
+  USER_AGENT: 'User-Agent',
   JSON: 'application/json',
   CONTENT_TYPE: 'Content-type',
+  CONTENT_LENGTH: 'content-length',
   TEXT_PLAIN: 'text/plain',
   TEXT_HTML: 'text/html',
+  AUTHORIZATION: 'authorization',
   FORWARDED_PROTO: 'X-Forwarded-Proto',
   FRAMES_OPTIONS: 'X-Frame-Options',
   CSP: 'Content-Security-Policy',