Release 2.2.0

Merge pull request #663 from cnpm/list-package-by-username
feat: list packages by username
2015-09-29 01:28:32 +08:00 · 2015-09-28 14:05:26 +08:00 · 2015-09-28 13:58:02 +08:00 · 2015-09-08 11:01:29 +08:00 · 2015-09-08 10:58:53 +08:00 · 2015-09-08 10:51:34 +08:00
135 changed files with 3350 additions and 3256 deletions
--- a/.jshintignore
+++ b/.jshintignore
@@ -2,3 +2,6 @@ node_modules/
 coverage/
 .tmp/
 .git/
+tools/
+public/
+test/
--- a/.npmignore
+++ b/.npmignore
@@ -22,3 +22,4 @@ config/web_readme.md
 config/config.js
 *.sqlite
 .node-dev.json
+nohup.out
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,6 +1,12 @@
+sudo: false
 language: node_js
 node_js:
-  - '0.11.14'
-before_install: "npm install --build-from-source"
-script: "make test-travis-all"
-after_script: "npm install coveralls@2 && cat ./coverage/lcov.info | coveralls"
+  - '1'
+  - '2'
+  - '3'
+  - '4'
+addons:
+  - postgresql: '9.3'
+script: 'make test-travis-all'
+after_script:
+  - "npm i codecov.io && cat ./coverage/coverage.json | ./node_modules/codecov.io/bin/codecov.io.js"
--- a/3
+++ b/3
@@ -1,8 +1,7 @@
 # Ordered by date of first contribution.
-# Auto-generated by 'contributors' on Mon, 03 Mar 2014 13:01:28 GMT.
-# https://github.com/xingrz/node-contributors

 fengmk2 <fengmk2@gmail.com> (https://github.com/fengmk2)
 dead-horse <dead_horse@qq.com> (https://github.com/dead-horse)
 alsotang <alsotang@gmail.com> (https://github.com/alsotang)
 4simple <wondger@qq.com> (https://github.com/4simple)
+afc163 <afc163@gmail.com> (https://github.com/afc163)
--- a/History.md
+++ b/History.md
@@ -1,4 +1,151 @@

+2.2.0 / 2015-09-29
+==================
+
+ * feat: list packages by username
+ * test: use codecov
+ * feat(badge): support custom subject
+ * fix(sync): add recover logic
+ * feat(sync): add sync scripts
+
+2.1.5 / 2015-09-05
+==================
+
+ * fix: only sync update packages
+
+2.1.4 / 2015-09-05
+==================
+
+ * fix: support new array and old map format both
+ * fix: /-/all/since had been redirect to /-/all/static/today.json
+ * fix(list): let koa-etag to caculate the etag
+
+2.1.3 / 2015-08-18
+==================
+
+ * fix: sync public scope package download url is wrong
+ * fix: default registry change to taobao registry
+
+2.1.2 / 2015-08-09
+==================
+
+ * fix(syncer): sync worker pkg null bug
+ * feat(web): add downloads badge
+
+2.1.1 / 2015-07-27
+==================
+
+ * fix: fix private scope package detect
+ * fix: dont sync if upstream is npm registry
+ * fix(sync): support sync public scope package
+ * test: fix fails tests
+ * fix: ignore 503 server error
+ * fix: ignore sync 503 server error
+
+2.1.0 / 2015-07-08
+==================
+
+ * feat(web): search support jsonp
+ * fix function name
+
+2.0.0 / 2015-05-11
+==================
+
+ * fix: real download as stream
+ * add custom ad banner config
+ * add sponsors: ucloud.cn
+ * fix small typo
+ * feat(urllib): support http_proxy
+ * force using https links
+
+2.0.0-rc.15 / 2015-02-15
+==================
+
+ * fix(markdown): filter xss after markdown render
+ * feat(database): support PostgreSQL
+
+2.0.0-rc.14 / 2015-02-14
+==================
+
+ * feat: support always-auth
+ * fix mysql select args = [] bug
+ * fix #597 sequelize raw query.
+ * fix(markdown): hotfix markdown-it cpu problem
+ * feat: upgrade to co4
+ * use kcors fixes #594
+
+2.0.0-rc.13 / 2015-02-04
+==================
+
+ * docs: Deploy a private npm registry in 5 minutes
+ * refactor(config): move application data to ~/.cnpmjs.org/
+ * fix(sync): make get popular pakcage faster
+ * feat(sync): web page also redirect to npm www
+ * refactor(config): make syncModel to none by default
+ * test: fix admin can not publish non-scoped package test cases
+ * docs: add chinese mirror link
+ * fix: admin can not publish non scoped package on "none" sync model
+ * feat(sync): enable none syncModel proxy all public packages
+ * fix: ignore username start with " or '
+ * fix(bin): fix stop not work on iojs
+
+2.0.0-rc.12 / 2015-02-01
+==================
+
+ * feat(syncer): add hostname ua
+ * fix(web): remove pkg.contributors logic
+
+2.0.0-rc.11 / 2015-02-01
+==================
+
+ * fix xss tests
+ * fix(markdown): revert marky-markdown
+
+2.0.0-rc.10 / 2015-01-31
+==================
+
+ * feat(middleware): CORS headers for GET and HEAD requests
+ * fix(readme): fix index page markdown
+ * feat(markdown): use npm same markdown parser
+ * feat(download): support download redirect to nfs
+ * feat(syncer): request npm registry with gzip
+ * change(sync): remove dist syncer
+ * feat(registry): add dist tag api
+ * refactor(common): remove redis store
+
+2.0.0-rc.9 / 2015-01-22 
+==================
+
+  * hotfix reame render error, pin xss
+  * fix registry user auth api
+
+2.0.0-rc.8 / 2015-01-10
+==================
+
+ * fix(markdown): readme.md allow scripts
+ * fix(style) flexbox compatibility for both chrome and firefox (@afc163)
+ * feat(sync): default sync exist packages
+
+2.0.0-rc.7 / 2015-01-07
+==================
+
+ * install sync dont check `enablePrivate`
+ * fix(markdown): filter xss readme before markdown render
+
+2.0.0-rc.6 / 2015-01-05
+==================
+
+ * fix(markdown): use markdown-it
+ * add userService options on config
+ * add upload to nfs sync info log
+
+2.0.0-rc.5 / 2015-01-03
+==================
+
+ * fix(markdown): use marked instead of remarkable
+ * fix(package): pkg.readme is not a string, dont remarkable it
+ * feat(sync): sync user profile
+
 2.0.0-rc.4 / 2014-12-25
 ==================

@@ -18,7 +165,7 @@
 2.0.0-rc.2 / 2014-12-11
 ==================

- * add download API, closes #529
+ * add download API, closes [#529](https://github.com/cnpm/cnpmjs.org/issues/529)
 * fix missing home page title (@rockdai)
 * Fix typo in view/web/package.html (@LoicMahieu)

@@ -31,7 +178,7 @@
 2.0.0-beta5 / 2014-12-05
 ==================

- * hotfix package.html typo. Closes #521
+ * hotfix package.html typo. Closes [#521](https://github.com/cnpm/cnpmjs.org/issues/521)
 * Add editorconfig
 * fix(web/package): package name to long cause style problem fix
 * fix(css): use github-markdown-css for markdown body
@@ -43,7 +190,7 @@
 * fix(registry): add missing /-/short api
 * zoom sync link
 * new design for package page
- * image max width, fixed #505
+ * image max width, fixed [#505](https://github.com/cnpm/cnpmjs.org/issues/505)
 * feat(middleware): block Ruby user-agent

 2.0.0-beta3 / 2014-11-12
@@ -73,7 +220,7 @@
 2.0.0-beta0 / 2014-11-02
 ==================

- * ungrade koa-markdown to use remarkable, close #482
+ * ungrade koa-markdown to use remarkable, close [#482](https://github.com/cnpm/cnpmjs.org/issues/482)
 * fix(module_log): limit module sync log size to 1MB
 * refactor(config): remove adaptScope config key
 * chore(Makefile): $ make install-production
--- a/39
+++ b/39
@@ -2,12 +2,18 @@ TESTS = $(shell ls -S `find test -type f -name "*.test.js" -print`)
 REPORTER = spec
 TIMEOUT = 30000
 MOCHA_OPTS =
-REGISTRY = --registry=https://registry.npm.taobao.org
 DB = sqlite
+DISTURL = https://npm.taobao.org/mirrors/iojs
+BIN = iojs
+
+ifeq ($(findstring io.js, $(shell which node)),)
+	BIN = node
+	DISTURL = https://npm.taobao.org/mirrors/node
+endif

 install:
-	@npm install --build-from-source $(REGISTRY) \
-		--disturl=https://npm.taobao.org/dist
+	@npm install --build-from-source --registry=http://registry.npm.taobao.org \
+		--disturl=$(DISTURL)

 install-production production:
 	@NODE_ENV=production $(MAKE) install
@@ -16,12 +22,16 @@ jshint: install
 	@-node_modules/.bin/jshint ./

 init-database:
-	@node --harmony test/init_db.js
+	@$(BIN) --harmony test/init_db.js

 init-mysql:
 	@mysql -uroot -e 'DROP DATABASE IF EXISTS cnpmjs_test;'
 	@mysql -uroot -e 'CREATE DATABASE cnpmjs_test;'

+init-pg:
+	@psql -c 'DROP DATABASE IF EXISTS cnpmjs_test;'
+	@psql -c 'CREATE DATABASE cnpmjs_test;'
+
 test: install init-database
 	@NODE_ENV=test DB=${DB} node_modules/.bin/mocha \
 		--harmony \
@@ -40,10 +50,13 @@ test-sqlite:
 test-mysql: init-mysql
 	@$(MAKE) test DB=mysql

+test-pg: init-pg
+	@DB_PORT=5432 DB_USER=$(USER) $(MAKE) test DB=postgres
+
 test-all: test-sqlite test-mysql

 test-cov cov: install init-database
-	@NODE_ENV=test DB=${DB} node --harmony \
+	@NODE_ENV=test DB=${DB} $(BIN) --harmony \
 		node_modules/.bin/istanbul cover --preserve-comments \
 		node_modules/.bin/_mocha \
 		-- -u exports \
@@ -63,12 +76,11 @@ test-cov-mysql: init-mysql
 	@$(MAKE) test-cov DB=mysql

 test-travis: install init-database
-	@NODE_ENV=test DB=${DB} CNPM_SOURCE_NPM=https://registry.npmjs.org CNPM_SOURCE_NPM_ISCNPM=false \
-		node --harmony \
+	@NODE_ENV=test DB=${DB} CNPM_SOURCE_NPM=http://registry.npmjs.com CNPM_SOURCE_NPM_ISCNPM=false \
+		$(BIN) --harmony \
 		node_modules/.bin/istanbul cover --preserve-comments \
 		node_modules/.bin/_mocha \
-		--report lcovonly \
-		-- \
+		-- -u exports \
 		--reporter dot \
 		--timeout $(TIMEOUT) \
 		--require should \
@@ -84,10 +96,15 @@ test-travis-sqlite:
 test-travis-mysql: init-mysql
 	@$(MAKE) test-travis DB=mysql

-test-travis-all: test-travis-sqlite test-travis-mysql
+test-travis-pg:
+	@psql -c 'DROP DATABASE IF EXISTS cnpmjs_test;' -U postgres
+	@psql -c 'CREATE DATABASE cnpmjs_test;' -U postgres
+	@DB_PORT=5432 DB_USER=postgres $(MAKE) test-travis DB=postgres
+
+test-travis-all: test-travis-sqlite test-travis-mysql test-travis-pg

 dev:
-	@NODE_ENV=development node_modules/.bin/node-dev --harmony dispatch.js
+	@NODE_ENV=development $(BIN) node_modules/.bin/node-dev --harmony dispatch.js

 contributors: install
 	@node_modules/.bin/contributors -f plain -o AUTHORS
--- a/README.md
+++ b/README.md
@@ -3,29 +3,20 @@ cnpmjs.org

 [![NPM version][npm-image]][npm-url]
 [![build status][travis-image]][travis-url]
-[![Test coverage][coveralls-image]][coveralls-url]
-[![Gittip][gittip-image]][gittip-url]
+[![Test coverage][cov-image]][cov-url]
 [![David deps][david-image]][david-url]
-[![node version][node-image]][node-url]
 [![npm download][download-image]][download-url]
-[![gitter][gitter-image]][gitter-url]

 [npm-image]: http://cnpmjs.org/badge/v/cnpmjs.org.svg?style=flat-square
 [npm-url]: http://cnpmjs.org/package/cnpmjs.org
 [travis-image]: https://img.shields.io/travis/cnpm/cnpmjs.org.svg?style=flat-square
 [travis-url]: https://travis-ci.org/cnpm/cnpmjs.org
-[coveralls-image]: https://img.shields.io/coveralls/cnpm/cnpmjs.org.svg?style=flat-square
-[coveralls-url]: https://coveralls.io/r/cnpm/cnpmjs.org?branch=master
-[gittip-image]: https://img.shields.io/gittip/fengmk2.svg?style=flat-square
-[gittip-url]: https://www.gittip.com/fengmk2/
+[cov-image]: http://codecov.io/github/cnpm/cnpmjs.org/coverage.svg?branch=master
+[cov-url]: http://codecov.io/github/cnpm/cnpmjs.org?branch=master
 [david-image]: https://img.shields.io/david/cnpm/cnpmjs.org.svg?style=flat-square
 [david-url]: https://david-dm.org/cnpm/cnpmjs.org
-[node-image]: https://img.shields.io/badge/node.js-%3E=_0.11-red.svg?style=flat-square
-[node-url]: http://nodejs.org/download/
 [download-image]: https://img.shields.io/npm/dm/cnpmjs.org.svg?style=flat-square
 [download-url]: https://npmjs.org/package/cnpmjs.org
-[gitter-image]: https://badges.gitter.im/Join%20Chat.svg
-[gitter-url]: https://gitter.im/cnpm/cnpmjs.org?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge

 ![logo](https://raw.github.com/cnpm/cnpmjs.org/master/logo.png)

@@ -42,9 +33,10 @@ Our goal is to provide a low cost maintenance and easy to use solution for priva
 * Build a mirror NPM. (we use it to build a mirror in China: [cnpmjs.org](http://cnpmjs.org/))
 * Build a completely independent NPM registry to store whatever you like.

-### Features
+## Features

 * **Support "scoped" packages**: [npm/npm#5239](https://github.com/npm/npm/issues/5239)
+* **Support [CORS](http://en.wikipedia.org/wiki/Cross-origin_resource_sharing)**
 * **Simple to deploy**: only need `mysql` and a [simple store system](https://github.com/cnpm/cnpmjs.org/wiki/NFS-Guide).
 You can get the source code through `npm` or `git`.
 * **Low cost and easy maintenance**: `package.json` info store in MySQL, MariaDB, SQLite or PostgreSQL databases,
@@ -59,17 +51,20 @@ And it easy to wrap for your own registry which build with `cnpmjs.org`.
 * **Compatible with NPM client**: you can use the origin NPM client with `cnpmjs.org`,
 only need to change the registry in config. Even include manual synchronization (through `install` command).
 * **Version badge**: base on [shields.io](http://shields.io/) ![cnpm-badge](http://cnpmjs.org/badge/v/cnpmjs.org.svg?style=flat-square)
+* **Support http_proxy**: if you're behind firewall, need to request through http proxy

 **PROTIP** Be sure to read [Migrating from 1.x to 2.x](https://github.com/cnpm/cnpmjs.org/wiki/Migrating-from-1.x-to-2.x)
 as well as [New features in 2.x](https://github.com/cnpm/cnpmjs.org/wiki/New-features-in-2.x).

 ## Getting Start

+* [Deploy a private npm registry in 5 minutes](https://github.com/cnpm/cnpmjs.org/wiki/Deploy-a-private-npm-registry-in-5-minutes)
 * @[dead-horse](https://github.com/dead-horse): [What is cnpm?](http://deadhorse.me/slides/cnpmjs.html)
 * install and deploy cnpmjs.org through npm: [examples](https://github.com/cnpm/custom-cnpm-example)
 * Mirror NPM in China: [cnpmjs.org](http://cnpmjs.org)
 * cnpm client: [cnpm](https://github.com/cnpm/cnpm), `npm install -g cnpm`
 * [How to deploy cnpmjs.org](https://github.com/cnpm/cnpmjs.org/wiki/Deploy)
+* [Sync packages through `http_proxy`](https://github.com/cnpm/cnpmjs.org/wiki/Sync-packages-through-http_proxy)
 * [wiki](https://github.com/cnpm/cnpmjs.org/wiki)

 ## Develop on your local machine
@@ -98,7 +93,7 @@ $ make test
 # coverage
 $ make test-cov

-# udpate dependencies
+# update dependencies
 $ make autod

 # start server with development mode
@@ -114,27 +109,10 @@ $ make dev

 Tips: make sure your code is following the [node-style-guide](https://github.com/felixge/node-style-guide).

+## Sponsors
+
+- [![UCloud云计算](https://www.ucloud.cn/static/style/images/about/logo.png)](http://www.ucloud.cn?sem=sdk-CNPMJS)
+
 ## License

-(The MIT License)
-
-Copyright(c) cnpmjs.org and other contributors.
-
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-'Software'), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
-
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+[MIT](LICENSE.txt)
--- a/backup/dump.js
+++ b/backup/dump.js
@@ -1,142 +0,0 @@
-/**!
- * cnpmjs.org - backup/dump.js
- *
- * Copyright(c) cnpmjs.org and other contributors.
- * MIT Licensed
- *
- * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-/**
- * 1. dump module
- * 2. dump tag
- * 3. dump user
- * 4. total
- * 5. download_total
- */
-
-var path = require('path');
-var fs = require('fs');
-var moment = require('moment');
-var eventproxy = require('eventproxy');
-var util = require('util');
-var zlib = require('zlib');
-var mysql = require('../common/mysql');
-var nfs = require('../common/nfs');
-var config = require('../config');
-
-function dumpTable(name, lastRow, callback) {
-  var sql = 'SELECT * from ' + name + ' WHERE gmt_modified >=? ORDER BY gmt_modified ASC LIMIT 10000;';
-  mysql.query(sql, [lastRow.gmt_modified], function (err, rows) {
-    if (err || rows.length === 0) {
-      return callback(err, rows);
-    }
-    if (rows[0].id === lastRow.id) {
-      rows = rows.slice(1);
-    }
-    callback(null, rows);
-  });
-}
-
-function log() {
-  var str = '[' + moment().format('YYYY-MM-DD HH:mm:ss') + '] ' + util.format.apply(util, arguments);
-  console.log(str);
-}
-
-function syncTable(name, callback) {
-  var datadir = __dirname;
-  var dataFile = path.join(datadir, moment().format('YYYY-MM-DD-HH') + '_' + name + '.json');
-  var lastRowFile = path.join(datadir, name + '_lastdate.json');
-  var lastRow = null;
-  if (fs.existsSync(lastRowFile)) {
-    lastRow = require(lastRowFile);
-    lastRow.gmt_modified = new Date(Date.parse(lastRow.gmt_modified));
-  } else {
-    lastRow = {
-      gmt_modified: new Date('2011-11-11'),
-    };
-  }
-
-  log('getting "%s" since %j', name, lastRow);
-  dumpTable(name, lastRow, function (err, rows) {
-    console.log('[%s] got %d rows', Date(), rows && rows.length || 0);
-    if (err) {
-      return callback(err);
-    }
-
-    if (!rows || rows.length === 0) {
-      return callback();
-    }
-
-    var writeStream = fs.createWriteStream(dataFile, {flags: 'a'});
-    writeStream.once('error', callback);
-    for (var i = 0; i < rows.length; i++) {
-      writeStream.write(JSON.stringify(rows[i]) + '\n');
-    }
-    writeStream.end();
-    writeStream.on('finish', function () {
-      log('append %d rows to %s', rows.length, dataFile);
-      var gzfile = dataFile + '.gz';
-      var gzip = zlib.createGzip();
-      var inp = fs.createReadStream(dataFile);
-      var out = fs.createWriteStream(gzfile);
-      inp.pipe(gzip).pipe(out);
-      out.once('error', callback);
-      out.on('finish', function () {
-        var key = path.join(config.backupFilePrefix, path.basename(gzfile));
-        log('saving %s to %s ...', gzfile, key);
-        nfs.upload(gzfile, {key: key}, function (err, result) {
-          if (err) {
-            return callback(err);
-          }
-
-          lastRow = rows[rows.length - 1];
-          lastRow = {gmt_modified: lastRow.gmt_modified, id: lastRow.id};
-          fs.writeFileSync(lastRowFile, JSON.stringify(lastRow));
-          log('save %s data file to %j, lastrow: %j', name, result, lastRow);
-          callback();
-        });
-      });
-    });
-  });
-}
-
-var ep = eventproxy.create();
-ep.fail(function (err) {
-  log('error: %s', err.stack);
-  process.exit(1);
-});
-
-syncTable('module', ep.done('module'));
-
-ep.on('module', function () {
-  syncTable('tag', ep.done('tag'));
-});
-
-ep.on('tag', function () {
-  syncTable('user', ep.done('user'));
-});
-
-ep.on('user', function () {
-  syncTable('total', ep.done('total'));
-});
-
-ep.on('total', function () {
-  syncTable('download_total', ep.done('download_total'));
-});
-
-ep.on('download_total', function () {
-  ep.emit('finish');
-});
-
-ep.on('finish', function () {
-  log('finish, %d process exit', process.pid);
-  process.exit(0);
-});
--- a/bin/cli.js
+++ b/bin/cli.js
@@ -0,0 +1,131 @@
+#!/usr/bin/env node
+
+/**!
+ * cnpmjs.org - bin/cli.js
+ *
+ * Copyright(c) fengmk2 and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <m@fengmk2.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+require('gnode');
+var debug = require('debug')('cnpmjs.org:cli');
+var program = require('commander');
+var path = require('path');
+var fs = require('fs');
+var mkdirp = require('mkdirp');
+var treekill = require('treekill');
+var version = require('../package.json').version;
+
+function list(val) {
+  return val.split(',');
+}
+
+program
+  .version(version);
+
+program
+  .command('start')
+  .description('start cnpmjs.org server')
+  .option('--admins <admins>', 'set admins', list)
+  .option('--scopes <scopes>', 'set scopes', list)
+  // .option('--cluster', 'enable cluster mode')
+  .option('--dataDir <dataDir>', 'cnpmjs.org data dir, default is `$HOME/.cnpmjs.org`')
+  .action(start);
+
+program
+  .command('stop')
+  .description('stop cnpmjs.org server')
+  .option('--dataDir <dataDir>', 'cnpmjs.org data dir, default is `$HOME/.cnpmjs.org`')
+  .action(stop);
+
+program.parse(process.argv);
+
+
+function start(options) {
+  stop(options);
+  var dataDir = options.dataDir || path.join(process.env.HOME, '.cnpmjs.org');
+  mkdirp.sync(dataDir);
+
+  var configfile = path.join(dataDir, 'config.json');
+  var config = {};
+  if (fs.existsSync(configfile)) {
+    try {
+      config = require(configfile);
+    } catch (err) {
+      console.warn('load old %s error: %s', configfile, err);
+    }
+  }
+  // config.enableCluster = !!options.cluster;
+  if (options.admins) {
+    config.admins = {};
+    for (var i = 0; i < options.admins.length; i++) {
+      config.admins[options.admins[i]] = options.admins[i] + '@localhost.com';
+    }
+  }
+  if (options.scopes) {
+    config.scopes = options.scopes.map(function (name) {
+      if (name[0] !== '@') {
+        name = '@' + name;
+      }
+      return name;
+    });
+  }
+
+  var configJSON = JSON.stringify(config, null, 2);
+  fs.writeFileSync(configfile, configJSON);
+
+  debug('save config %s to %s', configJSON, configfile);
+
+  // if sqlite db file not exists, init first
+  initDatabase();
+
+  require('../dispatch');
+  fs.writeFileSync(path.join(dataDir, 'pid'), process.pid + '');
+}
+
+function stop(options) {
+  var dataDir = options.dataDir || path.join(process.env.HOME, '.cnpmjs.org');
+  var pidfile = path.join(dataDir, 'pid');
+  if (fs.existsSync(pidfile)) {
+    var pid = Number(fs.readFileSync(pidfile, 'utf8'));
+    treekill(pid, function (err) {
+      if (err) {
+        console.log(err);
+        throw err;
+      }
+      console.log('cnpmjs.org server:%d stop', pid);
+      fs.unlinkSync(pidfile);
+    });
+  }
+}
+
+function initDatabase() {
+  var models = require('../models');
+
+  models.sequelize.sync({ force: false })
+    .then(function () {
+      models.Total.init(function (err) {
+        if (err) {
+          console.error('[models/init_script.js] sequelize init fail');
+          console.error(err);
+          throw err;
+        } else {
+          console.log('[models/init_script.js] `sqlite` sequelize sync and init success');
+        }
+      });
+    })
+    .catch(function (err) {
+      console.error('[models/init_script.js] sequelize sync fail');
+      console.error(err);
+      throw err;
+    });
+}
--- a/bin/nodejsctl
+++ b/bin/nodejsctl
@@ -52,9 +52,9 @@ stop()
    kill -15 $PID
    sleep 2

-    node_num=`ps -ef |grep node|grep ${PROJECT_NAME}|grep -v grep|wc -l`
+    node_num=`ps -ef | grep ${PROJECT_NAME} | grep -v grep | wc -l`
    if [ $node_num != 0 ]; then
-      ps -ef |grep node | grep ${PROJECT_NAME} |grep -v grep|awk '{print $2}'|xargs kill -9
+      ps -ef | grep ${PROJECT_NAME} |grep -v grep|awk '{print $2}'|xargs kill -9
      ipcs -s | grep 0x | awk '{print $2}' | xargs -n1 ipcrm -s  > /dev/null 2>&1
      ipcs -m | grep 0x | awk '{print $2}' | xargs -n1 ipcrm -m  > /dev/null 2>&1
    fi
--- a/bin/restore_module_deps.js
+++ b/bin/restore_module_deps.js
@@ -1,74 +0,0 @@
-/**!
- * cnpmjs.org - bin/restore_module_deps.js
- *
- * Copyright(c) 2014
- * MIT Licensed
- *
- * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-"use strict";
-
-/**
- * Module dependencies.
- */
-
-var mysql = require('../common/mysql');
-var Module = require('../proxy/module');
-var ModuleDeps = require('../proxy/module_deps');
-
-var addCount = 0;
-
-function restore(id, callback) {
-  var sql = 'SELECT id, name, package FROM module WHERE id > ? ORDER BY id ASC LIMIT 1000';
-  mysql.query(sql, [id], function (err, rows) {
-    if (err) {
-      return callback(err);
-    }
-    if (rows.length === 0) {
-      return callback(null, []);
-    }
-
-    console.log('[%s] got %d rows', id, rows.length);
-
-    rows.forEach(function (r) {
-      Module.parseRow(r);
-      if (!r.package) {
-        return;
-      }
-      var deps = Object.keys(r.package.dependencies || {});
-      if (!Array.isArray(deps) || !deps.length) {
-        return;
-      }
-      deps.forEach(function (dep) {
-        ModuleDeps.add(dep, r.name, function (err) {
-          // console.log('[%s] add %s <= %s, error: %s', id, dep, r.name, err);
-        });
-      });
-      addCount += deps.length;
-    });
-    setTimeout(function () {
-      console.log('[%s] add %d relations', id, addCount);
-      callback(null, rows);
-    }, 1000);
-  });
-}
-
-var id = 0;
-function run() {
-  restore(id, function (err, rows) {
-    if (err) {
-      throw err;
-    }
-    if (rows.length === 0) {
-      console.log('finished, last id: %s, exit.', id);
-      process.exit(0);
-    }
-
-    id = rows[rows.length - 1].id;
-    run();
-  });
-}
-
-run();
--- a/common/mail.js
+++ b/common/mail.js
@@ -14,10 +14,10 @@
 * Module dependencies.
 */

-var mailConfig = require('../config').mail;
 var nodemailer = require('nodemailer');
 var utility = require('utility');
 var os = require('os');
+var mailConfig = require('../config').mail;

 var smtpConfig;
 if (mailConfig.auth) {
@@ -25,6 +25,7 @@ if (mailConfig.auth) {
  smtpConfig = mailConfig;
 } else {
  smtpConfig = {
+    enable: mailConfig.enable,
    // backward compat
    host: mailConfig.host,
    port: mailConfig.port,
@@ -37,7 +38,7 @@ if (mailConfig.auth) {
  };
 }

-var transport = nodemailer.createTransport(smtpConfig);
+var transport;

 /**
 * Send notice email with mail level and appname.
@@ -71,6 +72,15 @@ LEVELS.forEach(function (level) {
 exports.send = function (to, subject, html, callback) {
  callback = callback || utility.noop;

+  if (mailConfig.enable === false) {
+    console.log('[send mail debug] [%s] to: %s, subject: %s\n%s', Date(), to, subject, html);
+    return callback();
+  }
+
+  if (!transport) {
+    transport = nodemailer.createTransport(smtpConfig);
+  }
+
  var message = {
    from: mailConfig.from || mailConfig.sender,
    to: to,
--- a/common/markdown.js
+++ b/common/markdown.js
@@ -14,13 +14,21 @@
 * Module dependencies.
 */

-var Remarkable = require('remarkable');
+var xss = require('xss');
+var MarkdownIt = require('markdown-it');

-var md = new Remarkable();
-md.set({
-  html: true
+// allow class attr on code
+xss.whiteList.code = ['class'];
+
+var md = new MarkdownIt({
+  html: true,
+  linkify: true,
 });

-exports.render = function (content) {
-  return md.render(content);
+exports.render = function (content, filterXss) {
+  var html = md.render(content);
+  if (filterXss !== false) {
+    html = xss(html);
+  }
+  return html;
 };
--- a/common/redis.js
+++ b/common/redis.js
@@ -1,37 +0,0 @@
-/**!
- * cnpmjs.org - common/redis.js
- *
- * Copyright(c) cnpmjs.org and other contributors.
- * MIT Licensed
- *
- * Authors:
- *  dead_horse <dead_horse@qq.com> (http://deadhorse.me)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-var config = require('../config');
-
-// close redis by set config.redis to `null` or `{}`
-if (config.redis && config.redis.host && config.redis.port) {
-
-  var redis = require('redis');
-  var wrapper = require('co-redis');
-  var logger = require('./logger');
-  var _client = redis.createClient(config.redis.port, config.redis.host);
-
-  _client.on('error', function (err) {
-    logger.error(err);
-  });
-
-  module.exports = wrapper(_client);
-
-} else {
-  console.warn('[%s] [worker:%s:common/redis.js] Redis config can not found',
-    Date(), process.pid);
-  module.exports = null;
-}
--- a/common/urllib.js
+++ b/common/urllib.js
@@ -14,18 +14,58 @@
 * Module dependencies.
 */

+var urlparse = require('url').parse;
 var urllib = require('urllib');
 var HttpAgent = require('agentkeepalive');
 var HttpsAgent = require('agentkeepalive').HttpsAgent;
+var config = require('../config');
+
+var httpAgent;
+var httpsAgent;
+
+if (config.httpProxy) {
+  var tunnel = require('tunnel-agent');
+  var urlinfo = urlparse(config.httpProxy);
+  if (urlinfo.protocol === 'http:') {
+    httpAgent = tunnel.httpOverHttp({
+      proxy: {
+        host: urlinfo.hostname,
+        port: urlinfo.port
+      }
+    });
+    httpsAgent = tunnel.httpsOverHttp({
+      proxy: {
+        host: urlinfo.hostname,
+        port: urlinfo.port
+      }
+    });
+  } else if (urlinfo.protocol === 'https:') {
+    httpAgent = tunnel.httpOverHttps({
+      proxy: {
+        host: urlinfo.hostname,
+        port: urlinfo.port
+      }
+    });
+    httpsAgent = tunnel.httpsOverHttps({
+      proxy: {
+        host: urlinfo.hostname,
+        port: urlinfo.port
+      }
+    });
+  } else {
+    throw new TypeError('httpProxy format error: ' + config.httpProxy);
+  }
+} else {
+  httpAgent = new HttpAgent({
+    timeout: 0,
+    keepAliveTimeout: 15000
+  });
+  httpsAgent = new HttpsAgent({
+    timeout: 0,
+    keepAliveTimeout: 15000
+  });
+}

-var httpAgent = new HttpAgent({
-  timeout: 0,
-  keepAliveTimeout: 15000
-});
-var httpsAgent = new HttpsAgent({
-  timeout: 0,
-  keepAliveTimeout: 15000
-});
 var client = urllib.create({
  agent: httpAgent,
  httpsAgent: httpsAgent
--- a/config/index.js
+++ b/config/index.js
@@ -1,12 +1,10 @@
 /**!
- * cnpmjs.org - config/index.js
- *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com>
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 'use strict';
@@ -24,6 +22,7 @@ var os = require('os');
 var version = require('../package.json').version;

 var root = path.dirname(__dirname);
+var dataDir = path.join(process.env.HOME || root, '.cnpmjs.org');

 var config = {
  version: version,
@@ -37,6 +36,7 @@ var config = {
  /*
   * server configure
   */
+
  registryPort: 7001,
  webPort: 7002,
  bindingHost: '127.0.0.1', // only binding on 127.0.0.1 for local access
@@ -44,15 +44,17 @@ var config = {
  // debug mode
  // if in debug mode, some middleware like limit wont load
  // logger module will print to stdout
-  debug: true,
+  debug: process.env.NODE_ENV === 'development',
+  // page mode, enable on development env
+  pagemock: process.env.NODE_ENV === 'development',
  // session secret
  sessionSecret: 'cnpmjs.org test session secret',
  // max request json body size
  jsonLimit: '10mb',
  // log dir name
-  logdir: path.join(root, '.tmp/logs'),
+  logdir: path.join(dataDir, 'logs'),
  // update file template dir
-  uploadDir: path.join(root, '.dist'),
+  uploadDir: path.join(dataDir, 'downloads'),
  // web page viewCache
  viewCache: false,

@@ -81,6 +83,7 @@ var config = {
  // email notification for errors
  // check https://github.com/andris9/Nodemailer for more informations
  mail: {
+    enable: false,
    appname: 'cnpmjs.org',
    from: 'cnpmjs.org mail sender <adderss@gmail.com>',
    service: 'gmail',
@@ -89,20 +92,9 @@ var config = {
      pass: 'your password'
    }
  },
-  // forward Compat with old style
-  // mail: {
-  //   appname: 'cnpmjs.org',
-  //   sender: 'cnpmjs.org mail sender <adderss@gmail.com>',
-  //   host: 'smtp.gmail.com',
-  //   port: 465,
-  //   user: 'address@gmail.com',
-  //   pass: 'your password',
-  //   ssl: true,
-  //   debug: false
-  // },
-

  logoURL: '//ww4.sinaimg.cn/large/69c1d4acgw1ebfly5kjlij208202oglr.jpg', // cnpm logo image url
+  adBanner: '',
  customReadmeFile: '', // you can use your custom readme file instead the cnpm one
  customFooter: '', // you can add copyright and site total script html here
  npmClientName: 'cnpm', // use `${name} install package`
@@ -141,20 +133,18 @@ var config = {
    },

    // the storage engine for 'sqlite'
-    // default store into ~/cnpmjs.org.sqlite
-    storage: path.join(process.env.HOME || root, 'cnpmjs.org.sqlite'),
+    // default store into ~/.cnpmjs.org/data.sqlite
+    storage: path.join(dataDir, 'data.sqlite'),

    logging: !!process.env.SQL_DEBUG,
  },

-  // redis config
-  // use for koa-limit module as storage
-  redis: null,
-
  // package tarball store in local filesystem by default
  nfs: require('fs-cnpm')({
-    dir: path.join(root, '.tmp', 'dist')
+    dir: path.join(dataDir, 'nfs')
  }),
+  // if set true, will 302 redirect to `nfs.url(dist.key)`
+  downloadRedirectToNFS: false,

  // registry url name
  registryHost: 'r.cnpmjs.org',
@@ -163,18 +153,13 @@ var config = {
   * registry mode config
   */

-  // enable private mode, only admin can publish, other use just can sync package from source npm
-  enablePrivate: true,
+  // enable private mode or not
+  // private mode: only admins can publish, other users just can sync package from source npm
+  // public mode: all users can publish
+  enablePrivate: false,

  // registry scopes, if don't set, means do not support scopes
-  scopes: [
-    '@cnpm',
-    '@cnpmtest'
-  ],
-
-  // force user publish with scope
-  // but admins still can publish without scope
-  forcePublishWithScope: true,
+  scopes: [ '@cnpm', '@cnpmtest', '@cnpm-test' ],

  // some registry already have some private packages in global scope
  // but we want to treat them as scoped private packages,
@@ -185,15 +170,6 @@ var config = {
   * sync configs
   */

-  // sync dist config
-  // sync node.js dist from nodejs.org
-  noticeSyncDistError: true,
-  disturl: 'http://nodejs.org/dist',
-  syncDist: false,
-
-  pythonDisturl: 'https://www.python.org/ftp',
-  syncPythonDist: false,
-
  // the official npm registry
  // cnpm wont directly sync from this one
  // but sometimes will request it for some package infomations
@@ -213,7 +189,7 @@ var config = {
  syncByInstall: true,

  // sync mode select
-  // none: do not sync any module
+  // none: do not sync any module, proxy all public modules from sourceNpmRegistry
  // exist: only sync exist modules
  // all: sync all modules
  syncModel: 'none', // 'none', 'all', 'exist'
@@ -235,12 +211,34 @@ var config = {

  // badge subject on http://shields.io/
  badgeSubject: 'cnpm',
+
+  // custom user service, @see https://github.com/cnpm/cnpmjs.org/wiki/Use-Your-Own-User-Authorization
+  userService: null,
+
+  // always-auth https://docs.npmjs.com/misc/config#always-auth
+  // Force npm to always require authentication when accessing the registry, even for GET requests.
+  alwaysAuth: false,
+
+  // if you're behind firewall, need to request through http proxy, please set this
+  // e.g.: `httpProxy: 'http://proxy.mycompany.com:8080'`
+  httpProxy: null,
 };

-// load config/config.js, everything in config.js will cover the same key in index.js
-var customConfig = path.join(root, 'config/config.js');
-if (fs.existsSync(customConfig)) {
-  copy(require(customConfig)).override(config);
+if (process.env.NODE_ENV !== 'test') {
+  var customConfig;
+  if (process.env.NODE_ENV === 'development') {
+    customConfig = path.join(root, 'config', 'config.js');
+  } else {
+    // 1. try to load `$dataDir/config.json` first, not exists then goto 2.
+    // 2. load config/config.js, everything in config.js will cover the same key in index.js
+    customConfig = path.join(dataDir, 'config.json');
+    if (!fs.existsSync(customConfig)) {
+      customConfig = path.join(root, 'config', 'config.js');
+    }
+  }
+  if (fs.existsSync(customConfig)) {
+    copy(require(customConfig)).override(config);
+  }
 }

 mkdirp.sync(config.logdir);
--- a/controllers/registry/package/dist_tag.js
+++ b/controllers/registry/package/dist_tag.js
@@ -0,0 +1,84 @@
+/**!
+ * cnpmjs.org - controllers/registry/package/dist_tag.js
+ *
+ * Copyright(c) fengmk2 and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var packageService = require('../../../services/package');
+
+function ok() {
+  return {
+    ok: "dist-tags updated"
+  };
+}
+
+// GET /-/package/:pkg/dist-tags -- returns the package's dist-tags
+exports.index = function* () {
+  var name = this.params.name || this.params[0];
+  var rows = yield* packageService.listModuleTags(name);
+  var tags = {};
+  for (var i = 0; i < rows.length; i++) {
+    var row = rows[i];
+    tags[row.tag] = row.version;
+  }
+  this.body = tags;
+};
+
+// PUT /-/package/:pkg/dist-tags -- Set package's dist-tags to provided object body (removing missing)
+exports.save = function* () {
+  var name = this.params.name || this.params[0];
+  yield packageService.removeModuleTags(name);
+  yield* exports.update.call(this);
+};
+
+// POST /-/package/:pkg/dist-tags -- Add/modify dist-tags from provided object body (merge)
+exports.update = function* () {
+  var name = this.params.name || this.params[0];
+  var tags = this.request.body;
+  for (var tag in tags) {
+    var version = tags[tag];
+    yield packageService.addModuleTag(name, tag, version);
+  }
+  this.status = 201;
+  this.body = ok();
+};
+
+// PUT /-/package/:pkg/dist-tags/:tag -- Set package's dist-tags[tag] to provided string body
+// POST /-/package/:pkg/dist-tags/:tag -- Same as PUT /-/package/:pkg/dist-tags/:tag
+exports.set = function* () {
+  var name = this.params.name || this.params[0];
+  var tag = this.params.tag || this.params[1];
+  var version = this.request.body;
+  // make sure version exists
+  var pkg = yield packageService.getModule(name, version);
+  if (!pkg) {
+    this.status = 400;
+    this.body = {
+      error: 'version_error',
+      reason: name + '@' + version + ' not exists'
+    };
+    return;
+  }
+
+  yield packageService.addModuleTag(name, tag, version);
+  this.status = 201;
+  this.body = ok();
+};
+
+// DELETE /-/package/:pkg/dist-tags/:tag -- Remove tag from dist-tags
+exports.destroy = function* () {
+  var name = this.params.name || this.params[0];
+  var tag = this.params.tag || this.params[1];
+  yield packageService.removeModuleTagsByNames(name, tag);
+  this.body = ok();
+};
--- a/controllers/registry/package/download.js
+++ b/controllers/registry/package/download.js
@@ -24,6 +24,7 @@ var common = require('../../../lib/common');
 var downloadAsReadStream = require('../../utils').downloadAsReadStream;
 var packageService = require('../../../services/package');
 var downloadTotalService = require('../../../services/download_total');
+var config = require('../../../config');

 var _downloads = {};

@@ -51,6 +52,14 @@ module.exports = function* download(next) {
    return;
  }

+  _downloads[name] = (_downloads[name] || 0) + 1;
+
+  if (config.downloadRedirectToNFS && url) {
+    this.status = 302;
+    this.set('Location', url);
+    return;
+  }
+
  var dist = row.package.dist;
  if (!dist.key) {
    // try to use nsf.url() first
@@ -58,17 +67,10 @@ module.exports = function* download(next) {
    debug('get tarball by 302, url: %s', url);
    this.status = 302;
    this.set('Location', url);
-    _downloads[name] = (_downloads[name] || 0) + 1;
    return;
  }

  // else use `dist.key` to get tarball from nfs
-  if (!nfs.download) {
-    return yield* next;
-  }
-
-  _downloads[name] = (_downloads[name] || 0) + 1;
-
  if (typeof dist.size === 'number' && dist.size > 0) {
    this.length = dist.size;
  }
--- a/controllers/registry/package/list.js
+++ b/controllers/registry/package/list.js
@@ -16,10 +16,9 @@

 var debug = require('debug')('cnpmjs.org:controllers:registry:package:list');
 var packageService = require('../../../services/package');
-var npmService = require('../../../services/npm');
-var config = require('../../../config');
-var setDownloadURL = require('../../../lib/common').setDownloadURL;
+var common = require('../../../lib/common');
 var SyncModuleWorker = require('../../sync_module_worker');
+var config = require('../../../config');

 /**
 * list all version of a module
@@ -46,9 +45,6 @@ module.exports = function* list() {
      }
    }

-    // use modifiedTime as etag
-    this.set('ETag', '"' + modifiedTime.getTime() + '"');
-
    // must set status first
    this.status = 200;
    if (this.fresh) {
@@ -72,7 +68,10 @@ module.exports = function* list() {

  var starUserMap = {};
  for (var i = 0; i < starUsers.length; i++) {
-    starUserMap[starUsers[i]] = true;
+    var starUser = starUsers[i];
+    if (starUser[0] !== '"' && starUser[0] !== "'") {
+      starUserMap[starUser] = true;
+    }
  }
  starUsers = starUserMap;

@@ -111,23 +110,7 @@ module.exports = function* list() {
    var logId = yield* SyncModuleWorker.sync(name, 'sync-by-install');
    debug('start sync %s, get log id %s', name, logId);

-    // try to get package from official registry
-    var r = yield* npmService.request('/' + name, {
-      registry: config.officialNpmRegistry
-    });
-
-    debug('requet from officialNpmRegistry response %s', r.status);
-    if (r.status !== 200) {
-      this.status = 404;
-      this.body = {
-        error: 'not_found',
-        reason: 'document not found'
-      };
-      return;
-    }
-
-    this.body = r.data;
-    return;
+    return this.redirect(config.officialNpmRegistry + this.url);
  }

  var latestMod = null;
@@ -147,7 +130,7 @@ module.exports = function* list() {
  for (var i = 0; i < rows.length; i++) {
    var row = rows[i];
    var pkg = row.package;
-    setDownloadURL(pkg, this);
+    common.setDownloadURL(pkg, this);
    pkg._cnpm_publish_time = row.publish_time;
    versions[pkg.version] = pkg;

--- a/controllers/registry/package/list_by_user.js
+++ b/controllers/registry/package/list_by_user.js
@@ -0,0 +1,29 @@
+/**!
+ * list packages by username
+ *
+ * Copyright(c) cnpmjs.org and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <m@fengmk2.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+const packageService = require('../../../services/package');
+
+module.exports = function*() {
+  const username = this.params.user;
+  const packages = yield packageService.listModulesByUser(username);
+
+  this.body = {
+    user: {
+      name: username,
+    },
+    packages: packages,
+  };
+};
--- a/controllers/registry/package/show.js
+++ b/controllers/registry/package/show.js
@@ -17,7 +17,6 @@
 var debug = require('debug')('cnpmjs.org:controllers:registry:package:show');
 var semver = require('semver');
 var packageService = require('../../../services/package');
-var npmService = require('../../../services/npm');
 var setDownloadURL = require('../../../lib/common').setDownloadURL;
 var SyncModuleWorker = require('../../sync_module_worker');
 var config = require('../../../config');
@@ -65,20 +64,5 @@ module.exports = function* show() {
  var logId = yield* SyncModuleWorker.sync(name, 'sync-by-install');
  debug('start sync %s, get log id %s', name, logId);

-  // rty to get package from official registry
-  var r = yield npmService.request('/' + name + '/' + tag, {
-    registry: config.officialNpmRegistry
-  });
-
-  if (r.status !== 200) {
-    debug('requet from officialNpmRegistry response %s', r.status);
-    this.status = 404;
-    this.body = {
-      error: 'not exist',
-      reason: 'tag or version not found: ' + tag
-    };
-    return;
-  }
-
-  this.body = r.data;
+  this.redirect(config.officialNpmRegistry + this.url);
 };
--- a/controllers/sync.js
+++ b/controllers/sync.js
@@ -21,11 +21,19 @@ var config = require('../config');

 exports.sync = function* () {
  var username = this.user.name || 'anonymous';
-  var name = this.params.name;
+  var name = this.params.name || this.params[0];
+  var type = 'package';
+  if (name.indexOf(':') > 0) {
+    // user:fengmk2
+    // package:pedding
+    var splits = name.split(':');
+    type = splits[0];
+    name = splits[1];
+  }
  var publish = this.query.publish === 'true';
  var noDep = this.query.nodeps === 'true';
  debug('sync %s with query: %j', name, this.query);
-  if (publish && !this.user.isAdmin) {
+  if (type === 'package' && publish && !this.user.isAdmin) {
    this.status = 403;
    this.body = {
      error: 'no_perms',
@@ -35,6 +43,7 @@ exports.sync = function* () {
  }

  var options = {
+    type: type,
    publish: publish,
    noDep: noDep,
    syncUpstreamFirst: config.sourceNpmRegistryIsCNpm,
@@ -51,7 +60,7 @@ exports.sync = function* () {
 };

 exports.getSyncLog = function* (next) {
-  var logId = this.params.id;
+  var logId = this.params.id || this.params[1];
  var offset = Number(this.query.offset) || 0;
  var row = yield* Log.get(logId);
  if (!row) {
--- a/controllers/sync_module_worker.js
+++ b/controllers/sync_module_worker.js
@@ -5,7 +5,7 @@
 * MIT Licensed
 *
 * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 *  dead_horse <dead_horse@qq.com> (http://deadhorse.me)
 */

@@ -37,8 +37,10 @@ var npmSerivce = require('../services/npm');
 var packageService = require('../services/package');
 var logService = require('../services/module_log');
 var User = require('../models').User;
+var os = require('os');

-var USER_AGENT = 'sync.cnpmjs.org/' + config.version + ' ' + urllib.USER_AGENT;
+var USER_AGENT = 'sync.cnpmjs.org/' + config.version +
+  ' hostname/' + os.hostname() + ' ' + urllib.USER_AGENT;

 function SyncModuleWorker(options) {
  EventEmitter.call(this);
@@ -49,6 +51,7 @@ function SyncModuleWorker(options) {
    options.name = [options.name];
  }

+  this.type = options.type || 'package';
  this.names = options.name;
  this.startName = this.names[0];

@@ -79,8 +82,9 @@ SyncModuleWorker.prototype.finish = function () {
    return;
  }
  this._finished = true;
-  this.log('[done] Sync %s module finished, %d success, %d fail\nSuccess: [ %s ]\nFail: [ %s ]',
+  this.log('[done] Sync %s %s finished, %d success, %d fail\nSuccess: [ %s ]\nFail: [ %s ]',
    this.startName,
+    this.type,
    this.successes.length, this.fails.length,
    this.successes.join(', '), this.fails.join(', '));
  this.emit('end');
@@ -112,10 +116,13 @@ SyncModuleWorker.prototype._saveLog = function () {
  that._log = '';
  co(function* () {
    yield* logService.append(that._logId, logstr);
-  })(function (err) {
-    if (err) {
-      logger.error(err);
+  }).then(function () {
+    that._loging = false;
+    if (that._log) {
+      that._saveLog();
    }
+  }).catch(function (err) {
+    logger.error(err);
    that._loging = false;
    if (that._log) {
      that._saveLog();
@@ -127,7 +134,7 @@ SyncModuleWorker.prototype.start = function () {
  this.log('user: %s, sync %s worker start, %d concurrency, nodeps: %s, publish: %s',
    this.username, this.names[0], this.concurrency, this.noDep, this._publish);
  var that = this;
-  co(function *() {
+  co(function* () {
    // sync upstream
    if (that.syncUpstreamFirst) {
      try {
@@ -137,12 +144,19 @@ SyncModuleWorker.prototype.start = function () {
      }
    }

+    if (that.type === 'user') {
+      yield that.syncUser();
+      return;
+    }
+
    var arr = [];
    for (var i = 0; i < that.concurrency; i++) {
      arr.push(that.next(i));
    }
    yield arr;
-  })();
+  }).catch(function (err) {
+    logger.error(err);
+  });
 };

 SyncModuleWorker.prototype.pushSuccess = function (name) {
@@ -182,7 +196,16 @@ SyncModuleWorker.prototype._doneOne = function* (concurrencyId, name, success) {
 };

 SyncModuleWorker.prototype.syncUpstream = function* (name) {
-  var url = config.sourceNpmRegistry + '/' + name + '/sync';
+  if (config.sourceNpmRegistry.indexOf('registry.npmjs.org') >= 0 ||
+      config.sourceNpmRegistry.indexOf('registry.npmjs.com') >= 0) {
+    this.log('----------------- upstream is npm registry: %s, ignore it -------------------', config.sourceNpmRegistry);
+    return;
+  }
+  var syncname = name;
+  if (this.type === 'user') {
+    syncname = this.type + ':' + syncname;
+  }
+  var url = config.sourceNpmRegistry + '/' + syncname + '/sync';
  if (this.noDep) {
    url += '?nodeps=true';
  }
@@ -192,7 +215,8 @@ SyncModuleWorker.prototype.syncUpstream = function* (name) {
    headers: {
      'content-length': 0
    },
-    dataType: 'json'
+    dataType: 'json',
+    gzip: true,
  });

  if (r.status !== 201 || !r.data.ok) {
@@ -210,7 +234,8 @@ SyncModuleWorker.prototype.syncUpstream = function* (name) {
    var synclogURL = logURL + '?offset=' + offset;
    var rs = yield urllib.request(synclogURL, {
      timeout: 20000,
-      dataType: 'json'
+      dataType: 'json',
+      gzip: true,
    });

    if (rs.status !== 200 || !rs.data.ok) {
@@ -248,7 +273,28 @@ SyncModuleWorker.prototype.syncUpstream = function* (name) {
  this.log('----------------- Synced upstream %s -------------------', logURL);
 };

+SyncModuleWorker.prototype.syncUser = function* () {
+  for (var i = 0; i < this.names.length; i++) {
+    var username = this.names[i];
+    try {
+      var user = yield _saveNpmUser(username);
+      this.pushSuccess(username);
+      this.log('[c#%s] [%s] sync success: %j', 0, username, user);
+    } catch (err) {
+      this.pushFail(username);
+      this.log('[c#%s] [error] [%s] sync error: %s', 0, username, err.stack);
+    }
+  }
+  this.finish();
+};
+
 SyncModuleWorker.prototype.next = function* (concurrencyId) {
+  if (config.syncModel === 'none') {
+    this.log('[c#%d] [%s] syncModel is none, ignore',
+      concurrencyId, name);
+    return this.finish();
+  }
+
  var name = this.names.shift();
  if (!name) {
    return setImmediate(this.finish.bind(this));
@@ -261,17 +307,17 @@ SyncModuleWorker.prototype.next = function* (concurrencyId) {

  this.log('----------------- Syncing %s -------------------', name);

-  // ignore scoped package
-  if (name[0] === '@') {
-    this.log('[c#%d] [%s] ignore sync scoped package',
-      concurrencyId, name);
+  // ignore private scoped package
+  if (common.isPrivateScopedPackage(name)) {
+    this.log('[c#%d] [%s] ignore sync private scoped %j package',
+      concurrencyId, name, config.scopes);
    yield* this._doneOne(concurrencyId, name, true);
    return;
  }

  // get from npm
  try {
-    var result = yield* npmSerivce.request('/' + name);
+    var result = yield* npmSerivce.request('/' + name.replace('/', '%2f'));
    pkg = result.data;
    status = result.status;
  } catch (err) {
@@ -288,7 +334,7 @@ SyncModuleWorker.prototype.next = function* (concurrencyId) {
  var unpublishedInfo = null;
  if (status === 404) {
    // check if it's unpublished
-    if (pkg.time && pkg.time.unpublished && pkg.time.unpublished.time) {
+    if (pkg && pkg.time && pkg.time.unpublished && pkg.time.unpublished.time) {
      unpublishedInfo = pkg.time.unpublished;
    } else {
      pkg = null;
@@ -344,6 +390,7 @@ function* _saveNpmUser(username) {
    return;
  }
  yield* User.saveNpmUser(user);
+  return user;
 }

 function* _saveMaintainer(modName, username, action) {
@@ -358,7 +405,7 @@ SyncModuleWorker.prototype._unpublished = function* (name, unpublishedInfo) {
  var mods = yield* packageService.listModulesByName(name);
  this.log('  [%s] start unpublished %d versions from local cnpm registry',
    name, mods.length);
-  if (this._isLocalModule(mods)) {
+  if (common.isLocalModule(mods)) {
    // publish on cnpm, dont sync this version package
    this.log('  [%s] publish on local cnpm registry, don\'t sync', name);
    return [];
@@ -396,16 +443,6 @@ SyncModuleWorker.prototype._unpublished = function* (name, unpublishedInfo) {
  this.log('    [%s] delete nfs files: %j success', name, keys);
 };

-SyncModuleWorker.prototype._isLocalModule = function (mods) {
-  for (var i = 0; i < mods.length; i++) {
-    var r = mods[i];
-    if (r.package && r.package._publish_on_cnpm) {
-      return true;
-    }
-  }
-  return false;
-};
-
 SyncModuleWorker.prototype._sync = function* (name, pkg) {
  var that = this;
  var hasModules = false;
@@ -420,7 +457,7 @@ SyncModuleWorker.prototype._sync = function* (name, pkg) {
  var existsStarUsers = result[2];
  var existsNpmMaintainers = result[3];

-  if (that._isLocalModule(moduleRows)) {
+  if (common.isLocalModule(moduleRows)) {
    // publish on cnpm, dont sync this version package
    that.log('  [%s] publish on local cnpm registry, don\'t sync', name);
    return [];
@@ -760,7 +797,9 @@ SyncModuleWorker.prototype._sync = function* (name, pkg) {
    names.forEach(function (username) {
      var r = map[username];
      if (!r || !r.json) {
-        missingUsers.push(username);
+        if (username[0] !== '"' && username[0] !== "'") {
+          missingUsers.push(username);
+        }
      }
    });

@@ -848,7 +887,8 @@ SyncModuleWorker.prototype._syncOneVersion = function *(versionIndex, sourcePack
    timeout: 600000, // 10 minutes download
    headers: {
      'user-agent': USER_AGENT
-    }
+    },
+    gzip: true,
  };

  var dependencies = Object.keys(sourcePackage.dependencies || {});
@@ -939,6 +979,7 @@ SyncModuleWorker.prototype._syncOneVersion = function *(versionIndex, sourcePack
      shasum: shasum
    };
    // upload to NFS
+    logger.syncInfo('[sync_module_worker] uploading %j to nfs', options);
    var result = yield nfs.upload(filepath, options);
    return yield *afterUpload(result);
  } finally {
@@ -1002,6 +1043,7 @@ SyncModuleWorker.sync = function* (name, username, options) {
  var result = yield* logService.create({name: name, username: username});
  var worker = new SyncModuleWorker({
    logId: result.id,
+    type: options.type,
    name: name,
    username: username,
    noDep: options.noDep,
--- a/controllers/utils.js
+++ b/controllers/utils.js
@@ -27,6 +27,11 @@ var config = require('../config');
 var DOWNLOAD_TIMEOUT = ms('10m');

 exports.downloadAsReadStream = function* (key) {
+  var options = { timeout: DOWNLOAD_TIMEOUT };
+  if (nfs.createDownloadStream) {
+    return yield nfs.createDownloadStream(key, options);
+  }
+
  var tmpPath = path.join(config.uploadDir,
    utility.randomString() + key.replace(/\//g, '-'));
  function cleanup() {
@@ -35,7 +40,7 @@ exports.downloadAsReadStream = function* (key) {
  }
  debug('downloadAsReadStream() %s to %s', key, tmpPath);
  try {
-    yield nfs.download(key, tmpPath, {timeout: DOWNLOAD_TIMEOUT});
+    yield nfs.download(key, tmpPath, options);
  } catch (err) {
    debug('downloadAsReadStream() %s to %s error: %s', key, tmpPath, err.stack);
    cleanup();
--- a/controllers/web/badge.js
+++ b/controllers/web/badge.js
@@ -5,7 +5,7 @@
 * MIT Licensed
 *
 * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -18,6 +18,7 @@ var utility = require('utility');
 var util = require('util');
 var config = require('../../config');
 var packageService = require('../../services/package');
+var DownloadTotal = require('../../services/download_total');

 exports.version = function* () {
  var color = 'lightgrey';
@@ -40,9 +41,22 @@ exports.version = function* () {
  }

  var subject = config.badgeSubject.replace(/\-/g, '--');
+  if (this.query.subject) {
+    subject = this.query.subject.replace(/\-/g, '--');
+  }
  version = version.replace(/\-/g, '--');
  var style = this.query.style || 'flat-square';
  var url = util.format('https://img.shields.io/badge/%s-%s-%s.svg?style=%s',
-    subject, version, color, utility.encodeURIComponent(style));
+    utility.encodeURIComponent(subject), version, color, utility.encodeURIComponent(style));
+  this.redirect(url);
+};
+
+exports.downloads = function* () {
+  // https://img.shields.io/badge/downloads-100k/month-brightgreen.svg?style=flat-square
+  var name = this.params[0];
+  var count = yield DownloadTotal.getTotalByName(name);
+  var style = this.query.style || 'flat-square';
+  var url = util.format('https://img.shields.io/badge/downloads-%s-brightgreen.svg?style=%s',
+    count, utility.encodeURIComponent(style));
  this.redirect(url);
 };
--- a/controllers/web/dist.js
+++ b/controllers/web/dist.js
@@ -1,100 +0,0 @@
-/**!
- * cnpmjs.org - controllers/web/dist.js
- *
- * Copyright(c) cnpmjs.org and other contributors.
- * MIT Licensed
- *
- * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-"use strict";
-
-/**
- * Module dependencies.
- */
-
-var debug = require('debug')('cnpmjs.org:controllers:web:dist');
-var mime = require('mime');
-var urlparse = require('url').parse;
-var distService = require('../../services/dist');
-var config = require('../../config');
-var downloadAsReadStream = require('../utils').downloadAsReadStream;
-
-function padding(max, current, pad) {
-  pad = pad || ' ';
-  var left = max - current;
-  var str = '';
-  for (var i = 0; i < left; i++) {
-    str += pad;
-  }
-  return str;
-}
-
-exports.list = function* (next) {
-  var params = this.params;
-  var url = params[0];
-  if (!url) {
-    // GET /dist => /dist/
-    return this.redirect('/dist/');
-  }
-
-  var isDir = url[url.length - 1] === '/';
-  if (!isDir) {
-    return yield* download.call(this, next);
-  }
-
-  var items = yield* distService.listdir(url);
-  if (url === '/') {
-    // phantomjs/
-    items.push({
-      name: 'phantomjs/',
-      date: '',
-    });
-  }
-
-  yield this.render('dist', {
-    title: 'Mirror index of ' + config.disturl + url,
-    disturl: config.disturl,
-    dirname: url,
-    items: items,
-    padding: padding
-  });
-};
-
-function* download(next) {
-  var fullname = this.params[0];
-  var info = yield* distService.getfile(fullname);
-  debug('download %s got %j', fullname, info);
-  if (!info || !info.url) {
-    return yield* next;
-  }
-
-  if (/\.(html|js|css|json|txt)$/.test(fullname)) {
-    if (info.url.indexOf('http') === 0) {
-      info.url = urlparse(info.url).path;
-    }
-    return yield* pipe.call(this, info, false);
-  }
-
-  if (info.url.indexOf('http') === 0) {
-    return this.redirect(info.url);
-  }
-  yield* pipe.call(this, info, true);
-}
-
-function* pipe(info, attachment) {
-  debug('pipe %j, attachment: %s', info, attachment);
-  // download it from nfs
-  if (typeof info.size === 'number' && info.size > 0) {
-    this.length = info.size;
-  }
-  this.type = mime.lookup(info.url);
-  if (attachment) {
-    this.attachment(info.name);
-  }
-  if (info.sha1) {
-    this.etag = info.sha1;
-  }
-  this.body = yield* downloadAsReadStream(info.url);
-}
--- a/controllers/web/package/search.js
+++ b/controllers/web/package/search.js
@@ -6,7 +6,7 @@
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com> (http://deadhorse.me)
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 'use strict';
@@ -35,13 +35,12 @@ module.exports = function* search() {

  // return a json result
  if (this.query && this.query.type === 'json') {
-    this.body = {
+    this.jsonp = {
      keyword: word,
      match: match,
      packages: result.searchMatchs,
      keywords: result.keywordMatchs,
    };
-    this.type = 'application/json; charset=utf-8';
    return;
  }
  yield this.render('search', {
--- a/controllers/web/package/show.js
+++ b/controllers/web/package/show.js
@@ -90,7 +90,12 @@ module.exports = function* show(next) {
  pkg.package.fromNow = moment(pkg.publish_time).fromNow();
  pkg = pkg.package;
  pkg.users = users;
-  pkg.readme = renderMarkdown(pkg.readme || '');
+  if (pkg.readme && typeof pkg.readme !== 'string') {
+    pkg.readme = 'readme is not string: ' + JSON.stringify(pkg.readme);
+  } else {
+    pkg.readme = renderMarkdown(pkg.readme || '');
+  }
+
  if (!pkg.readme) {
    pkg.readme = pkg.description || '';
  }
@@ -115,22 +120,6 @@ module.exports = function* show(next) {
    }
  }

-  if (pkg.contributors) {
-    // registry.cnpmjs.org/compressible
-    if (!Array.isArray(pkg.contributors)) {
-      pkg.contributors = [pkg.contributors];
-    }
-    for (var i = 0; i < pkg.contributors.length; i++) {
-      var contributor = pkg.contributors[i];
-      if (contributor.email) {
-        contributor.gravatar = gravatar.url(contributor.email, {s: '50', d: 'retro'}, true);
-      }
-      if (config.packagePageContributorSearch || !contributor.url) {
-        contributor.url = '/~' + encodeURIComponent(contributor.name);
-      }
-    }
-  }
-
  if (pkg.repository === 'undefined') {
    pkg.repository = null;
  }
--- a/controllers/web/package/show_sync.js
+++ b/controllers/web/package/show_sync.js
@@ -1,5 +1,5 @@
 /**!
- * cnpmjs.org - controllers/web/package/show_sync.js
+ * cnpmjs.org - controllers/web/show_sync.js
 *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
@@ -20,8 +20,15 @@ module.exports = function* showSync() {
  if (!name) {
    return this.redirect('/');
  }
+  var type = 'package';
+  if (name.indexOf(':') > 0) {
+    var splits = name.split(':');
+    name = splits[1];
+    type = splits[0];
+  }
  yield this.render('sync', {
+    type: type,
    name: name,
-    title: 'Sync - ' + name,
+    title: 'Sync ' + type + ' - ' + name,
  });
 };
--- a/dispatch.js
+++ b/dispatch.js
@@ -1,12 +1,10 @@
 /**!
- * cnpmjs.org - dispatch.js
- *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com>
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -23,6 +21,9 @@ var config = require('./config');
 var workerPath = path.join(__dirname, 'worker.js');
 var syncPath = path.join(__dirname, 'sync');

+console.log('Starting cnpmjs.org ...\ncluster: %s\nadmins: %j\nscopes: %j\nsourceNpmRegistry: %s\nsyncModel: %s',
+  config.enableCluster, config.admins, config.scopes, config.sourceNpmRegistry, config.syncModel);
+
 if (config.enableCluster) {
  forkWorker();
  if (config.syncModel !== 'none') {
--- a/docs/registry-api.md
+++ b/docs/registry-api.md
@@ -19,22 +19,20 @@ All data is sent and received as JSON.
 $ curl -i https://registry.npmjs.org

 HTTP/1.1 200 OK
-Date: Tue, 05 Aug 2014 10:53:24 GMT
-Server: CouchDB/1.5.0 (Erlang OTP/R16B03)
-Content-Type: text/plain; charset=utf-8
-Cache-Control: max-age=60
-Content-Length: 258
-Accept-Ranges: bytes
-Via: 1.1 varnish
-Age: 11
-X-Served-By: cache-ty67-TYO
-X-Cache: HIT
-X-Cache-Hits: 1
-X-Timer: S1407236004.867906,VS0,VE0

-{"db_name":"registry","doc_count":90789,"doc_del_count":381,"update_seq":137250,"purge_seq":0,
-"compact_running":false,"disk_size":436228219,"data_size":332875061,
-"instance_start_time":"1405721973718703","disk_format_version":6,"committed_update_seq":137250}
+{
+  "db_name": "registry",
+  "doc_count": 123772,
+  "doc_del_count": 377,
+  "update_seq": 685591,
+  "purge_seq": 0,
+  "compact_running": false,
+  "disk_size": 634187899,
+  "data_size": 445454185,
+  "instance_start_time": "1420670152481614",
+  "disk_format_version": 6,
+  "committed_update_seq": 685591
+}
 ```

 ## Client Errors
@@ -61,22 +59,10 @@ $ curl -u "username:password" https://registry.npmjs.org
 ## Failed login limit

 ```bash
-$ curl -i -X PUT -u foo:pwd \
-  -d '{"name":"foo","email":"foo@bar.com","type":"user","roles":[]}' \
-  https://registry.npmjs.org/-/user/org.couchdb.user:foo/-rev/11-d226c6afa9286ab5b9eb858c429bdabf
+$ curl -i -X "GET" -u "foo:pwd" \
+    "https://registry.npmjs.com/-/user/org.couchdb.user:npm-user-service-testuser?write=true"

 HTTP/1.1 401 Unauthorized
-Date: Tue, 05 Aug 2014 15:33:25 GMT
-Server: CouchDB/1.5.0 (Erlang OTP/R14B04)
-Content-Type: text/plain; charset=utf-8
-Cache-Control: max-age=60
-Content-Length: 67
-Accept-Ranges: bytes
-Via: 1.1 varnish
-X-Served-By: cache-ty66-TYO
-X-Cache: MISS
-X-Cache-Hits: 0
-X-Timer: S1407252805.261390,VS0,VE434

 {"error":"unauthorized","reason":"Name or password is incorrect."}
 ```
@@ -101,14 +87,11 @@ X-Timer: S1407252805.261390,VS0,VE434
 GET /:package
 ```

-#### Response
+#### Response 200

 ```json
 HTTP/1.1 200 OK
 Etag: "8UDCP753LFXOG42NMX88JAN40"
-Content-Type: application/json
-Cache-Control: max-age=60
-Content-Length: 2243

 {
  "_id": "pedding",
@@ -246,6 +229,17 @@ Content-Length: 2243
 }
 ```

+#### Response 404
+
+```json
+HTTP/1.1 404 Object Not Found
+
+{
+  "error": "not_found",
+  "reason": "document not found"
+}
+```
+
 ### ~~Get a special version or tag package~~

 __deprecated__
@@ -254,7 +248,7 @@ __deprecated__
 GET /:package/:tag_or_version
 ```

-#### Reponse
+#### Reponse 200

 ```json
 HTTP/1.1 200 OK
@@ -745,9 +739,52 @@ HTTP/1.1 200 OK

 ## User

-* [Get a single user](/docs/registry-api.md#get-a-single-user)
-* [Add a new user](/docs/registry-api.md#add-a-new-user)
-* [Update a exists user](/docs/registry-api.md#update-a-exists-user)
+- [Auth user](/docs/registry-api.md#auth-user)
+- [Get a single user](/docs/registry-api.md#get-a-single-user)
+- [Add a new user](/docs/registry-api.md#add-a-new-user)
+- [Update a exists user](/docs/registry-api.md#update-a-exists-user)
+
+### Auth user
+
+* Authentication required.
+
+```
+GET /-/user/org.couchdb.user::username?write=true
+```
+
+#### Response 200
+
+```json
+HTTP/1.1 200 OK
+ETag: "5-a31b61ba3c50b50f7fcaf185e079e17a"
+
+{
+  "_id": "org.couchdb.user:npm-user-service-testuser",
+  "_rev": "5-a31b61ba3c50b50f7fcaf185e079e17a",
+  "password_scheme": "pbkdf2",
+  "iterations": 10,
+  "name": "npm-user-service-testuser",
+  "email": "fengmk2@gmail.com",
+  "type": "user",
+  "roles": [],
+  "date": "2015-01-04T08:28:51.378Z",
+  "password_scheme": "pbkdf2",
+  "iterations": 10,
+  "derived_key": "644157c126b93356e6eba2c59fdf1b7ec644ebf2",
+  "salt": "5d13874c0aa10751e35743bacd6eedd5"
+}
+```
+
+#### Response 401
+
+```json
+HTTP/1.1 401 Unauthorized
+
+{
+  "error": "unauthorized",
+  "reason": "Name or password is incorrect."
+}
+```

 ### Get a single user

@@ -755,7 +792,7 @@ HTTP/1.1 200 OK
 GET /-/user/org.couchdb.user::username
 ```

-#### Response
+#### Response 200

 ```json
 HTTP/1.1 200 OK
@@ -825,6 +862,17 @@ ETag: "32-984ee97e01aea166dcab6d1517c730e3"
 }
 ```

+#### Response 404
+
+```json
+HTTP/1.1 404 Object Not Found
+
+{
+  "error": "not_found",
+  "reason": "missing"
+}
+```
+
 ### Add a new user

 ```
@@ -845,7 +893,7 @@ PUT /-/user/org.couchdb.user::username
 }
 ```

-#### Response
+#### Response 201

 ```json
 Status: 201 Created
@@ -857,6 +905,19 @@ Status: 201 Created
 }
 ```

+#### Response 409
+
+User already exists
+
+```json
+HTTP/1.1 409 Conflict
+
+{
+  "error": "conflict",
+  "reason": "Document update conflict."
+}
+```
+
 ### Update a exists user

 * Authentication required.
--- a/docs/web/readme.md
+++ b/docs/web/readme.md
@@ -4,11 +4,10 @@ So `cnpm` is meaning: **Company npm**.

 ## Registry

-* Our public registry: [r.cnpmjs.org](http://r.cnpmjs.org), syncing from [registry.npmjs.org](http://registry.npmjs.org)
-* Current [cnpmjs.org](/) version: <span id="app-version"></span>
-* Mirror of [Node.js Manual & Documentation](/dist/latest/docs/api/index.html)
-* Mirror of [nodejs.org/dist](http://nodejs.org/dist): [/dist mirror](/dist)
-* Mirror of [phantomjs downloads](https://bitbucket.org/ariya/phantomjs/downloads): [phantomjs mirror](/dist/phantomjs/)
+- Our public registry: [r.cnpmjs.org](//r.cnpmjs.org), syncing from [registry.npmjs.org](//registry.npmjs.org)
+- [cnpmjs.org](/) version: <span id="app-version"></span>
+- [Node.js](https://nodejs.org) version: <span id="node-version"></span>
+- For developers behind the GFW, please visit [the Chinese mirror](https://npm.taobao.org). 中国用户请访问[国内镜像站点](https://npm.taobao.org/)。

 <table class="downloads">
  <tbody>
@@ -51,48 +50,52 @@ So `cnpm` is meaning: **Company npm**.
  </table>
 </div>

-Running on [Node.js](http://nodejs.org), version <span id="node-version"></span>.
-
 <script src="/js/readme.js"></script>

-## Version Badge
+## Badges

 Default style is `flat-square`.

-Badge URL: `http://cnpmjs.org/badge/v/cnpmjs.org.svg` ![cnpmjs.org-badge](http://cnpmjs.org/badge/v/cnpmjs.org.svg)
+### Version
+
+Badge URL: `http://cnpmjs.org/badge/v/cnpmjs.org.svg` ![cnpmjs.org-version-badge](//cnpmjs.org/badge/v/cnpmjs.org.svg)

 * `<0.1.0 & >=0.0.0`: ![red-badge](https://img.shields.io/badge/cnpm-0.0.1-red.svg?style=flat-square)
 * `<1.0.0 & >=0.1.0`: ![red-badge](https://img.shields.io/badge/cnpm-0.1.0-green.svg?style=flat-square)
 * `>=1.0.0`: ![red-badge](https://img.shields.io/badge/cnpm-1.0.0-blue.svg?style=flat-square)

+### Downloads
+
+Badge URL: `http://cnpmjs.org/badge/d/cnpmjs.org.svg` ![cnpmjs.org-download-badge](//cnpmjs.org/badge/d/cnpmjs.org.svg)
+
 ## Usage

 use our npm client [cnpm](https://github.com/cnpm/cnpm)(More suitable with cnpmjs.org and gzip support), you can get our client through npm:

-```
-npm install -g cnpm --registry=http://r.cnpmjs.org
+```bash
+$ npm install -g cnpm --registry=http://registry.npm.taobao.org
 ```

 Or you can alias NPM to use it:

 ```bash
-alias cnpm="npm --registry=http://r.cnpmjs.org \
+alias cnpm="npm --registry=http://registry.npm.taobao.org \
 --cache=$HOME/.npm/.cache/cnpm \
--disturl=http://cnpmjs.org/dist \
+--disturl=http://registry.npm.taobao.org/mirrors/node \
 --userconfig=$HOME/.cnpmrc"

 #Or alias it in .bashrc or .zshrc
-$ echo '\n#alias for cnpm\nalias cnpm="npm --registry=http://r.cnpmjs.org \
+$ echo '\n#alias for cnpm\nalias cnpm="npm --registry=http://registry.npm.taobao.org \
  --cache=$HOME/.npm/.cache/cnpm \
-  --disturl=http://cnpmjs.org/dist \
+  --disturl=http://registry.npm.taobao.org/mirrors/node \
  --userconfig=$HOME/.cnpmrc"' >> ~/.zshrc && source ~/.zshrc
 ```

 ### install

-Install package from [r.cnpmjs.org](http://r.cnpmjs.org). When installing a package or version does not exist, it will try to install from the official registry([registry.npmjs.org](http://registry.npmjs.org)), and sync this package to cnpm in the backend.
+Install package from [r.cnpmjs.org](//r.cnpmjs.org). When installing a package or version does not exist, it will try to install from the official registry([registry.npmjs.org](//registry.npmjs.org)), and sync this package to cnpm in the backend.

-```
+```bash
 $ cnpm install [name]
 ```

@@ -104,10 +107,10 @@ Only `cnpm` cli has this command. Meaning sync package from source npm.
 $ cnpm sync connect
 ```

-sync package on web: [cnpmjs.org/sync/connect](http://cnpmjs.org/sync/connect)
+sync package on web: [sync/connect](/sync/connect)

 ```bash
-$ open http://cnpmjs.org/sync/connect
+$ open http://registry.npm.taobao.org/sync/connect
 ```

 ### publish / unpublish
@@ -137,4 +140,8 @@ Release [History](/history).

 ## npm and cnpm relation

-![npm&cnpm](https://docs.google.com/drawings/d/12QeQfGalqjsB77mRnf5Iq5oSXHCIUTvZTwECMonqCmw/pub?w=383&h=284)
+![npm&cnpm](https://dn-cnpm.qbox.me/cnpm-npm-relation.png)
+
+## Sponsors
+
+- [![UCloud云计算](https://www.ucloud.cn/static/style/images/about/logo.png)](http://www.ucloud.cn?sem=sdk-CNPMJS)
--- a/index.js
+++ b/index.js
@@ -1,6 +1,4 @@
 /**!
- * cnpmjs.org - index.js
- *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
 *
--- a/lib/common.js
+++ b/lib/common.js
@@ -27,6 +27,11 @@ exports.getTarballFilepath = function (filename) {
 };

 exports.getCDNKey = function (name, filename) {
+  // if name is scope package name, need to auto fix filename as a scope package file name
+  // e.g.: @scope/foo, filename: foo-1.0.0.tgz => filename: @scope/foo-1.0.0.tgz
+  if (name[0] === '@' && filename[0] !== '@') {
+    filename = name.split('/')[0] + '/' + filename;
+  }
  return '/' + name + '/-/' + filename;
 };

@@ -56,3 +61,20 @@ exports.isMaintainer = function (user, maintainers) {

  return match.length > 0;
 };
+
+exports.isLocalModule = function (mods) {
+  for (var i = 0; i < mods.length; i++) {
+    var r = mods[i];
+    if (r.package && r.package._publish_on_cnpm) {
+      return true;
+    }
+  }
+  return false;
+};
+
+exports.isPrivateScopedPackage = function (name) {
+  if (name[0] !== '@') {
+    return false;
+  }
+  return config.scopes.indexOf(name.split('/')[0]) >= 0;
+};
--- a/middleware/auth.js
+++ b/middleware/auth.js
@@ -16,6 +16,7 @@

 var debug = require('debug')('cnpmjs.org:middleware:auth');
 var UserService = require('../services/user');
+var config = require('../config');

 /**
 * Parse the request authorization
@@ -30,12 +31,12 @@ module.exports = function () {
    authorization = authorization.trim();
    debug('%s %s with %j', this.method, this.url, authorization);
    if (!authorization) {
-      return yield* next;
+      return yield* unauthorized.call(this, next);
    }

    authorization = new Buffer(authorization, 'base64').toString().split(':');
    if (authorization.length !== 2) {
-      return yield* next;
+      return yield* unauthorized.call(this, next);
    }

    var username = authorization[0];
@@ -52,7 +53,7 @@ module.exports = function () {

    if (!row) {
      debug('auth fail user: %j, headers: %j', row, this.header);
-      return yield* next;
+      return yield* unauthorized.call(this, next);
    }

    this.user.name = row.login;
@@ -62,3 +63,19 @@ module.exports = function () {
    yield* next;
  };
 };
+
+function* unauthorized(next) {
+  if (!config.alwaysAuth || this.method !== 'GET') {
+    return yield* next;
+  }
+  this.status = 401;
+  this.set('WWW-Authenticate', 'Basic realm="sample"');
+  if (this.accepts(['html', 'json']) === 'json') {
+    this.body = {
+      error: 'unauthorized',
+      reason: 'login first'
+    };
+  } else {
+    this.body = 'login first';
+  }
+}
--- a/middleware/exists_package.js
+++ b/middleware/exists_package.js
@@ -0,0 +1,30 @@
+/**!
+ * cnpmjs.org - middleware/exists_package.js
+ *
+ * Copyright(c) fengmk2 and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var packageService = require('../services/package');
+
+module.exports = function* (next) {
+  var name = this.params.name || this.params[0];
+  var pkg = yield packageService.getLatestModule(name);
+  if (pkg) {
+    return yield* next;
+  }
+  this.status = 404;
+  this.body = {
+    error: 'not_found',
+    reason: 'document not found'
+  };
+};
--- a/middleware/limit.js
+++ b/middleware/limit.js
@@ -16,7 +16,6 @@

 var config = require('../config');
 var limit = require('koa-limit');
-var store = require('../common/redis');

 var limitConfig = config.limit;

@@ -25,10 +24,5 @@ if (!limitConfig.enable) {
    yield *next;
  };
 } else {
-
-  if (!config.debug) {
-    limitConfig.store = store;
-  }
-
  module.exports = limit(limitConfig);
 }
--- a/middleware/login.js
+++ b/middleware/login.js
@@ -34,7 +34,7 @@ module.exports = function *login(next) {
    this.status = 401;
    this.body = {
      error: 'unauthorized',
-      reason: 'Login first.'
+      reason: 'Login first'
    };
    return;
  }
--- a/middleware/opensearch.js
+++ b/middleware/opensearch.js
@@ -22,7 +22,7 @@ var template = '<?xml version="1.0" encoding="UTF-8"?>\
    <Url method="get" type="text/html" template="http://${host}/browse/keyword/{searchTerms}"/>\
 </OpenSearchDescription>';

-module.exports = function *publishable(next) {
+module.exports = function *opensearch(next) {
  if (this.path === '/opensearch.xml') {
    this.type = 'text/xml';
    this.charset = 'utf-8';
--- a/middleware/proxy_to_npm.js
+++ b/middleware/proxy_to_npm.js
@@ -0,0 +1,59 @@
+/**!
+ * cnpmjs.org - middleware/proxy_to_npm.js
+ *
+ * Copyright(c) Alibaba Group Holding Limited.
+ *
+ * Authors:
+ *   苏千 <suqian.yf@alipay.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var debug = require('debug')('cnpmjs.org:middleware:proxy_to_npm');
+var config = require('../config');
+
+module.exports = function (options) {
+  var redirectUrl = config.sourceNpmRegistry;
+  var proxyUrls = [
+    // /:pkg, dont contains scoped package
+    /^\/[\w\-\.]+$/,
+    // /-/package/:pkg/dist-tags
+    /^\/\-\/package\/[\w\-\.]+\/dist-tags/,
+  ];
+  if (options && options.isWeb) {
+    redirectUrl = redirectUrl.replace('//registry.', '//');
+    proxyUrls = [
+      // /package/:pkg
+      /^\/package\/[\w\-\.]+$/,
+    ];
+  }
+  return function* proxyToNpm(next) {
+    if (config.syncModel !== 'none') {
+      return yield* next;
+    }
+    // only proxy read requests
+    if (this.method !== 'GET' && this.method !== 'HEAD') {
+      return yield* next;
+    }
+
+    var pathname = this.path;
+    var match;
+    for (var i = 0; i < proxyUrls.length; i++) {
+      match = proxyUrls[i].test(pathname);
+      if (match) {
+        break;
+      }
+    }
+    if (!match) {
+      return yield* next;
+    }
+
+    var url = redirectUrl + this.url;
+    debug('proxy to %s', url);
+    this.redirect(url);
+  };
+};
--- a/middleware/publishable.js
+++ b/middleware/publishable.js
@@ -29,9 +29,8 @@ module.exports = function *publishable(next) {
    return;
  }

-  // public mode, all user have permission to publish
-  // but if `config.scopes` exist, only can publish with scopes in `config.scope`
-  // if `config.forcePublishWithScope` set to true, only admins can publish without scope
+  // public mode, all user have permission to publish `scoped package`
+  // and only can publish with scopes in `ctx.user.scopes`, default is `config.scopes`

  var name = this.params.name || this.params[0];

@@ -49,7 +48,7 @@ module.exports = function *publishable(next) {
  }

  // none-scope
-  if (checkNoneScope(this)) {
+  if (checkNoneScope(name, this)) {
    return yield* next;
  }
 };
@@ -82,19 +81,21 @@ function checkScope(name, ctx) {
 * check if user have permission to publish without scope
 */

-function checkNoneScope(ctx) {
-  if (!config.scopes
-    || !config.scopes.length
-    || !config.forcePublishWithScope) {
-    return true;
-  }
-
-  // only admins can publish or unpublish non-scope modules
-  if (ctx.user.isAdmin) {
+function checkNoneScope(name, ctx) {
+  // admins unpublished everything
+  if (ctx.user.isAdmin && ctx.method === 'DELETE') {
    return true;
  }

  ctx.status = 403;
+  if (ctx.user.scopes.length === 0) {
+    ctx.body = {
+      error: 'no_perms',
+      reason: 'can\'t publish non-scoped package, please set `config.scopes`'
+    };
+    return;
+  }
+
  ctx.body = {
    error: 'no_perms',
    reason: 'only allow publish with ' + ctx.user.scopes.join(', ') + ' scope(s)'
--- a/middleware/sync_by_install.js
+++ b/middleware/sync_by_install.js
@@ -22,17 +22,17 @@ var config = require('../config');

 module.exports = function* syncByInstall(next) {
  this.allowSync = false;
-  if (!config.syncByInstall || !config.enablePrivate) {
+  if (!config.syncByInstall) {
    // only config.enablePrivate should enable sync on install
    return yield* next;
  }
-  // request not by node, consider it request from web
+  // request not by node, consider it request from web, dont sync
  var ua = this.get('user-agent');
  if (!ua || ua.indexOf('node') < 0) {
    return yield* next;
  }

-  // if request with `/xxx?write=true`, meaning the read request using for write
+  // if request with `/xxx?write=true`, meaning the read request using for write, dont sync
  if (this.query.write) {
    return yield* next;
  }
--- a/models/dist_dir.js
+++ b/models/dist_dir.js
@@ -1,64 +0,0 @@
-/**!
- * cnpmjs.org - models/dist_dir.js
- *
- * Copyright(c) fengmk2 and other contributors.
- * MIT Licensed
- *
- * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-/*
-CREATE TABLE IF NOT EXISTS `dist_dir` (
- `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT 'primary key',
- `gmt_create` datetime NOT NULL COMMENT 'create time',
- `gmt_modified` datetime NOT NULL COMMENT 'modified time',
- `name` varchar(200) NOT NULL COMMENT 'dir name',
- `parent` varchar(200) NOT NULL COMMENT 'parent dir' DEFAULT '/',
- `date` varchar(20) COMMENT '02-May-2014 01:06',
- PRIMARY KEY (`id`),
- UNIQUE KEY `dist_dir_parent_name` (`parent`, `name`),
- KEY `dist_dir_gmt_modified` (`gmt_modified`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='dist dir info';
- */
-
-module.exports = function (sequelize, DataTypes) {
-  return sequelize.define('DistDir', {
-    name: {
-      type: DataTypes.STRING(200),
-      allowNull: false,
-      comment: 'dir name',
-    },
-    parent: {
-      type: DataTypes.STRING(200),
-      allowNull: false,
-      defaultValue: '/',
-      comment: 'parent dir',
-    },
-    date: {
-      type: DataTypes.STRING(20),
-      allowNull: false,
-      comment: '02-May-2014 01:06'
-    }
-  }, {
-    tableName: 'dist_dir',
-    comment: 'dist dir info',
-    indexes: [
-      {
-        unique: true,
-        fields: ['parent', 'name']
-      },
-      {
-        fields: ['gmt_modified']
-      }
-    ],
-    classMethods: {
-    }
-  });
-};
--- a/models/dist_file.js
+++ b/models/dist_file.js
@@ -1,82 +0,0 @@
-/**!
- * cnpmjs.org - models/dist_file.js
- *
- * Copyright(c) fengmk2 and other contributors.
- * MIT Licensed
- *
- * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-/*
-CREATE TABLE IF NOT EXISTS `dist_file` (
- `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT 'primary key',
- `gmt_create` datetime NOT NULL COMMENT 'create time',
- `gmt_modified` datetime NOT NULL COMMENT 'modified time',
- `name` varchar(100) NOT NULL COMMENT 'file name',
- `parent` varchar(200) NOT NULL COMMENT 'parent dir' DEFAULT '/',
- `date` varchar(20) COMMENT '02-May-2014 01:06',
- `size` int(10) unsigned NOT NULL COMMENT 'file size' DEFAULT '0',
- `sha1` varchar(40) COMMENT 'sha1 hex value',
- `url` varchar(2048),
- PRIMARY KEY (`id`),
- UNIQUE KEY `dist_file_parent_name` (`parent`, `name`),
- KEY `dist_file_gmt_modified` (`gmt_modified`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='dist file info';
- */
-
-module.exports = function (sequelize, DataTypes) {
-  return sequelize.define('DistFile', {
-    name: {
-      type: DataTypes.STRING(200),
-      allowNull: false,
-      comment: 'dir name',
-    },
-    parent: {
-      type: DataTypes.STRING(200),
-      allowNull: false,
-      defaultValue: '/',
-      comment: 'parent dir',
-    },
-    date: {
-      type: DataTypes.STRING(20),
-      allowNull: false,
-      comment: '02-May-2014 01:06'
-    },
-    size: {
-      type: DataTypes.INTEGER(10).UNSIGNED,
-      allowNull: false,
-      defaultValue: 0,
-      comment: 'file size'
-    },
-    sha1: {
-      type: DataTypes.STRING(40),
-      allowNull: false,
-      comment: 'sha1 hex value'
-    },
-    url: {
-      type: DataTypes.STRING(2048),
-      allowNull: false
-    }
-  }, {
-    tableName: 'dist_file',
-    comment: 'dist file info',
-    indexes: [
-      {
-        unique: true,
-        fields: ['parent', 'name']
-      },
-      {
-        fields: ['gmt_modified']
-      }
-    ],
-    classMethods: {
-    }
-  });
-};
--- a/models/download_total.js
+++ b/models/download_total.js
@@ -64,192 +64,192 @@ module.exports = function (sequelize, DataTypes) {
      comment: 'module name',
    },
    date: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      comment: 'YYYYMM format',
    },
    d01: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '01 download count',
    },
    d02: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '02 download count',
    },
    d03: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '03 download count',
    },
    d04: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '04 download count',
    },
    d05: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '05 download count',
    },
    d06: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '06 download count',
    },
    d07: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '07 download count',
    },
    d08: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '08 download count',
    },
    d09: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '09 download count',
    },
    d10: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '10 download count',
    },
    d11: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '11 download count',
    },
    d12: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '12 download count',
    },
    d13: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '13 download count',
    },
    d14: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '14 download count',
    },
    d15: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '15 download count',
    },
    d16: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '16 download count',
    },
    d17: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '17 download count',
    },
    d18: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '18 download count',
    },
    d19: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '19 download count',
    },
    d20: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '20 download count',
    },
    d21: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '21 download count',
    },
    d22: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '22 download count',
    },
    d23: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '23 download count',
    },
    d24: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '24 download count',
    },
    d25: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '25 download count',
    },
    d26: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '26 download count',
    },
    d27: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '27 download count',
    },
    d28: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '28 download count',
    },
    d29: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '29 download count',
    },
    d30: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '30 download count',
    },
    d31: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: '31 download count',
--- a/models/index.js
+++ b/models/index.js
@@ -1,11 +1,9 @@
 /**!
- * cnpmjs.org - models/index.js
- *
 * Copyright(c) fengmk2 and other contributors.
 * MIT Licensed
 *
 * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -36,11 +34,14 @@ module.exports = {
  User: load('user'),
  Total: load('total'),
  DownloadTotal: load('download_total'),
-  DistFile: load('dist_file'),
-  DistDir: load('dist_dir'),

  query: function* (sql, args) {
-    return yield this.sequelize.query(sql, null, {raw: true}, args);
+    var options = { replacements: args };
+    var data = yield this.sequelize.query(sql, options).spread();
+    if (/select /i.test(sql)) {
+      return data[0];
+    }
+    return data[1];
  },
  queryOne: function* (sql, args) {
    var rows = yield* this.query(sql, args);
--- a/models/init_script.js
+++ b/models/init_script.js
@@ -18,12 +18,20 @@ var config = require('../config');

 config.database.logging = console.log;

-// $ node --harmony models/init_script.js <force> <dialect>
+// $ node --harmony models/init_script.js <force> <dialect> <port> <username>
 var force = process.argv[2] === 'true';
 var dialect = process.argv[3];
 if (dialect) {
  config.database.dialect = dialect;
 }
+var port = process.argv[4];
+if (port) {
+  config.database.port = parseInt(port);
+}
+var username = process.argv[5];
+if (username) {
+  config.database.username = username;
+}

 var models = require('./');

@@ -44,5 +52,5 @@ models.sequelize.sync({ force: force })
  .catch(function (err) {
    console.error('[models/init_script.js] sequelize sync fail');
    console.error(err);
-    throw err;
+    process.exit(1);
  });
--- a/models/module.js
+++ b/models/module.js
@@ -14,8 +14,6 @@
 * Module dependencies.
 */

-var utils = require('./utils');
-
 /*
 CREATE TABLE IF NOT EXISTS `module` (
  `id` INTEGER NOT NULL auto_increment ,
@@ -73,12 +71,12 @@ module.exports = function (sequelize, DataTypes) {
      allowNull: true,
    },
    dist_size: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
    },
    publish_time: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: true,
    }
  }, {
--- a/models/tag.js
+++ b/models/tag.js
@@ -47,7 +47,7 @@ module.exports = function (sequelize, DataTypes) {
      comment: 'module version',
    },
    module_id: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      comment: 'module id'
    }
--- a/models/total.js
+++ b/models/total.js
@@ -40,49 +40,49 @@ module.exports = function (sequelize, DataTypes) {
      comment: 'total name'
    },
    module_delete: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: 'module delete count',
    },
    last_sync_time: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: 'last timestamp sync from official registry',
    },
    last_exist_sync_time: {
-      type: DataTypes.BIGINT(20).UNSIGNED,
+      type: DataTypes.BIGINT(20),
      allowNull: false,
      defaultValue: 0,
      comment: 'last timestamp sync exist packages from official registry',
    },
    sync_status: {
-      type: 'TINYINT',
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
      comment: 'system sync from official registry status',
    },
    need_sync_num: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
      comment: 'how many packages need to be sync',
    },
    success_sync_num: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
      comment: 'how many packages sync success at this time',
    },
    fail_sync_num: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
      comment: 'how many packages sync fail at this time',
    },
    left_sync_num: {
-      type: DataTypes.INTEGER.UNSIGNED,
+      type: DataTypes.INTEGER,
      allowNull: false,
      defaultValue: 0,
      comment: 'how many packages left to be sync',
--- a/models/user.js
+++ b/models/user.js
@@ -117,6 +117,9 @@ module.exports = function (sequelize, DataTypes) {
        return yield this.find({ where: { name: name } });
      },
      listByNames: function* (names) {
+        if (!names || names.length === 0) {
+          return [];
+        }
        return yield this.findAll({
          where: {
            name: {
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "cnpmjs.org",
-  "version": "2.0.0-rc.4",
+  "version": "2.2.0",
  "description": "Private npm registry and web for Enterprise, base on MySQL and Simple Store Service",
  "main": "index.js",
  "scripts": {
@@ -9,43 +9,51 @@
    "status": "./bin/nodejsctl status",
    "stop": "./bin/nodejsctl stop"
  },
+  "bin": {
+    "cnpmjs.org": "bin/cli.js"
+  },
  "dependencies": {
    "agentkeepalive": "~1.2.0",
-    "bluebird": "~2.3.10",
+    "bluebird": "~2.9.7",
    "bytes": "~1.0.0",
    "cfork": "~1.2.2",
-    "cheerio": "~0.17.0",
-    "co": "~3.1.0",
-    "co-defer": "~0.1.1",
+    "co": "~4.3.1",
+    "co-defer": "~1.0.0",
    "co-gather": "~0.0.1",
-    "co-redis": "~1.1.0",
    "co-sleep": "~0.0.1",
+    "commander": "~2.6.0",
    "copy-to": "~2.0.1",
-    "debug": "~2.1.0",
+    "debug": "~2.1.1",
    "error-formater": "~1.0.3",
-    "fs-cnpm": "~1.1.0",
+    "fs-cnpm": "~1.2.0",
    "giturl": "~0.0.3",
-    "graceful": "~0.1.0",
+    "gnode": "~0.1.1",
+    "graceful": "~1.0.0",
    "gravatar": "~1.1.0",
-    "humanize-ms": "~1.0.0",
+    "humanize-ms": "~1.0.1",
    "humanize-number": "~0.0.2",
-    "koa": "~0.13.0",
+    "kcors": "~1.0.1",
+    "koa": "~0.17.0",
    "koa-limit": "~1.0.2",
-    "koa-markdown": "~1.1.0",
-    "koa-middlewares": "~1.4.1",
-    "mime": "~1.2.11",
+    "koa-markdown": "~2.0.1",
+    "koa-middlewares": "~2.1.0",
+    "koa-mock": "~1.1.4",
+    "koa-safe-jsonp": "~0.3.0",
+    "markdown-it": "~3.0.6",
+    "mime": "~1.3.4",
    "mini-logger": "~1.0.0",
    "mkdirp": "~0.5.0",
-    "moment": "~2.8.3",
-    "mysql": "~2.5.2",
+    "moment": "~2.9.0",
+    "mysql": "~2.5.4",
    "nodemailer": "~1.3.0",
-    "redis": "~0.12.1",
-    "remarkable": "~1.5.0",
-    "semver": "~4.1.0",
-    "sequelize": "~2.0.0-rc3",
-    "thunkify-wrap": "~1.0.3",
-    "urllib": "~2.0.2",
-    "utility": "~1.2.0"
+    "semver": "~4.2.0",
+    "sequelize": "~2.0.1",
+    "thunkify-wrap": "~1.0.4",
+    "treekill": "~1.0.0",
+    "tunnel-agent": "^0.4.0",
+    "urllib": "~2.2.2",
+    "utility": "~1.3.0",
+    "xss": "~0.1.20"
  },
  "devDependencies": {
    "autod": "*",
@@ -54,11 +62,12 @@
    "contributors": "*",
    "istanbul-harmony": "*",
    "jshint": "*",
-    "koa-mock": "^1.0.2",
    "mm": "*",
    "mocha": "*",
    "node-dev": "*",
    "pedding": "*",
+    "pg": "~4.2.0",
+    "pg-hstore": "~2.3.1",
    "should": "~4.0.4",
    "should-http": "*",
    "sqlite3": "*",
@@ -82,7 +91,7 @@
    "registry"
  ],
  "engines": {
-    "node": ">= 0.11.14"
+    "node": ">= 1.0.0"
  },
  "author": [
    "fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)",
--- a/public/css/atom-dark.css
+++ b/public/css/atom-dark.css
@@ -0,0 +1,253 @@
+.editor-colors {
+  background-color: #1d1f21;
+  color: #c5c8c6;
+}
+.editor .invisible-character {
+  color: rgba(197, 200, 198, 0.2);
+}
+.editor .indent-guide {
+  color: rgba(197, 200, 198, 0.2);
+}
+.editor .wrap-guide {
+  background-color: rgba(197, 200, 198, 0.1);
+}
+.editor .gutter {
+  background-color: #292c2f;
+}
+.editor .gutter .cursor-line {
+  background-color: rgba(255, 255, 255, 0.14);
+}
+.editor .line-number.cursor-line-no-selection {
+  background-color: rgba(255, 255, 255, 0.14);
+}
+.editor .gutter .line-number.folded,
+.editor .gutter .line-number:after,
+.editor .fold-marker:after {
+  color: #fba0e3;
+}
+.editor .invisible {
+  color: #c5c8c6;
+}
+.editor .cursor {
+  border-color: #ffffff;
+}
+.editor .selection .region {
+  background-color: #444444;
+}
+.editor .source.gfm {
+  color: #999;
+}
+.editor .gfm .markup.heading {
+  color: #eee;
+}
+.editor .gfm .link {
+  color: #555;
+}
+.editor .gfm .variable.list,
+.editor .gfm .support.quote {
+  color: #555;
+}
+.editor .gfm .link .entity {
+  color: #ddd;
+}
+.editor .gfm .raw {
+  color: #aaa;
+}
+.editor .markdown .paragraph {
+  color: #999;
+}
+.editor .markdown .heading {
+  color: #eee;
+}
+.editor .markdown .raw {
+  color: #aaa;
+}
+.editor .markdown .link {
+  color: #555;
+}
+.editor .markdown .link .string {
+  color: #555;
+}
+.editor .markdown .link .string.title {
+  color: #ddd;
+}
+.editor .search-results .marker .region {
+  background-color: transparent;
+  border: 1px solid #888888;
+}
+.editor .search-results .marker.current-result .region {
+  border: 1px solid #ffffff;
+}
+.bracket-matcher {
+  border-bottom: 1px solid #f8de7e;
+  margin-top: -1px;
+  opacity: .7;
+}
+.comment {
+  color: #7C7C7C;
+}
+.entity {
+  color: #FFD2A7;
+}
+.entity.name.type {
+  text-decoration: underline;
+  color: #FFFFB6;
+}
+.entity.other.inherited-class {
+  color: #9B5C2E;
+}
+.keyword {
+  color: #96CBFE;
+}
+.keyword.control {
+  color: #96CBFE;
+}
+.keyword.operator {
+  color: #EDEDED;
+}
+.storage {
+  color: #CFCB90;
+}
+.storage.modifier {
+  color: #96CBFE;
+}
+.constant {
+  color: #99CC99;
+}
+.constant.numeric {
+  color: #FF73FD;
+}
+.variable {
+  color: #C6C5FE;
+}
+.invalid.deprecated {
+  text-decoration: underline;
+  color: #FD5FF1;
+}
+.invalid.illegal {
+  color: #FD5FF1;
+  background-color: rgba(86, 45, 86, 0.75);
+}
+.source .string .source,
+.source .string .meta.embedded.line {
+  color: #EDEDED;
+}
+.source .string .punctuation.section.embedded {
+  color: #00A0A0;
+}
+.source .string .punctuation.section.embedded .source {
+  color: #00A0A0;
+}
+.string {
+  color: #A8FF60;
+}
+.string .constant {
+  color: #00A0A0;
+}
+.string.regexp {
+  color: #E9C062;
+}
+.string.regexp .constant.character.escape,
+.string.regexp .source.ruby.embedded,
+.string.regexp .string.regexp.arbitrary-repitition {
+  color: #FF8000;
+}
+.string.regexp.group {
+  color: #C6A24F;
+  background-color: rgba(255, 255, 255, 0.06);
+}
+.string.regexp.character-class {
+  color: #B18A3D;
+}
+.string .variable {
+  color: #8A9A95;
+}
+.support {
+  color: #FFFFB6;
+}
+.support.function {
+  color: #DAD085;
+}
+.support.constant {
+  color: #FFD2A7;
+}
+.support.type.property-name.css {
+  color: #EDEDED;
+}
+.source .entity.name.tag,
+.source .entity.other.attribute-name,
+.meta.tag.inline,
+.meta.tag.inline .entity {
+  color: #96CBFE;
+}
+.entity.other.attribute-name {
+  color: #FFD7B1;
+}
+.entity.name.tag.namespace,
+.entity.other.attribute-name.namespace {
+  color: #E18964;
+}
+.meta.preprocessor.c {
+  color: #8996A8;
+}
+.meta.preprocessor.c .keyword {
+  color: #AFC4DB;
+}
+.meta.cast {
+  color: #676767;
+}
+.meta.sgml.html .meta.doctype,
+.meta.sgml.html .meta.doctype .entity,
+.meta.sgml.html .meta.doctype .string,
+.meta.xml-processing,
+.meta.xml-processing .entity,
+.meta.xml-processing .string {
+  color: #494949;
+}
+.meta.tag,
+.meta.tag .entity {
+  color: #96CBFE;
+}
+.meta.selector.css .entity.name.tag {
+  text-decoration: underline;
+  color: #96CBFE;
+}
+.meta.selector.css .entity.other.attribute-name.tag.pseudo-class {
+  color: #8F9D6A;
+}
+.meta.selector.css .entity.other.attribute-name.id {
+  color: #8B98AB;
+}
+.meta.selector.css .entity.other.attribute-name.class {
+  color: #62B1FE;
+}
+.meta.property-group .support.constant.property-value.css,
+.meta.property-value .support.constant.property-value.css {
+  color: #F9EE98;
+}
+.meta.preprocessor.at-rule .keyword.control.at-rule {
+  color: #8693A5;
+}
+.meta.property-value .support.constant.named-color.css,
+.meta.property-value .constant {
+  color: #87C38A;
+}
+.meta.constructor.argument.css {
+  color: #8F9D6A;
+}
+.meta.diff,
+.meta.diff.header {
+  color: #F8F8F8;
+  background-color: #0E2231;
+}
+.meta.separator {
+  color: #60A633;
+  background-color: #242424;
+}
+.meta.line.entry.logfile,
+.meta.line.exit.logfile {
+  background-color: rgba(238, 238, 238, 0.16);
+}
+.meta.line.error.logfile {
+  background-color: #751012;
+}
--- a/public/css/atom-light.css
+++ b/public/css/atom-light.css
@@ -0,0 +1,185 @@
+.editor,
+.editor .gutter {
+  background-color: #ffffff;
+  color: #555555;
+}
+.editor .invisible-character {
+  color: rgba(85, 85, 85, 0.2);
+}
+.editor .indent-guide {
+  color: rgba(85, 85, 85, 0.2);
+}
+.editor .wrap-guide {
+  background-color: rgba(85, 85, 85, 0.2);
+}
+.editor .gutter {
+  color: #555555;
+  background: #ffffff;
+}
+.editor .gutter .line-number.folded,
+.editor .gutter .line-number:after,
+.editor .fold-marker:after {
+  color: #e87b00;
+}
+.editor .invisible {
+  color: #555;
+}
+.editor .selection .region {
+  background-color: #e1e1e1;
+}
+.editor.is-focused .cursor {
+  border-color: #000000;
+}
+.editor.is-focused .selection .region {
+  background-color: #afc4da;
+}
+.editor.is-focused .line-number.cursor-line-no-selection,
+.editor.is-focused .line.cursor-line {
+  background-color: rgba(255, 255, 134, 0.34);
+}
+.editor .comment {
+  color: #999988;
+  font-style: italic;
+}
+.editor .string {
+  color: #D14;
+}
+.editor .source .string .source,
+.editor .source .string .meta.embedded.line {
+  color: #5A5A5A;
+}
+.editor .source .string .punctuation.section.embedded {
+  color: #920B2D;
+}
+.editor .source .string .punctuation.section.embedded .source {
+  color: #920B2D;
+}
+.editor .constant.numeric {
+  color: #D14;
+}
+.editor .constant.language {
+  color: #606aa1;
+}
+.editor .constant.character,
+.editor .constant.other {
+  color: #606aa1;
+}
+.editor .constant.symbol {
+  color: #990073;
+}
+.editor .constant.numeric.line-number.find-in-files .match {
+  color: rgba(143, 190, 0, 0.63);
+}
+.editor .variable {
+  color: #008080;
+}
+.editor .variable.parameter {
+  color: #606aa1;
+}
+.editor .keyword {
+  color: #222;
+  font-weight: bold;
+}
+.editor .keyword.unit {
+  color: #445588;
+}
+.editor .keyword.special-method {
+  color: #0086B3;
+}
+.editor .storage {
+  color: #222;
+}
+.editor .storage.type {
+  color: #222;
+}
+.editor .entity.name.class {
+  text-decoration: underline;
+  color: #606aa1;
+}
+.editor .entity.other.inherited-class {
+  text-decoration: underline;
+  color: #606aa1;
+}
+.editor .entity.name.function {
+  color: #900;
+}
+.editor .entity.name.tag {
+  color: #008080;
+}
+.editor .entity.other.attribute-name {
+  color: #458;
+  font-weight: bold;
+}
+.editor .entity.name.filename.find-in-files {
+  color: #E6DB74;
+}
+.editor .support.constant,
+.editor .support.function,
+.editor .support.type {
+  color: #458;
+}
+.editor .support.class {
+  color: #008080;
+}
+.editor .invalid {
+  color: #F8F8F0;
+  background-color: #00A8C6;
+}
+.editor .invalid.deprecated {
+  color: #F8F8F0;
+  background-color: #8FBE00;
+}
+.editor .meta.structure.dictionary.json > .string.quoted.double.json,
+.editor .meta.structure.dictionary.json > .string.quoted.double.json .punctuation.string {
+  color: #000080;
+}
+.editor .meta.structure.dictionary.value.json > .string.quoted.double.json {
+  color: #d14;
+}
+.editor .meta.diff,
+.editor .meta.diff.header {
+  color: #75715E;
+}
+.editor .css.support.property-name {
+  font-weight: bold;
+  color: #333;
+}
+.editor .css.constant {
+  color: #099;
+}
+.editor .source.gfm {
+  color: #444;
+}
+.editor .gfm .markup.heading {
+  color: #111;
+}
+.editor .gfm .link {
+  color: #888;
+}
+.editor .gfm .variable.list {
+  color: #888;
+}
+.editor .markdown .paragraph {
+  color: #444;
+}
+.editor .markdown .heading {
+  color: #111;
+}
+.editor .markdown .link {
+  color: #888;
+}
+.editor .markdown .link .string {
+  color: #888;
+}
+.editor .search-results .marker .region {
+  background-color: transparent;
+  border: 1px solid #999999;
+}
+.editor .search-results .marker.current-result .region {
+  border: 1px solid #000000;
+}
+.bracket-matcher {
+  background-color: #C9C9C9;
+  opacity: .7;
+  border-bottom: 0 none;
+}
--- a/public/css/main.css
+++ b/public/css/main.css
@@ -26,7 +26,7 @@ header #search-input {
 }
 .pack-overview-background {
  height: 300px;
-  background: #428bca url(http://rockdai.u.qiniudn.com/bs-docs-masthead-pattern.png) repeat center center;
+  background: #428bca url(https://dn-cnpm.qbox.me/bs-docs-masthead-pattern.png) repeat center center;
  position: absolute;
  width: 100%;
  z-index: -1;
@@ -101,9 +101,7 @@ header #search-input {
  color: #333333;
 }
 .cols-box {
-  display: -moz-box;
-  display: -webkit-box;
-  display: box;
+  display: flex;
  -webkit-box-pack: center;
 }
 .cols-box ul {
@@ -112,9 +110,7 @@ header #search-input {
  padding: 0;
 }
 .cols-box-item {
-  -moz-box-flex: 1;
-  -webkit-box-flex: 1;
-  box-flex: 1;
+  flex: 1;
  height: 250px;
  margin-right: 30px;
 }
--- a/routes/registry.js
+++ b/routes/registry.js
@@ -1,12 +1,10 @@
 /**!
- * cnpmjs.org - routes/registry.js
- *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com>
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 "use strict";
@@ -20,6 +18,7 @@ var login = require('../middleware/login');
 var publishable = require('../middleware/publishable');
 var syncByInstall = require('../middleware/sync_by_install');
 var editable = require('../middleware/editable');
+var existsPackage = require('../middleware/exists_package');

 var showTotal = require('../controllers/total');

@@ -35,6 +34,7 @@ var removeOneVersion = require('../controllers/registry/package/remove_version')
 var updatePackage = require('../controllers/registry/package/update');
 var downloadPackage = require('../controllers/registry/package/download');
 var downloadTotal = require('../controllers/registry/package/download_total');
+var listPackagesByUser = require('../controllers/registry/package/list_by_user');

 var addUser = require('../controllers/registry/user/add');
 var showUser = require('../controllers/registry/user/show');
@@ -42,6 +42,7 @@ var updateUser = require('../controllers/registry/user/update');

 var sync = require('../controllers/sync');
 var userPackage = require('../controllers/registry/user_package');
+var tags = require('../controllers/registry/package/dist_tag');

 function routes(app) {

@@ -75,7 +76,9 @@ function routes(app) {
  app.put('/:name', login, publishable, savePackage);

  // sync from source npm
+  app.put(/^\/(@[\w\-\.]+\/[\w\-\.]+)\/sync$/, sync.sync);
  app.put('/:name/sync', sync.sync);
+  app.get(/^\/(@[\w\-\.]+\/[\w\-\.]+)\/sync\/log\/(\d+)$/, sync.getSyncLog);
  app.get('/:name/sync/log/:id', sync.getSyncLog);

  // add tag
@@ -109,10 +112,33 @@ function routes(app) {

  // list all packages of user
  app.get('/-/by-user/:user', userPackage.list);
+  app.get('/-/users/:user/packages', listPackagesByUser);

  // download times
  app.get('/downloads/range/:range/:name', downloadTotal);
  app.get('/downloads/range/:range', downloadTotal);
+
+  // GET /-/package/:pkg/dist-tags -- returns the package's dist-tags
+  app.get('/-/package/:name/dist-tags', existsPackage, tags.index);
+  app.get(/^\/\-\/package\/(@[\w\-\.]+\/[\w\-\.]+)\/dist\-tags$/, existsPackage, tags.index);
+
+  // PUT /-/package/:pkg/dist-tags -- Set package's dist-tags to provided object body (removing missing)
+  app.put('/-/package/:name/dist-tags', login, existsPackage, editable, tags.save);
+  app.put(/^\/\-\/package\/(@[\w\-\.]+\/[\w\-\.]+)\/dist\-tags$/, login, existsPackage, editable, tags.save);
+
+  // POST /-/package/:pkg/dist-tags -- Add/modify dist-tags from provided object body (merge)
+  app.post('/-/package/:name/dist-tags', login, existsPackage, editable, tags.update);
+  app.post(/^\/\-\/package\/(@[\w\-\.]+\/[\w\-\.]+)\/dist\-tags$/, login, existsPackage, editable, tags.update);
+
+  // PUT /-/package/:pkg/dist-tags/:tag -- Set package's dist-tags[tag] to provided string body
+  app.put('/-/package/:name/dist-tags/:tag', login, existsPackage, editable, tags.set);
+  app.put(/^\/\-\/package\/(@[\w\-\.]+\/[\w\-\.]+)\/dist\-tags\/([\w\-\.]+)$/, login, existsPackage, editable, tags.set);
+  // POST /-/package/:pkg/dist-tags/:tag -- Same as PUT /-/package/:pkg/dist-tags/:tag
+  app.post('/-/package/:name/dist-tags/:tag', login, existsPackage, editable, tags.set);
+
+  // DELETE /-/package/:pkg/dist-tags/:tag -- Remove tag from dist-tags
+  app.delete('/-/package/:name/dist-tags/:tag', login, existsPackage, editable, tags.destroy);
+  app.delete(/^\/\-\/package\/(@[\w\-\.]+\/[\w\-\.]+)\/dist\-tags\/([\w\-\.]+)$/, login, existsPackage, editable, tags.destroy);
 }

 module.exports = routes;
--- a/routes/web.js
+++ b/routes/web.js
@@ -6,7 +6,7 @@
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com>
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 "use strict";
@@ -19,12 +19,10 @@ var showPackage = require('../controllers/web/package/show');
 var searchPackage = require('../controllers/web/package/search');
 var searchRange = require('../controllers/web/package/search_range');
 var listPrivates = require('../controllers/web/package/list_privates');
-var showSync = require('../controllers/web/package/show_sync');
+var showSync = require('../controllers/web/show_sync');
 var showUser = require('../controllers/web/user/show');
-
 var sync = require('../controllers/sync');
 var showTotal = require('../controllers/total');
-var dist = require('../controllers/web/dist');
 var badge = require('../controllers/web/badge');

 function routes(app) {
@@ -44,17 +42,19 @@ function routes(app) {

  app.get('/~:name', showUser);

+  app.get(/\/sync\/(@[\w\-\.]+\/[\w\-\.]+)$/, showSync);
  app.get('/sync/:name', showSync);
  app.get('/sync', showSync);
+  app.put(/\/sync\/(@[\w\-\.]+\/[\w\-\.]+)$/, sync.sync);
  app.put('/sync/:name', sync.sync);

+  app.get(/\/sync\/(@[\w\-\.]+\/[\w\-\.]+)\/log\/(\d+)$/, sync.getSyncLog);
  app.get('/sync/:name/log/:id', sync.getSyncLog);

  app.get('/_list/search/search', searchRange);

-  app.get(/^\/dist(\/.*)?/, dist.list);
-
  app.get(/^\/badge\/v\/([@\w\-\.\/]+)\.svg$/, badge.version);
+  app.get(/^\/badge\/d\/([@\w\-\.\/]+)\.svg$/, badge.downloads);
 }

 module.exports = routes;
--- a/servers/registry.js
+++ b/servers/registry.js
@@ -15,6 +15,7 @@
 * Module dependencies.
 */

+global.Promise = require('bluebird');
 var koa = require('koa');
 var app = module.exports = koa();
 var http = require('http');
@@ -26,6 +27,8 @@ var block = require('../middleware/block');
 var auth = require('../middleware/auth');
 var staticCache = require('../middleware/static');
 var notFound = require('../middleware/registry_not_found');
+var cors = require('kcors');
+var proxyToNpm = require('../middleware/proxy_to_npm');

 app.use(block());
 middlewares.jsonp(app);
@@ -36,7 +39,11 @@ app.use(staticCache);
 app.keys = ['todokey', config.sessionSecret];
 app.proxy = true;
 app.use(middlewares.bodyParser({jsonLimit: config.jsonLimit}));
+app.use(cors({
+  allowMethods: 'GET,HEAD'
+}));
 app.use(auth());
+app.use(proxyToNpm());
 app.use(notFound);

 if (config.enableCompress) {
--- a/servers/web.js
+++ b/servers/web.js
@@ -6,7 +6,7 @@
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com>
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 "use strict";
@@ -15,6 +15,7 @@
 * Module dependencies.
 */

+global.Promise = require('bluebird');
 var opensearch = require('../middleware/opensearch');
 var notFound = require('../middleware/web_not_found');
 var staticCache = require('../middleware/static');
@@ -24,8 +25,10 @@ var block = require('../middleware/block');
 var logger = require('../common/logger');
 var renderMarkdown = require('../common/markdown').render;
 var auth = require('../middleware/auth');
+var proxyToNpm = require('../middleware/proxy_to_npm');
 var routes = require('../routes/web');
 var config = require('../config');
+var jsonp = require('koa-safe-jsonp');
 var path = require('path');
 var http = require('http');
 var koa = require('koa');
@@ -33,6 +36,8 @@ var fs = require('fs');

 var app = koa();

+jsonp(app);
+
 var rootdir = path.dirname(__dirname);

 app.use(block());
@@ -40,7 +45,7 @@ app.use(middlewares.rt({headerName: 'X-ReadTime'}));
 app.use(middlewares.rewrite('/favicon.ico', '/favicon.png'));
 app.use(staticCache);

-if (process.env.NODE_ENV === 'development') {
+if (config.pagemock) {
  app.use(require('koa-mock')({
    datadir: path.join(rootdir, 'test', 'mocks')
  }));
@@ -49,6 +54,9 @@ if (process.env.NODE_ENV === 'development') {
 app.use(opensearch);
 app.keys = ['todokey', config.sessionSecret];
 app.proxy = true;
+app.use(proxyToNpm({
+  isWeb: true
+}));
 app.use(middlewares.bodyParser());
 app.use(auth());
 app.use(notFound);
@@ -67,7 +75,8 @@ var layoutFile = path.join(viewDir, '_layout.html');
 var footer = config.customFooter || fs.readFileSync(path.join(viewDir, 'footer.html'), 'utf8');
 var layout = fs.readFileSync(path.join(viewDir, 'layout.html'), 'utf8')
  .replace('{{footer}}', footer)
-  .replace('{{logoURL}}', config.logoURL);
+  .replace('{{logoURL}}', config.logoURL)
+  .replace('{{adBanner}}', config.adBanner || '');
 fs.writeFileSync(layoutFile, layout);

 // custom web readme home page support
@@ -88,7 +97,9 @@ app.use(markdownMiddleware({
  bodyHolder: '<%- locals.body %>',
  indexName: '_readme',
  cache: true,
-  render: renderMarkdown,
+  render: function (content) {
+    return renderMarkdown(content, false);
+  },
 }));

 var locals = {
@@ -116,6 +127,7 @@ routes(app);

 app.on('error', function (err, ctx) {
  err.url = err.url || ctx.request.url;
+  console.log(err);
  console.log(err.stack);
  logger.error(err);
 });
--- a/services/common.js
+++ b/services/common.js
@@ -15,11 +15,12 @@
 */

 var config = require('../config');
+var isPrivateScopedPackage = require('../lib/common').isPrivateScopedPackage;

 config.privatePackages = config.privatePackages || [];

-exports.isPrivatePackage = function* (name) {
-  if (name[0] === '@') {
+exports.isPrivatePackage = function (name) {
+  if (isPrivateScopedPackage(name)) {
    return true;
  }
  if (config.privatePackages.indexOf(name) >= 0) {
--- a/services/dist.js
+++ b/services/dist.js
@@ -1,97 +0,0 @@
-/**!
- * cnpmjs.org - services/dist.js
- *
- * Copyright(c) fengmk2 and other contributors.
- * MIT Licensed
- *
- * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-'use strict';
-/* jshint -W032 */
-
-/**
- * Module dependencies.
- */
-
-var path = require('path');
-var models = require('../models');
-var File = models.DistFile;
-var Dir = models.DistDir;
-
-exports.savefile = function* (info) {
-  var row = yield File.find({
-    where: {
-      parent: info.parent,
-      name: info.name
-    }
-  });
-  if (!row) {
-    row = File.build({
-      parent: info.parent,
-      name: info.name
-    });
-  }
-  row.date = info.date;
-  row.size = info.size;
-  row.url = info.url;
-  row.sha1 = info.sha1;
-  if (row.isDirty) {
-    return yield row.save();
-  }
-  return row;
-};
-
-exports.savedir = function* (info) {
-  var row = yield Dir.find({
-    where: {
-      parent: info.parent,
-      name: info.name
-    }
-  });
-  if (!row) {
-    row = Dir.build({
-      parent: info.parent,
-      name: info.name
-    });
-  }
-  row.date = info.date;
-  if (row.isDirty) {
-    return yield row.save();
-  }
-  return row;
-};
-
-exports.listdir = function* (name) {
-  var rs = yield [
-    File.findAll({
-      attributrs: ['name', 'parent', 'date'],
-      where: {
-        parent: name
-      }
-    }),
-    Dir.findAll({
-      attributrs: ['name', 'parent', 'date', 'size', 'url', 'sha1'],
-      where: {
-        parent: name
-      }
-    })
-  ];
-  return rs[0].concat(rs[1]);
-};
-
-exports.getfile = function* (fullname) {
-  var name = path.basename(fullname);
-  var parent = path.dirname(fullname);
-  if (parent !== '/') {
-    parent += '/';
-  }
-  return yield File.find({
-    attributrs: ['name', 'parent', 'date', 'size', 'url', 'sha1'],
-    where: {
-      parent: parent,
-      name: name
-    }
-  });
-};
--- a/services/download_total.js
+++ b/services/download_total.js
@@ -14,6 +14,7 @@
 * Module dependencies.
 */

+var utility = require('utility');
 var DownloadTotal = require('../models').DownloadTotal;

 exports.getModuleTotal = function* (name, start, end) {
@@ -31,6 +32,27 @@ exports.getModuleTotal = function* (name, start, end) {
  return formatRows(rows, start, end);
 };

+exports.getTotalByName = function* (name) {
+  var rows = yield DownloadTotal.findAll({
+    where: {
+      name: name
+    }
+  });
+  var count = 0;
+  rows.forEach(function (row) {
+    for (var i = 1; i <= 31; i++) {
+      var day = i < 10 ? '0' + i : String(i);
+      var field = 'd' + day;
+      var val = row[field];
+      if (typeof val === 'string') {
+        val = utility.toSafeNumber(val);
+      }
+      count += val;
+    }
+  });
+  return count;
+};
+
 exports.plusModuleTotal = function* (data) {
  var yearMonth = parseYearMonth(data.date);
  // all module download total
@@ -47,6 +69,10 @@ exports.plusModuleTotal = function* (data) {
    });
  }
  var field = 'd' + data.date.substring(8, 10);
+  if (typeof row[field] === 'string') {
+    // pg bigint is string...
+    row[field] = utility.toSafeNumber(row[field]);
+  }
  row[field] += data.count;
  if (row.isDirty) {
    yield row.save();
@@ -65,6 +91,10 @@ exports.plusModuleTotal = function* (data) {
    });
  }
  var field = 'd' + data.date.substring(8, 10);
+  if (typeof row[field] === 'string') {
+    // pg bigint is string...
+    row[field] = utility.toSafeNumber(row[field]);
+  }
  row[field] += data.count;
  if (row.isDirty) {
    return yield row.save();
@@ -92,6 +122,9 @@ function formatRows(rows, startDate, endDate) {
      var field = 'd' + day;
      var d = yearMonth + '-' + day;
      var count = row[field];
+      if (typeof count === 'string') {
+        count = utility.toSafeNumber(count);
+      }
      if (count > 0 && d >= startDate && d <= endDate) {
        dates.push({
          name: row.name,
--- a/services/npm.js
+++ b/services/npm.js
@@ -15,10 +15,11 @@
 * Module dependencies.
 */

+var ms = require('humanize-ms');
 var urllib = require('../common/urllib');
 var config = require('../config');

-var USER_AGENT = 'cnpmjs.org/' + config.version + ' ' + urllib.USER_AGENT;
+var USER_AGENT = 'npm_service.cnpmjs.org/' + config.version + ' ' + urllib.USER_AGENT;

 function* request(url, options) {
  options = options || {};
@@ -27,6 +28,8 @@ function* request(url, options) {
  options.headers = {
    'user-agent': USER_AGENT
  };
+  options.gzip = true;
+  options.followRedirect = true;
  var registry = options.registry || config.sourceNpmRegistry;
  url = registry + url;
  var r;
@@ -37,7 +40,8 @@ function* request(url, options) {
    var data = err.data || '[empty]';
    if (err.name === 'JSONResponseFormatError' && statusCode >= 500) {
      err.name = 'NPMServerError';
-      err.message = 'Status ' + statusCode + ', ' + data.toString();
+      err.status = statusCode;
+      err.message = 'Url: ' + url + ', Status ' + statusCode + ', ' + data.toString();
    }
    throw err;
  }
@@ -51,6 +55,7 @@ exports.getUser = function* (name) {
  var r = yield* request(url);
  var data = r.data;
  if (data && !data.name) {
+    // 404
    data = null;
  }
  return data;
@@ -65,6 +70,83 @@ exports.get = function* (name) {
  return data;
 };

+exports.fetchUpdatesSince = function* (lastSyncTime, timeout) {
+  var lastModified = lastSyncTime - ms('10m');
+  var data = yield exports.getAllSince(lastModified, timeout);
+  var result = {
+    lastModified: lastSyncTime,
+    names: [],
+  };
+  if (!data) {
+    return result;
+  }
+  if (Array.isArray(data)) {
+    // support https://registry.npmjs.org/-/all/static/today.json
+    var maxModified;
+    data.forEach(function (pkg) {
+      if (pkg.time && pkg.time.modified) {
+        var modified = Date.parse(pkg.time.modified);
+        if (modified >= lastModified) {
+          result.names.push(pkg.name);
+        }
+        if (!maxModified || modified > maxModified) {
+          maxModified = modified;
+        }
+      } else {
+        result.names.push(pkg.name);
+      }
+    });
+    if (maxModified) {
+      result.lastModified = maxModified;
+    }
+  } else {
+    // /-/all/since
+    if (data._updated) {
+      result.lastModified = data._updated;
+      delete data._updated;
+    }
+    result.names = Object.keys(data);
+  }
+  return result;
+};
+
+exports.fetchAllPackagesSince = function* (timestamp) {
+  var r = yield request('/-/all/static/all.json', {
+    registry: 'http://registry.npmjs.org',
+    timeout: 600000
+  });
+  // {"_updated":1441520402174,"0":{"name":"0","dist-tags
+  // "time":{"modified":"2014-06-17T06:38:43.495Z"}
+  var data = r.data;
+  var result = {
+    lastModified: timestamp,
+    lastModifiedName: null,
+    names: [],
+  };
+  var maxModified;
+  for (var key in data) {
+    if (key === '_updated') {
+      continue;
+    }
+    var pkg = data[key];
+    if (!pkg.time || !pkg.time.modified) {
+      continue;
+    }
+    var modified = Date.parse(pkg.time.modified);
+    if (modified >= timestamp) {
+      result.names.push(pkg.name);
+    }
+    if (!maxModified || modified > maxModified) {
+      maxModified = modified;
+      result.lastModifiedName = pkg.name;
+    }
+  }
+  if (maxModified) {
+    result.lastModified = maxModified;
+  }
+  return result;
+};
+
 exports.getAllSince = function* (startkey, timeout) {
  var r = yield* request('/-/all/since?stale=update_after&startkey=' + startkey, {
    timeout: timeout || 300000
@@ -72,6 +154,14 @@ exports.getAllSince = function* (startkey, timeout) {
  return r.data;
 };

+exports.getAllToday = function* (timeout) {
+  var r = yield* request('/-/all/static/today.json', {
+    timeout: timeout || 300000
+  });
+  // data is array: see https://registry.npmjs.org/-/all/static/today.json
+  return r.data;
+};
+
 exports.getShort = function* (timeout) {
  var r = yield* request('/-/short', {
    timeout: timeout || 300000,
@@ -84,20 +174,25 @@ exports.getShort = function* (timeout) {
 exports.getPopular = function* (top, timeout) {
  var r = yield* request('/-/_view/dependedUpon?group_level=1', {
    registry: config.officialNpmRegistry,
-    timeout: timeout || 60000
+    timeout: timeout || 120000
  });
  if (!r.data || !r.data.rows || !r.data.rows.length) {
    return [];
  }

-  return r.data.rows.sort(function (a, b) {
+  // deps number must >= 100
+  var rows = r.data.rows.filter(function (a) {
+    return a.value >= 100;
+  });
+
+  return rows.sort(function (a, b) {
    return b.value - a.value;
  })
  .slice(0, top)
  .map(function (r) {
-    return r.key && r.key[0];
+    return [r.key && r.key[0] && r.key[0].trim(), r.value];
  })
  .filter(function (r) {
-    return r;
+    return r[0];
  });
 };
--- a/services/package.js
+++ b/services/package.js
@@ -37,6 +37,10 @@ function parseRow(row) {
        row.package = decodeURIComponent(row.package);
      }
      row.package = JSON.parse(row.package);
+      if (typeof row.publish_time === 'string') {
+        // pg bigint is string
+        row.publish_time = Number(row.publish_time);
+      }
    } catch (e) {
      console.warn('parse package error: %s, id: %s version: %s, error: %s', row.name, row.id, row.version, e);
    }
@@ -124,7 +128,7 @@ exports.listModules = function* (names) {
      id: ids
    },
    attributes: [
-      'name', 'description'
+      'name', 'description', 'version',
    ]
  });
  return rows;
@@ -215,7 +219,7 @@ exports.listAllPublicModuleNames = function* () {
  var sql = 'SELECT DISTINCT(name) AS name FROM tag ORDER BY name';
  var rows = yield models.query(sql);
  return rows.filter(function (row) {
-    return row.name[0] !== '@';
+    return !common.isPrivatePackage(row.name);
  }).map(function (row) {
    return row.name;
  });
@@ -496,8 +500,7 @@ exports.updatePrivateModuleMaintainers = function* (name, usernames) {
 };

 function* getMaintainerModel(name) {
-  var isPrivatePackage = yield* common.isPrivatePackage(name);
-  return isPrivatePackage ? PrivateModuleMaintainer : NpmModuleMaintainer;
+  return common.isPrivatePackage(name) ? PrivateModuleMaintainer : NpmModuleMaintainer;
 }

 exports.listMaintainers = function* (name) {
@@ -609,7 +612,7 @@ exports.search = function* (word, options) {
  // 3. keyword equal search
  var ids = {};

-  var sql = 'SELECT module_id FROM tag WHERE LOWER(name) LIKE LOWER(?) AND tag="latest" \
+  var sql = 'SELECT module_id FROM tag WHERE LOWER(name) LIKE LOWER(?) AND tag=\'latest\' \
    ORDER BY name LIMIT ?;';
  var rows = yield* models.query(sql, [word + '%', limit ]);
  for (var i = 0; i < rows.length; i++) {
--- a/services/total.js
+++ b/services/total.js
@@ -18,15 +18,20 @@ var config = require('../config');
 var models = require('../models');
 var Total = models.Total;

+var TOTAL_MODULE_SQL = 'SELECT count(distinct(name)) AS count FROM module;';
+var TOTAL_VERSION_SQL = 'SELECT count(name) AS count FROM module;';
+var TOTAL_USER_SQL = 'SELECT count(name) AS count FROM user;';
+if (config.database.dialect === 'postgres') {
+  // pg not allow table name as 'user'
+  TOTAL_USER_SQL = 'SELECT count(name) AS count FROM public.user;';
+}
+
 exports.get = function* () {
  // var DB_SIZE_SQL = 'SELECT TABLE_NAME AS name, data_length, index_length \
  //   FROM information_schema.tables WHERE TABLE_SCHEMA = ? \
  //   GROUP BY TABLE_NAME \
  //   ORDER BY data_length DESC \
  //   LIMIT 0, 200';
-  var TOTAL_MODULE_SQL = 'SELECT count(distinct(name)) AS count FROM `module`;';
-  var TOTAL_VERSION_SQL = 'SELECT count(name) AS count FROM `module`;';
-  var TOTAL_USER_SQL = 'SELECT count(name) AS count FROM `user`;';
  var rs = yield [
    // models.query(DB_SIZE_SQL, [config.db]),
    models.queryOne(TOTAL_MODULE_SQL),
@@ -41,6 +46,10 @@ exports.get = function* () {
  var uc = rs[2];
  var info = rs[3] || {};

+  if (typeof info.module_delete === 'string') {
+    info.module_delete = Number(info.module_delete);
+  }
+
  var total = {
    data_tables: {},
    disk_size: 0,
@@ -82,42 +91,49 @@ exports.get = function* () {
 };

 exports.getTotalInfo = function* () {
-  return yield Total.find({
+  var row = yield Total.find({
    where: {
      name: 'total'
    }
  });
+  if (row && typeof row.module_delete === 'string') {
+    row.module_delete = Number(row.module_delete);
+  }
+  return row;
 };

 exports.plusDeleteModule = function* () {
-  var sql = 'UPDATE total SET module_delete=module_delete+1 WHERE name="total"';
+  var sql = 'UPDATE total SET module_delete=module_delete+1 WHERE name=\'total\'';
  return yield* models.query(sql);
 };

 exports.setLastSyncTime = function* (time) {
-  var sql = 'UPDATE total SET last_sync_time=? WHERE name="total"';
+  var sql = 'UPDATE total SET last_sync_time=? WHERE name=\'total\'';
  return yield* models.query(sql, [Number(time)]);
 };

 exports.setLastExistSyncTime = function* (time) {
-  var sql = 'UPDATE total SET last_exist_sync_time=? WHERE name="total"';
+  var sql = 'UPDATE total SET last_exist_sync_time=? WHERE name=\'total\'';
  return yield* models.query(sql, [Number(time)]);
 };

 exports.updateSyncStatus = function* (status) {
-  var sql = 'UPDATE total SET sync_status=? WHERE name="total"';
+  var sql = 'UPDATE total SET sync_status=? WHERE name=\'total\'';
  return yield* models.query(sql, [status]);
 };

 exports.updateSyncNum = function* (params) {
-  var arg = {
-    sync_status: params.syncStatus,
-    need_sync_num: params.need || 0,
-    success_sync_num: params.success || 0,
-    fail_sync_num: params.fail || 0,
-    left_sync_num: params.left || 0,
-    last_sync_module: params.lastSyncModule
-  };
-  var sql = 'UPDATE total SET ? WHERE name="total"';
-  return yield* models.query(sql, [arg]);
+  var args = [
+    params.syncStatus,
+    params.need || 0,
+    params.success || 0,
+    params.fail || 0,
+    params.left || 0,
+    params.lastSyncModule
+  ];
+  var sql = 'UPDATE total SET \
+    sync_status=?, need_sync_num=?, success_sync_num=?, \
+    fail_sync_num=?, left_sync_num=?, last_sync_module=? \
+    WHERE name=\'total\'';
+  return yield* models.query(sql, args);
 };
--- a/sync/index.js
+++ b/sync/index.js
@@ -14,6 +14,7 @@
 * Module dependencies.
 */

+global.Promise = require('bluebird');
 var debug = require('debug')('cnpmjs.org:sync:index');
 var co = require('co');
 var ms = require('humanize-ms');
@@ -22,7 +23,6 @@ var config = require('../config');
 var mail = require('../common/mail');
 var logger = require('../common/logger');
 var totalService = require('../services/total');
-var DistSyncer = require('./sync_dist');

 var sync = null;

@@ -43,14 +43,14 @@ if (!sync && config.enableCluster) {
 console.log('[%s] [sync_worker:%s] syncing with %s mode',
  Date(), process.pid, config.syncModel);

+function onerror(err) {
+  logger.error(err);
+}
+
 //set sync_status = 0 at first
 co(function* () {
  yield* totalService.updateSyncStatus(0);
-})(function (err) {
-  if (err) {
-    logger.error(err);
-  }
-});
+}).catch(onerror);

 var syncInterval = ms(config.syncInterval);
 var minSyncInterval = ms('5m');
@@ -60,7 +60,7 @@ if (!syncInterval || syncInterval < minSyncInterval) {

 // the same time only sync once
 var syncing = false;
-var handleSync = co(function* () {
+var syncFn = co.wrap(function* () {
  debug('mode: %s, syncing: %s', config.syncModel, syncing);
  if (!syncing) {
    syncing = true;
@@ -83,83 +83,19 @@ var handleSync = co(function* () {
 });

 if (sync) {
-  handleSync();
-  setInterval(handleSync, syncInterval);
-}
-
-/**
- * sync dist(node.js and phantomjs)
- */
-
-var syncingDist = false;
-var syncDist = co(function* () {
-  if (syncingDist) {
-    return;
-  }
-  syncingDist = true;
-  logger.syncInfo('Start syncing dist...');
-  var distSyncer = new DistSyncer({
-    disturl: config.disturl
-  });
-  try {
-    yield* distSyncer.start();
-    yield* distSyncer.syncPhantomjsDir();
-  } catch (err) {
-    err.message += ' (sync dist error)';
-    logger.syncError(err);
-    if (config.noticeSyncDistError) {
-      sendMailToAdmin(err, null, new Date());
-    }
-  }
-  syncingDist = false;
-});
-
-if (config.syncDist) {
-  syncDist();
-  setInterval(syncDist, syncInterval);
-} else {
-  logger.syncInfo('sync dist disable');
-}
-
-/**
- * sync python dist
- */
-
-var syncingPythonDist = false;
-var syncPythonDist = co(function* () {
-  if (syncingPythonDist) {
-    return;
-  }
-  syncingPythonDist = true;
-  logger.syncInfo('Start syncing python dist...');
-  var distSyncer = new DistSyncer({
-    disturl: config.pythonDisturl
-  });
-  try {
-    yield* distSyncer.start();
-  } catch (err) {
-    err.message += ' (sync python dist error)';
-    logger.syncError(err);
-    if (config.noticeSyncDistError) {
-      sendMailToAdmin(err, null, new Date());
-    }
-  }
-  syncingPythonDist = false;
-});
-
-if (config.syncPythonDist) {
-  syncPythonDist();
-  setInterval(syncPythonDist, syncInterval);
-} else {
-  logger.syncInfo('sync python dist disable');
+  syncFn().catch(onerror);
+  setInterval(function () {
+    syncFn().catch(onerror);
+  }, syncInterval);
 }

 /**
 * sync popular modules
 */

+var startSyncPopular = require('./sync_popular');
 var syncingPopular = false;
-var syncPopular = co(function* syncPopular() {
+var syncPopularFn = co.wrap(function* syncPopular() {
  if (syncingPopular) {
    return;
  }
@@ -168,7 +104,7 @@ var syncPopular = co(function* syncPopular() {
  var data;
  var error;
  try {
-    data = yield* require('./sync_popular');
+    data = yield* startSyncPopular();
  } catch (err) {
    error = err;
    error.message += ' (sync package error)';
@@ -186,8 +122,10 @@ var syncPopular = co(function* syncPopular() {
 });

 if (config.syncPopular) {
-  syncPopular();
-  setInterval(syncPopular, ms(config.syncPopularInterval));
+  syncPopularFn().catch(onerror);
+  setInterval(function () {
+    syncPopularFn().catch(onerror);
+  }, ms(config.syncPopularInterval));
 } else {
  logger.syncInfo('sync popular module disable');
 }
@@ -204,6 +142,10 @@ function sendMailToAdmin(err, result, syncTime) {
  var type;
  var html;
  if (err) {
+    // ignore 503 error
+    if (err.status === 503) {
+      return;
+    }
    subject = 'Sync Error';
    type = 'error';
    html = util.format('Sync packages from official registry failed.\n' +
--- a/sync/status.js
+++ b/sync/status.js
@@ -37,7 +37,7 @@ Status.prototype.log = function (syncDone) {
  };
  co(function* () {
    yield* Total.updateSyncNum(params);
-  })();
+  }).catch(function () {});
 };

 Status.prototype.start = function () {
--- a/sync/sync_all.js
+++ b/sync/sync_all.js
@@ -1,4 +1,4 @@
-/*!
+/**!
 * cnpmjs.org - sync/sync_all.js
 *
 * Copyright(c) cnpmjs.org and other contributors.
@@ -6,6 +6,7 @@
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com> (http://deadhorse.me)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 'use strict';
@@ -14,7 +15,6 @@
 * Module dependencies.
 */

-var ms = require('humanize-ms');
 var thunkify = require('thunkify-wrap');
 var config = require('../config');
 var Status = require('./status');
@@ -40,19 +40,6 @@ function* getFirstSyncPackages(lastSyncModule) {
  }
 }

-/**
- * get all the packages that update time > lastSyncTime
- * @param {Number} lastSyncTime
- */
-function* getCommonSyncPackages(lastSyncTime) {
-  var data = yield* npmService.getAllSince(lastSyncTime);
-  if (!data) {
-    return [];
-  }
-  delete data._updated;
-  return Object.keys(data);
-}
-
 module.exports = function* sync() {
  var syncTime = Date.now();
  var info = yield* totalService.getTotalInfo();
@@ -66,7 +53,9 @@ module.exports = function* sync() {
    logger.syncInfo('First time sync all packages from official registry');
    packages = yield* getFirstSyncPackages(info.last_sync_module);
  } else {
-    packages = yield* getCommonSyncPackages(info.last_sync_time - ms('10m'));
+    var result = yield npmService.fetchUpdatesSince(info.last_sync_time);
+    syncTime = result.lastModified;
+    packages = result.names;
  }

  packages = packages || [];
--- a/sync/sync_dist.js
+++ b/sync/sync_dist.js
@@ -1,454 +0,0 @@
-/**!
- * cnpmjs.org - sync/sync_dist.js
- *
- * Copyright(c) fengmk2 and other contributors.
- * MIT Licensed
- *
- * Authors:
- *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-var debug = require('debug')('cnpmjs.org:sync:sync_dist');
-var fs = require('fs');
-var bytes = require('bytes');
-var crypto = require('crypto');
-var utility = require('utility');
-var thunkify = require('thunkify-wrap');
-var cheerio = require('cheerio');
-var urlResolve = require('url').resolve;
-var common = require('../lib/common');
-var distService = require('../services/dist');
-var config = require('../config');
-var nfs = require('../common/nfs');
-var logger = require('../common/logger');
-var urllib = require('../common/urllib');
-
-var USER_AGENT = 'distsync.cnpmjs.org/' + config.version + ' ' + urllib.USER_AGENT;
-
-module.exports = DistSyncer;
-
-function DistSyncer(options) {
-  var disturl = options.disturl;
-  if (disturl[disturl.length - 1] === '/') {
-    disturl = disturl.replace(/(\/+)$/, '');
-  }
-  this._disturl = disturl;
-}
-
-var proto = DistSyncer.prototype;
-
-proto.start = function* (name) {
-  name = name || '/';
-  if (name[name.length - 1] !== '/') {
-    name += '/';
-  }
-  yield* this.syncDir(name);
-};
-
-proto.syncDir = function* (fullname, info) {
-  var news = yield* this.listdiff(fullname);
-  var files = [];
-  var dirs = [];
-
-  for (var i = 0; i < news.length; i++) {
-    var item = news[i];
-    if (item.type === 'dir') {
-      dirs.push(item);
-    } else {
-      files.push(item);
-    }
-  }
-
-  logger.syncInfo('sync %s:%s got %d new items, %d dirs, %d files to sync',
-    this._disturl, fullname, news.length, dirs.length, files.length);
-
-  for (var i = 0; i < files.length; i++) {
-    yield* this.syncFile(files[i]);
-  }
-
-  for (var i = 0; i < dirs.length; i++) {
-    var dir = dirs[i];
-    yield* this.syncDir(dir.parent + dir.name, dir);
-  }
-
-  if (info) {
-    logger.syncInfo('Save dir:%s %j to database', fullname, info);
-    yield* distService.savedir(info);
-  }
-
-  logger.syncInfo('Sync %s finished, %d dirs, %d files',
-    fullname, dirs.length, files.length);
-};
-
-proto.syncFile = function* (info) {
-  var name = info.parent + info.name;
-  name = process.pid + name.replace(/\//g, '_'); // make sure no parent dir
-  var isPhantomjsURL = false;
-  var downurl = this._disturl + info.parent + info.name;
-  if (info.downloadURL) {
-    downurl = info.downloadURL;
-    isPhantomjsURL = true;
-  }
-  var filepath = common.getTarballFilepath(name);
-  var ws = fs.createWriteStream(filepath);
-
-  var options = {
-    writeStream: ws,
-    followRedirect: true,
-    timeout: 6000000, // 100 minutes download
-    headers: {
-      'user-agent': USER_AGENT
-    }
-  };
-
-  try {
-    logger.syncInfo('downloading %s %s to %s, isPhantomjsURL: %s',
-      bytes(info.size), downurl, filepath, isPhantomjsURL);
-    // get tarball
-    var r = yield urllib.requestThunk(downurl, options);
-    var statusCode = r.status || -1;
-    logger.syncInfo('download %s got status %s, headers: %j',
-      downurl, statusCode, r.headers);
-    if (statusCode !== 200) {
-      var err = new Error('Download ' + downurl + ' fail, status: ' + statusCode);
-      err.name = 'DownloadDistFileError';
-      throw err;
-    }
-
-    var shasum = crypto.createHash('sha1');
-    var dataSize = 0;
-    var rs = fs.createReadStream(filepath);
-    rs.on('data', function (data) {
-      shasum.update(data);
-      dataSize += data.length;
-    });
-    var end = thunkify.event(rs);
-    yield end(); // after end event emit
-
-    if (dataSize === 0) {
-      var err = new Error('Download ' + downurl + ' file size is zero');
-      err.name = 'DownloadDistFileZeroSizeError';
-      throw err;
-    }
-
-    if (isPhantomjsURL) {
-      debug('real size: %s, expect size: %s', dataSize, info.size);
-      if (dataSize < info.size) {
-        // phantomjs download page only show `6.7 MB`
-        var err = new Error('Download ' + downurl + ' file size is '
-          + dataSize + ' not match ' + info.size);
-        err.name = 'DownloadDistFileSizeError';
-        throw err;
-      }
-      info.size = dataSize;
-    } else if (info.size > 0 && dataSize !== info.size) {
-      var err = new Error('Download ' + downurl + ' file size is '
-        + dataSize + ' not match ' + info.size);
-      err.name = 'DownloadDistFileSizeError';
-      throw err;
-    }
-
-    shasum = shasum.digest('hex');
-    var args = {
-      key: '/dist' + info.parent + info.name,
-      size: info.size,
-      shasum: shasum,
-    };
-
-    // upload to NFS
-    logger.syncInfo('uploading %s to nfs:%s', filepath, args.key);
-    var result = yield nfs.upload(filepath, args);
-    info.url = result.url || result.key;
-    info.sha1 = shasum;
-
-    logger.syncInfo('upload %s to nfs:%s with size:%d, sha1:%s',
-      args.key, info.url, info.size, info.sha1);
-  } finally {
-    // remove tmp file whatever
-    fs.unlink(filepath, utility.noop);
-  }
-
-  logger.syncInfo('Sync dist file: %j done', info);
-  yield* distService.savefile(info);
-};
-
-// <a href="latest/">latest/</a>                                            02-May-2014 14:45                   -
-// <a href="node-v0.4.10.tar.gz">node-v0.4.10.tar.gz</a>                                26-Aug-2011 16:22            12410018
-var FILE_RE = /^<a[^>]+>([^<]+)<\/a>\s+(\d+\-\w+\-\d+ \d+\:\d+)\s+([\-\d]+)/;
-
-// */docs/api/
-var DOC_API_RE = /\/docs\/api\/$/;
-
-// <li><a href="documentation.html">About these Docs</a></li>
-// <li><a href="synopsis.html">Synopsis</a></li>
-// <li><a href="assert.html">Assertion Testing</a></li>
-// <li><a href="buffer.html">Buffer</a></li>
-// <li><a href="addons.html">C/C++ Addons</a></li>
-// <li><a href="child_process.html">Child Processes</a></li>
-// <div id="gtoc">
-//   <p>
-//     <a href="index.html" name="toc">Index</a> |
-//     <a href="all.html">View on single page</a> |
-//     <a href="index.json">View as JSON</a>
-//   </p>
-// </div>
-var DOC_API_FILE_ALL_RE = /<a[^"]+\"(\w+\.(?:html|json))\"[^>]*>[^<]+<\/a>/gm;
-var DOC_API_FILE_RE = /<a[^"]+\"(\w+\.(?:html|json))\"[^>]*>[^<]+<\/a>/;
-
-proto.listdir = function* (fullname) {
-  var url = this._disturl + fullname;
-  var isDocPath = false;
-  if (DOC_API_RE.test(fullname)) {
-    isDocPath = true;
-    url += 'index.html';
-  }
-  var result = yield urllib.requestThunk(url, {
-    timeout: 60000,
-  });
-  debug('listdir %s got %s, %j', url, result.status, result.headers);
-  var html = result.data && result.data.toString() || '';
-  var items = [];
-  // "last-modified":"Tue, 11 Mar 2014 22:44:36 GMT"
-  var date = result.headers['last-modified'] || result.headers.date || '';
-
-  if (isDocPath) {
-    // add assets/
-    items.push({
-      name: 'assets/',
-      date: date,
-      size: '-',
-      type: 'dir',
-      parent: fullname,
-    });
-
-    var needJSON = false;
-    var htmlfileNames = [];
-    var lines = html.match(DOC_API_FILE_ALL_RE) || [];
-    for (var i = 0; i < lines.length; i++) {
-      var m = DOC_API_FILE_RE.exec(lines[i].trim());
-      if (!m) {
-        continue;
-      }
-      var itemName = m[1];
-      items.push({
-        name: itemName,
-        date: date,
-        size: 0,
-        type: 'file',
-        parent: fullname,
-      });
-      if (itemName.indexOf('.json') > 0) {
-        needJSON = true;
-      }
-      if (itemName.indexOf('.html') > 0 && itemName !== 'index.html') {
-        htmlfileNames.push(itemName);
-      }
-    }
-    debug('listdir %s got %j', fullname, htmlfileNames);
-    if (needJSON) {
-      // node >= 0.8.0
-      htmlfileNames.forEach(function (itemName) {
-        items.push({
-          name: itemName.replace('.html', '.json'), // download *.json format
-          date: date,
-          size: 0,
-          type: 'file',
-          parent: fullname,
-        });
-      });
-    }
-  } else {
-    var lines = html.split('\n');
-    for (var i = 0; i < lines.length; i++) {
-      var m = FILE_RE.exec(lines[i].trim());
-      if (!m) {
-        continue;
-      }
-      var itemName = m[1].replace(/^\/+/, '');
-      if (!itemName) {
-        continue;
-      }
-
-      // filter /nightlies/*
-      if (itemName.indexOf('nightlies/') === 0) {
-        continue;
-      }
-
-      items.push({
-        name: itemName, // 'SHASUMS.txt', 'x64/'
-        date: m[2],
-        size: m[3] === '-' ? '-' : parseInt(m[3]),
-        type: m[3] === '-' ? 'dir' : 'file',
-        parent: fullname, // '/', '/v0.10.28/'
-      });
-    }
-  }
-
-  // node <= v0.11.11, /docs/ is not list, has a index.html
-  if (items.length === 0 && /\/docs\/$/.test(fullname)) {
-    items.push({
-      name: 'api/',
-      date: date,
-      size: '-',
-      type: 'dir',
-      parent: fullname,
-    });
-
-    // sh_main.js
-    // sh_javascript.min.js
-    items.push({
-      name: 'sh_main.js',
-      date: date,
-      size: 0,
-      type: 'file',
-      parent: fullname,
-    });
-
-    items.push({
-      name: 'sh_javascript.min.js',
-      date: date,
-      size: 0,
-      type: 'file',
-      parent: fullname,
-    });
-  }
-
-  return items;
-};
-
-proto.listdiff = function* (fullname) {
-  var items = yield* this.listdir(fullname);
-  if (items.length === 0) {
-    return items;
-  }
-  var exists = yield* distService.listdir(fullname);
-  debug('listdiff %s got %s exists items', fullname, exists.length);
-  var map = {};
-  for (var i = 0; i < exists.length; i++) {
-    var item = exists[i];
-    map[item.name] = item;
-  }
-  var news = [];
-  for (var i = 0; i < items.length; i++) {
-    var item = items[i];
-    var exist = map[item.name];
-    if (!exist || exist.date !== item.date) {
-      news.push(item);
-      continue;
-    }
-
-    if (item.size !== '-' && item.size !== exist.size) {
-      news.push(item);
-      continue;
-    }
-
-    debug('skip %s', item.name);
-  }
-  return news;
-};
-
-proto.syncPhantomjsDir = function* () {
-  var fullname = '/phantomjs/';
-  var files = yield* this.listPhantomjsDiff(fullname);
-
-  logger.syncInfo('sync remote:%s got %d files to sync',
-    fullname, files.length);
-
-  for (var i = 0; i < files.length; i++) {
-    yield* this.syncFile(files[i]);
-  }
-
-  logger.syncInfo('SyncPhantomjsDir %s finished, %d files',
-    fullname, files.length);
-};
-
-// <tr class="iterable-item" id="download-301626">
-//   <td class="name"><a class="execute" href="/ariya/phantomjs/downloads/phantomjs-1.9.7-windows.zip">phantomjs-1.9.7-windows.zip</a></td>
-//   <td class="size">6.7 MB</td>
-//   <td class="uploaded-by"><a href="/Vitallium">Vitallium</a></td>
-//   <td class="count">122956</td>
-//   <td class="date">
-//     <div>
-//       <time datetime="2014-01-27T18:29:53.706942" data-title="true">2014-01-27</time>
-//     </div>
-//   </td>
-//   <td class="delete">
-//
-//   </td>
-// </tr>
-
-proto.listPhantomjsDir = function* (fullname) {
-  var url = 'https://bitbucket.org/ariya/phantomjs/downloads';
-  var result = yield urllib.request(url, {
-    timeout: 60000,
-  });
-  debug('listPhantomjsDir %s got %s, %j', url, result.status, result.headers);
-  var html = result.data && result.data.toString() || '';
-  var $ = cheerio.load(html);
-  var items = [];
-  $('tr.iterable-item').each(function (_, el) {
-    var $el = $(this);
-    var $link = $el.find('.name a');
-    var name = $link.text();
-    var downloadURL = $link.attr('href');
-    if (!name || !downloadURL || !/\.(zip|bz2|gz)$/.test(downloadURL)) {
-      return;
-    }
-    downloadURL = urlResolve(url, downloadURL);
-    var size = parseInt(bytes($el.find('.size').text().toLowerCase().replace(/\s/g, '')));
-    if (size > 1024 * 1024) {
-      size -= 1024 * 1024;
-    } else if (size > 1024) {
-      size -= 1024;
-    } else {
-      size -= 10;
-    }
-    var date = $el.find('.date time').text();
-    items.push({
-      name: name, // 'SHASUMS.txt', 'x64/'
-      date: date,
-      size: size,
-      type: 'file',
-      parent: fullname,
-      downloadURL: downloadURL,
-    });
-  });
-  return items;
-};
-
-proto.listPhantomjsDiff = function* (fullname) {
-  var items = yield* this.listPhantomjsDir(fullname);
-  if (items.length === 0) {
-    return items;
-  }
-  var exists = yield* distService.listdir(fullname);
-  debug('listdiff %s got %s exists items', fullname, exists.length);
-  var map = {};
-  for (var i = 0; i < exists.length; i++) {
-    var item = exists[i];
-    map[item.name] = item;
-  }
-  var news = [];
-  for (var i = 0; i < items.length; i++) {
-    var item = items[i];
-    var exist = map[item.name];
-    if (!exist || exist.date !== item.date) {
-      news.push(item);
-      continue;
-    }
-
-    // if (item.size !== exist.size) {
-    //   news.push(item);
-    //   continue;
-    // }
-
-    debug('skip %s', item.name);
-  }
-  return news;
-};
--- a/sync/sync_exist.js
+++ b/sync/sync_exist.js
@@ -1,6 +1,4 @@
 /*!
- * cnpmjs.org - sync/sync_exist.js
- *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
 *
@@ -16,7 +14,6 @@

 var debug = require('debug')('cnpmjs.org:sync:sync_exist');
 var Status = require('./status');
-var ms = require('humanize-ms');
 var thunkify = require('thunkify-wrap');
 var config = require('../config');
 var npmService = require('../services/npm');
@@ -63,16 +60,10 @@ module.exports = function* sync() {
    }
    allPackages = pkgs;
  } else {
-    debug('sync new module from last exist sync time: %s', info.last_sync_time);
-    var data = yield* npmService.getAllSince(info.last_exist_sync_time - ms('10m'));
-    if (!data) {
-      allPackages = [];
-    }
-    if (data._updated) {
-      syncTime = data._updated;
-      delete data._updated;
-    }
-    allPackages = Object.keys(data);
+    debug('sync new module from last exist sync time: %s', info.last_exist_sync_time);
+    var result = yield npmService.fetchUpdatesSince(info.last_exist_sync_time);
+    allPackages = result.names;
+    syncTime = result.lastModified;
  }

  var packages = intersection(existPackages, allPackages);
--- a/sync/sync_popular.js
+++ b/sync/sync_popular.js
@@ -20,9 +20,15 @@ var config = require('../config');
 var npmService = require('../services/npm');
 var Status = require('./status');
 var SyncModuleWorker = require('../controllers/sync_module_worker');
+var logger = require('../common/logger');

 module.exports = function* syncPopular() {
  var packages = yield* npmService.getPopular(config.topPopular);
+  packages = packages.map(function (r) {
+    return r[0];
+  });
+
+  logger.syncInfo('Syncing %d popular packages, top 10: %j', packages.length, packages.slice(0, 10));

  var worker = new SyncModuleWorker({
    username: 'admin',
--- a/sync/sync_since.js
+++ b/sync/sync_since.js
@@ -0,0 +1,66 @@
+/**!
+ * sync packages since by some days ago
+ *
+ * Copyright(c) cnpmjs.org and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <m@fengmk2.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+const thunkify = require('thunkify-wrap');
+const co = require('co');
+const ms = require('humanize-ms');
+const npmService = require('../services/npm');
+const SyncModuleWorker = require('../controllers/sync_module_worker');
+
+function* sync(sinceTimestamp) {
+  console.log('Fetching packages since: %s', new Date(sinceTimestamp));
+  var result = yield npmService.fetchAllPackagesSince(sinceTimestamp);
+  var packages = result.names;
+
+  packages = packages || [];
+  if (!packages.length) {
+    console.log('no packages need be sync');
+    process.exit(0);
+  }
+  // var news = [];
+  // for (var i = 0; i < packages.length; i++) {
+  //   if (packages[i] === 'elwms') {
+  //     news = packages.slice(i);
+  //     break;
+  //   }
+  // }
+  // packages = news;
+  console.log('lastModified: %s, lastModified package: %s, total %d packages to sync: %j',
+    new Date(result.lastModified), result.lastModifiedName, packages.length, packages);
+
+  var worker = new SyncModuleWorker({
+    username: 'sync_since',
+    name: packages,
+    noDep: true,
+    concurrency: 1,
+    syncUpstreamFirst: false,
+  });
+  worker.start();
+  var end = thunkify.event(worker);
+  yield end();
+
+  console.log('All packages sync done, successes %d, fails %d',
+      worker.successes.length, worker.fails.length);
+  process.exit(0);
+}
+
+co(function* () {
+  var timestamp = Date.now() - ms(process.argv[2] || '30d');
+  yield sync(timestamp);
+}).catch(function (err) {
+  console.error(err.stack);
+  process.exit(1);
+});
--- a/test/common/markdown.test.js
+++ b/test/common/markdown.test.js
@@ -0,0 +1,43 @@
+/**!
+ * cnpmjs.org - test/common/markdown.test.js
+ *
+ * Copyright(c) fengmk2 and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <m@fengmk2.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var utils = require('../utils');
+var markdown = require('../../common/markdown');
+
+describe('common/markdown.test.js', function () {
+  it('should render sonido readme', function () {
+    var readme = utils.getFileContent('sonido.md');
+    var md = markdown.render(readme);
+    md.should.equal('<p>Configuration Wizard: &lt;!--- This is what the user will see during the configuration -&gt;</p>\n');
+  });
+
+  it('should filter xss', function () {
+    var html = markdown.render('foo<script>alert(1)</script>/xss\n[foo](/foo) <a onclick="alert(1)">bar</a>\n"\'');
+    html.should.equal('<p>foo&lt;script&gt;alert(1)&lt;/script&gt;/xss\n<a href="/foo">foo</a> <a>bar</a>\n&quot;\'</p>\n');
+    markdown.render('[xss link](javascript:alert(2))').should.equal('<p>[xss link](javascript:alert(2))</p>\n');
+  });
+
+  it('should handle eat cpu markdown', function () {
+    var readme = utils.getFileContent('eat-cpu.md');
+    markdown.render(readme);
+  });
+
+  it('should not filter < and > on code', function () {
+    var content = utils.getFileContent('code.md');
+    var html = markdown.render(content);
+    html.should.containEql('<pre><code class="language-html">&lt;body&gt;hi&lt;/body&gt;');
+  });
+});
--- a/test/controllers/registry/module/public_mode.test.js
+++ b/test/controllers/registry/module/public_mode.test.js
@@ -1,571 +0,0 @@
-/*!
- * cnpmjs.org - test/controllers/registry/module/public_mode.test.js
- * Copyright(c) 2014 dead_horse <dead_horse@qq.com>
- * MIT Licensed
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-var should = require('should');
-var request = require('supertest');
-var mm = require('mm');
-var pedding = require('pedding');
-var config = require('../../../../config');
-var app = require('../../../../servers/registry');
-var utils = require('../../../utils');
-
-describe('controllers/registry/module/public_module.test.js', function () {
-  beforeEach(function () {
-    mm(config, 'enablePrivate', false);
-  });
-  before(function (done) {
-    mm(config, 'enablePrivate', false);
-    mm(config, 'forcePublishWithScope', false);
-    app = app.listen(0, function () {
-      done = pedding(2, done);
-      // name: publictestmodule
-      var pkg = utils.getPackage('publictestmodule', '0.0.1', utils.otherUser);
-
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .expect(201, function (err) {
-        should.not.exist(err);
-        pkg = utils.getPackage('publictestmodule', '0.0.2', utils.otherUser);
-        // publish 0.0.2
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(201, done);
-      });
-
-      // publicputmodule@0.1.9
-      var testpkg = utils.getPackage('publicputmodule', '0.1.9', utils.otherUser);
-
-      request(app)
-      .put('/' + testpkg.name)
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
-  });
-  afterEach(mm.restore);
-
-  describe('PUT /:name publish new flow addPackageAndDist()', function () {
-    beforeEach(function () {
-      mm(config, 'enablePrivate', false);
-      mm(config, 'forcePublishWithScope', false);
-    });
-
-    it('should publish with tgz base64, addPackageAndDist()', function (done) {
-      var pkg = utils.getPackage('publicpublishmodule', '0.0.2', utils.otherUser);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .expect(201, function (err, res) {
-        should.not.exist(err);
-        res.body.should.have.keys('ok', 'rev');
-        res.body.ok.should.equal(true);
-        pkg = utils.getPackage('publicpublishmodule', '0.0.2', utils.otherUser);
-        // upload again should 403
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(403, function (err, res) {
-          should.not.exist(err);
-          res.body.should.eql({
-            error: 'forbidden',
-            reason: 'cannot modify pre-existing version: 0.0.2'
-          });
-          done();
-        });
-      });
-    });
-
-    it('should other user pulbish 403', function (done) {
-      var pkg = utils.getPackage('publicpublishmodule', '0.0.3', utils.secondUser);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.secondUserAuth)
-      .send(pkg)
-      .expect(403, done);
-    });
-
-    it('should admin pulbish 403', function (done) {
-      var pkg = utils.getPackage('publicpublishmodule', '0.0.3', utils.admin);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(403, done);
-    });
-
-    it('should publish with scope, addPackageAndDist()', function (done) {
-      mm(config, 'forcePublishWithScope', false);
-      var pkg = utils.getPackage('@cnpm/publicpublishmodule', '0.0.2', utils.otherUser);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .expect(201, function (err, res) {
-        should.not.exist(err);
-        res.body.should.have.keys('ok', 'rev');
-        res.body.ok.should.equal(true);
-
-        // upload again should 403
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(403, function (err, res) {
-          should.not.exist(err);
-          res.body.should.eql({
-            error: 'forbidden',
-            reason: 'cannot modify pre-existing version: 0.0.2'
-          });
-          done();
-        });
-      });
-    });
-
-    describe('forcePublishWithScope = true', function () {
-      it('should publish without scope 403, addPackageAndDist()', function (done) {
-        mm(config, 'forcePublishWithScope', false);
-        var pkg = utils.getPackage('publicpublishmodule', '0.0.2');
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(403, done);
-      });
-
-      it('should admin publish without scope ok, addPackageAndDist()', function (done) {
-        mm(config, 'forcePublishWithScope', false);
-        var pkg = utils.getPackage('publicpublishmodule1', '0.0.4', utils.admin);
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.adminAuth)
-        .send(pkg)
-        .expect(201, done);
-      });
-    });
-  });
-
-  describe('PUT /:name/-rev/:rev removeWithVersions', function () {
-    var withoutScopeRev;
-    before(function (done) {
-      mm(config, 'enablePrivate', false);
-      mm(config, 'forcePublishWithScope', false);
-      var pkg = utils.getPackage('publicremovemodule', '0.0.1', utils.otherUser);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .expect(201, function (err, res) {
-        should.not.exist(err);
-        res.body.should.have.keys('ok', 'rev');
-        res.body.ok.should.equal(true);
-
-        pkg = utils.getPackage('publicremovemodule', '0.0.2', utils.otherUser);
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(201, function (err, res) {
-          should.not.exist(err);
-          withoutScopeRev = res.body.rev;
-          done();
-        });
-      });
-    });
-
-    it('should remove with version ok', function (done) {
-      request(app)
-      .put('/publicremovemodule/-rev/' + withoutScopeRev)
-      .set('authorization', utils.otherUserAuth)
-      .send({
-        versions: {
-          '0.0.1': {}
-        }
-      })
-      .expect(201, done);
-    });
-
-    it('should no auth user remove 403', function (done) {
-      request(app)
-      .put('/publicremovemodule/-rev/' + withoutScopeRev)
-      .set('authorization', utils.secondUserAuth)
-      .send({
-        versions: {
-          '0.0.1': {}
-        }
-      })
-      .expect(403, done);
-    });
-
-    it('should admin remove ok', function (done) {
-      request(app)
-      .put('/publicremovemodule/-rev/' + withoutScopeRev)
-      .set('authorization', utils.adminAuth)
-      .send({
-        versions: {
-          '0.0.1': {}
-        }
-      })
-      .expect(201, done);
-    });
-
-    describe('forcePublishWithScope = true', function () {
-      var withScopeRev;
-      before(function (done) {
-        mm(config, 'enablePrivate', false);
-        mm(config, 'forcePublishWithScope', true);
-        var pkg = utils.getPackage('@cnpm/publicremovemodule', '0.0.1', utils.otherUser);
-        request(app)
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(201, function (err, res) {
-          should.not.exist(err);
-          res.body.should.have.keys('ok', 'rev');
-          res.body.ok.should.equal(true);
-
-          pkg = utils.getPackage('@cnpm/publicremovemodule', '0.0.2', utils.otherUser);
-          request(app)
-          .put('/' + pkg.name)
-          .set('authorization', utils.otherUserAuth)
-          .send(pkg)
-          .expect(201, function (err, res) {
-            should.not.exist(err);
-            withScopeRev = res.body.rev;
-            done();
-          });
-        });
-      });
-
-      it('should remove without scope 403', function (done) {
-        mm(config, 'forcePublishWithScope', true);
-        request(app)
-        .put('/publicremovemodule/-rev/' + withoutScopeRev)
-        .set('authorization', utils.otherUserAuth)
-        .send({
-          versions: {
-            '0.0.1': {}
-          }
-        })
-        .expect(403, done);
-      });
-
-      it('should admin remove without scope ok', function (done) {
-        mm(config, 'forcePublishWithScope', true);
-        request(app)
-        .put('/publicremovemodule/-rev/' + withoutScopeRev)
-        .set('authorization', utils.adminAuth)
-        .send({
-          versions: {
-            '0.0.1': {}
-          }
-        })
-        .expect(201, done);
-      });
-
-      it('should remove with scope ok', function (done) {
-        mm(config, 'forcePublishWithScope', true);
-        request(app)
-        .put('/@cnpm/publicremovemodule/-rev/' + withScopeRev)
-        .set('authorization', utils.otherUserAuth)
-        .send({
-          versions: {
-            '0.0.1': {}
-          }
-        })
-        .expect(201, done);
-      });
-
-      it('should admin remove with scope ok', function (done) {
-        mm(config, 'forcePublishWithScope', true);
-        request(app)
-        .put('/@cnpm/publicremovemodule/-rev/' + withScopeRev)
-        .set('authorization', utils.adminAuth)
-        .send({
-          versions: {
-            '0.0.1': {}
-          }
-        })
-        .expect(201, done);
-      });
-    });
-  });
-
-  describe('DELETE /:name/download/:filename/-rev/:rev', function () {
-    var withoutScopeRev;
-    beforeEach(function () {
-      mm(config, 'enablePrivate', false);
-      mm(config, 'forcePublishWithScope', false);
-    });
-    beforeEach(function (done) {
-      mm(config, 'enablePrivate', false);
-      mm(config, 'forcePublishWithScope', false);
-      var pkg = utils.getPackage('public-test-delete-download-module', '0.1.9', utils.otherUser);
-      request(app)
-      .put('/' + pkg.name)
-      .set('content-type', 'application/json')
-      .set('authorization', utils.otherUserAuth)
-      .send(pkg)
-      .end(function (err, res) {
-        should.not.exist(err);
-        if (res.body.rev) {
-          withoutScopeRev = res.body.rev;
-        }
-        done();
-      });
-    });
-
-    it('should delete 403 when auth error', function (done) {
-      request(app)
-      .del('/public-test-delete-download-module/download/public-test-delete-download-module-0.1.9.tgz/-rev/' + withoutScopeRev)
-      .set('authorization', utils.secondUserAuth)
-      .expect(403, done);
-    });
-
-    it('should delete file ok', function (done) {
-      request(app)
-      .del('/public-test-delete-download-module/download/public-test-delete-download-module-0.1.9.tgz/-rev/' + withoutScopeRev)
-      .set('authorization', utils.otherUserAuth)
-      .expect(200, done);
-    });
-
-    it('should admin delete file ok', function (done) {
-      request(app)
-      .del('/public-test-delete-download-module/download/public-test-delete-download-module-0.1.9.tgz/-rev/' + withoutScopeRev)
-      .set('authorization', utils.adminAuth)
-      .expect(200, done);
-    });
-
-    describe('forcePublishWithScope = true', function () {
-      var withScopeRev;
-      beforeEach(function () {
-        mm(config, 'enablePrivate', false);
-        mm(config, 'forcePublishWithScope', true);
-      });
-      beforeEach(function (done) {
-        mm(config, 'enablePrivate', false);
-        mm(config, 'forcePublishWithScope', true);
-        var pkg = utils.getPackage('@cnpm/public-test-delete-download-module', '0.1.9', utils.otherUser);
-        request(app)
-        .put('/' + pkg.name)
-        .set('content-type', 'application/json')
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .end(function (err, res) {
-          should.not.exist(err);
-          if (res.body.rev) {
-            withScopeRev = res.body.rev;
-          }
-          done();
-        });
-      });
-
-      it('should delete file without scope 403', function (done) {
-        request(app)
-        .del('/public-test-delete-download-module/download/public-test-delete-download-module-0.1.9.tgz/-rev/' + withoutScopeRev)
-        .set('authorization', utils.otherUserAuth)
-        .expect(403, done);
-      });
-
-      it('should admin delete file without scope ok', function (done) {
-        request(app)
-        .del('/public-test-delete-download-module/download/public-test-delete-download-module-0.1.9.tgz/-rev/' + withoutScopeRev)
-        .set('authorization', utils.adminAuth)
-        .expect(200, done);
-      });
-      it('should delete file with scope ok', function (done) {
-        request(app)
-        .del('/@cnpm/public-test-delete-download-module/download/@cnpm/public-test-delete-download-module-0.1.9.tgz/-rev/' + withScopeRev)
-        .set('authorization', utils.otherUserAuth)
-        .expect(200, done);
-      });
-
-      it('should admin delete file with scope ok', function (done) {
-        request(app)
-        .del('/@cnpm/public-test-delete-download-module/download/@cnpm/public-test-delete-download-module-0.1.9.tgz/-rev/' + withScopeRev)
-        .set('authorization', utils.adminAuth)
-        .expect(200, done);
-      });
-    });
-  });
-
-  describe('PUT /:name/:tag updateTag()', function () {
-    it('should create new tag ok', function (done) {
-      request(app)
-      .put('/publictestmodule/newtag')
-      .set('content-type', 'application/json')
-      .set('authorization', utils.otherUserAuth)
-      .send('"0.0.1"')
-      .expect(201, done);
-    });
-
-    it('shold update tag not maintainer 403', function (done) {
-      request(app)
-      .put('/publictestmodule/newtag')
-      .set('content-type', 'application/json')
-      .set('authorization', utils.secondUserAuth)
-      .send('"0.0.1"')
-      .expect(403, done);
-    });
-
-    it('should admin update tag ok', function (done) {
-      request(app)
-      .put('/publictestmodule/newtag')
-      .set('content-type', 'application/json')
-      .set('authorization', utils.adminAuth)
-      .send('"0.0.1"')
-      .expect(201, done);
-    });
-  });
-
-  describe('DELETE /:name/-rev/:rev', function () {
-    describe('remove all modules by name', function () {
-      beforeEach(function () {
-        mm(config, 'enablePrivate', false);
-        mm(config, 'forcePublishWithScope', false);
-      });
-      before(function (done) {
-        mm(config, 'enablePrivate', false);
-        mm(config, 'forcePublishWithScope', false);
-        var pkg = utils.getPackage('public-remove-all-module', '0.0.1', utils.otherUser);
-        request(app)
-        .put('/public-remove-all-module')
-        .set('content-type', 'application/json')
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(201, function (err) {
-          should.not.exist(err);
-          var pkg = utils.getPackage('public-remove-all-module-admin', '0.0.1', utils.otherUser);
-          request(app)
-          .put('/public-remove-all-module-admin')
-          .set('content-type', 'application/json')
-          .set('authorization', utils.otherUserAuth)
-          .send(pkg)
-          .expect(201, done);
-        });
-      });
-
-      it('should fail when user not maintainer', function (done) {
-        request(app)
-        .del('/public-remove-all-module/-rev/1')
-        .set('authorization', utils.secondUserAuth)
-        .expect(403, function (err, res) {
-          should.not.exist(err);
-          res.body.should.eql({
-            error: 'forbidden user',
-            reason: 'cnpmjstest102 not authorized to modify public-remove-all-module'
-          });
-          done();
-        });
-      });
-
-      it('should maintainer remove ok', function (done) {
-        request(app)
-        .del('/public-remove-all-module/-rev/1')
-        .set('authorization', utils.otherUserAuth)
-        .expect(200, function (err, res) {
-          should.not.exist(err);
-          should.not.exist(res.headers['set-cookie']);
-          done();
-        });
-      });
-
-      it('should admin remove ok', function (done) {
-        request(app)
-        .del('/public-remove-all-module-admin/-rev/1')
-        .set('authorization', utils.adminAuth)
-        .expect(200, function (err, res) {
-          should.not.exist(err);
-          should.not.exist(res.headers['set-cookie']);
-          done();
-        });
-      });
-
-      describe('forcePublishWithScope = true', function () {
-        before(function (done) {
-          mm(config, 'enablePrivate', false);
-          mm(config, 'forcePublishWithScope', true);
-          var pkg = utils.getPackage('@cnpm/public-remove-all-module', '0.0.1', utils.otherUser);
-          request(app)
-          .put('/@cnpm/public-remove-all-module')
-          .set('content-type', 'application/json')
-          .set('authorization', utils.otherUserAuth)
-          .send(pkg)
-          .expect(201, function (err) {
-            should.not.exist(err);
-            var pkg = utils.getPackage('@cnpm/public-remove-all-module-admin', '0.0.1', utils.otherUser);
-            request(app)
-            .put('/@cnpm/public-remove-all-module-admin')
-            .set('content-type', 'application/json')
-            .set('authorization', utils.otherUserAuth)
-            .send(pkg)
-            .expect(201, function (err) {
-              should.not.exist(err);
-              var pkg = utils.getPackage('public-remove-all-module-admin', '0.1.1', utils.admin);
-              request(app)
-              .put('/public-remove-all-module-admin')
-              .set('content-type', 'application/json')
-              .set('authorization', utils.adminAuth)
-              .send(pkg)
-              .expect(201, done);
-            });
-          });
-        });
-
-        it('should fail when user remove module without scope', function (done) {
-          mm(config, 'forcePublishWithScope', true);
-          request(app)
-          .del('/public-remove-all-module/-rev/1')
-          .set('authorization', utils.otherUserAuth)
-          .expect(403, done);
-        });
-
-        it('should admin remove module without scope ok', function (done) {
-          mm(config, 'forcePublishWithScope', true);
-          request(app)
-          .del('/public-remove-all-module-admin/-rev/1')
-          .set('authorization', utils.adminAuth)
-          .expect(200, done);
-        });
-
-        it('should maintainer remove ok', function (done) {
-          mm(config, 'forcePublishWithScope', true);
-          request(app)
-          .del('/@cnpm/public-remove-all-module/-rev/1')
-          .set('authorization', utils.otherUserAuth)
-          .expect(200, function (err, res) {
-            should.not.exist(err);
-            should.not.exist(res.headers['set-cookie']);
-            done();
-          });
-        });
-
-        it('should admin remove ok', function (done) {
-          mm(config, 'forcePublishWithScope', true);
-          request(app)
-          .del('/@cnpm/public-remove-all-module-admin/-rev/1')
-          .set('authorization', utils.adminAuth)
-          .expect(200, function (err, res) {
-            should.not.exist(err);
-            should.not.exist(res.headers['set-cookie']);
-            done();
-          });
-        });
-      });
-    });
-  });
-});
--- a/test/controllers/registry/package/deprecate.test.js
+++ b/test/controllers/registry/package/deprecate.test.js
@@ -22,9 +22,8 @@ var app = require('../../../../servers/registry');
 var utils = require('../../../utils');

 describe('controllers/registry/package/deprecate.test.js', function () {
-  var pkgname = 'testmodule-deprecate';
+  var pkgname = '@cnpmtest/testmodule-deprecate';
  before(function (done) {
-    done = pedding(2, done);
    var pkg = utils.getPackage(pkgname, '0.0.1', utils.admin);

    request(app.listen())
@@ -49,36 +48,11 @@ describe('controllers/registry/package/deprecate.test.js', function () {
        .expect(201, done);
      });
    });
-
-    pkg = utils.getPackage('@cnpmtest/testmodule-deprecate', '1.0.0', utils.admin);
-    request(app.listen())
-    .put('/' + pkg.name)
-    .set('authorization', utils.adminAuth)
-    .send(pkg)
-    .expect(201, done);
  });

  afterEach(mm.restore);

  describe('PUT /:name', function () {
-    it('should deprecate scoped package version@1.0.0', function (done) {
-      request(app.listen())
-      .put('/@cnpmtest/testmodule-deprecate')
-      .set('authorization', utils.adminAuth)
-      .send({
-        name: pkgname,
-        versions: {
-          '1.0.0': {
-            deprecated: 'mock test deprecated message 1.0.0'
-          }
-        }
-      })
-      .expect({
-        ok: true
-      })
-      .expect(201, done);
-    });
-
    it('should deprecate version@1.0.0', function (done) {
      request(app.listen())
      .put('/' + pkgname)
@@ -205,7 +179,7 @@ describe('controllers/registry/package/deprecate.test.js', function () {
      .expect(400, done);
    });

-    it('should 403', function (done) {
+    it('should 403 can not modified when use is not maintainer', function (done) {
      request(app.listen())
      .put('/' + pkgname)
      .set('authorization', utils.otherUserAuth)
@@ -224,8 +198,8 @@ describe('controllers/registry/package/deprecate.test.js', function () {
        }
      })
      .expect({
-        error: 'no_perms',
-        reason: 'Private mode enable, only admin can publish this module'
+        error: 'forbidden user',
+        reason: 'cnpmjstest101 not authorized to modify @cnpmtest/testmodule-deprecate, please contact maintainers: cnpmjstest10'
      })
      .expect(403, done);
    });
--- a/test/controllers/registry/package/dist_tag.test.js
+++ b/test/controllers/registry/package/dist_tag.test.js
@@ -0,0 +1,316 @@
+/**!
+ * cnpmjs.org - test/controllers/registry/package/dist_tag.test.js
+ *
+ * Copyright(c) fengmk2 and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *   fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var request = require('supertest');
+var mm = require('mm');
+var pedding = require('pedding');
+var should = require('should');
+var config = require('../../../../config');
+var app = require('../../../../servers/registry');
+var utils = require('../../../utils');
+
+describe('controllers/registry/package/dist_tag.test.js', function () {
+  afterEach(mm.restore);
+
+  describe('index()', function () {
+    before(function (done) {
+      done = pedding(2, done);
+      utils.sync('byte', done);
+
+      var pkg2 = utils.getPackage('@cnpmtest/dist_tag_test_module_index', '1.0.1', utils.otherUser);
+      request(app.listen())
+      .put('/' + pkg2.name)
+      .set('authorization', utils.otherUserAuth)
+      .send(pkg2)
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/' + pkg2.name + '/dist-tags/next')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect(201, done);
+      });
+    });
+
+    it('should get normal pakcage tags', function (done) {
+      mm(config, 'syncModel', 'all');
+      request(app.listen())
+      .get('/-/package/byte/dist-tags')
+      .expect(200, function (err, res) {
+        should.not.exist(err);
+        res.body.latest.should.be.a.String;
+        done();
+      });
+    });
+
+    it('should get scoped pakcage tags', function (done) {
+      request(app.listen())
+      .get('/-/package/@cnpmtest/dist_tag_test_module_index/dist-tags')
+      .expect(200)
+      .expect({
+        latest: '1.0.1',
+        next: '1.0.1'
+      }, done);
+    });
+
+    it('should 404 when package not exists', function (done) {
+      request(app.listen())
+      .get('/-/package/@cnpmtest/not-exists/dist-tags')
+      .expect(404)
+      .expect({
+        error: 'not_found',
+        reason: 'document not found'
+      }, done);
+    });
+  });
+
+  describe('set()', function () {
+    before(function (done) {
+      var pkg2 = utils.getPackage('@cnpmtest/dist_tag_test_module_set', '1.0.1', utils.otherUser);
+      request(app.listen())
+      .put('/' + pkg2.name)
+      .set('authorization', utils.otherUserAuth)
+      .send(pkg2)
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/' + pkg2.name + '/dist-tags/next')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect(201, done);
+      });
+    });
+
+    it('should 400 when set not exists version', function (done) {
+      request(app.listen())
+      .put('/-/package/@cnpmtest/dist_tag_test_module_set/dist-tags/next')
+      .set('authorization', utils.otherUserAuth)
+      .set('content-type', 'application/json')
+      .send(JSON.stringify('2.0.1'))
+      .expect({
+        error: 'version_error',
+        reason: '@cnpmtest/dist_tag_test_module_set@2.0.1 not exists'
+      })
+      .expect(400, done);
+    });
+
+    it('should 201 set exists tag', function (done) {
+      request(app.listen())
+      .put('/-/package/@cnpmtest/dist_tag_test_module_set/dist-tags/exists')
+      .set('authorization', utils.otherUserAuth)
+      .set('content-type', 'application/json')
+      .send(JSON.stringify('1.0.1'))
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/@cnpmtest/dist_tag_test_module_set/dist-tags/exists')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect({
+          ok: 'dist-tags updated'
+        })
+        .expect(201, done);
+      });
+    });
+  });
+
+  describe('destroy()', function () {
+    before(function (done) {
+      var pkg2 = utils.getPackage('@cnpmtest/dist_tag_test_module_destroy', '1.0.1', utils.otherUser);
+      request(app.listen())
+      .put('/' + pkg2.name)
+      .set('authorization', utils.otherUserAuth)
+      .send(pkg2)
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/' + pkg2.name + '/dist-tags/next')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect(201, done);
+      });
+    });
+
+    it('should destroy exists scoped tag', function (done) {
+      request(app.listen())
+      .delete('/-/package/@cnpmtest/dist_tag_test_module_destroy/dist-tags/next')
+      .set('authorization', utils.otherUserAuth)
+      .set('content-type', 'application/json')
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(200, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .get('/-/package/@cnpmtest/dist_tag_test_module_destroy/dist-tags')
+        .expect(200)
+        .expect({
+          latest: '1.0.1',
+        }, done);
+      });
+    });
+
+    it('should 404 destroy not exists tag', function (done) {
+      request(app.listen())
+      .delete('/-/package/@cnpmtest/dist_tag_test_module_destroy/dist-tags/not-exists')
+      .set('authorization', utils.otherUserAuth)
+      .set('content-type', 'application/json')
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(200, done);
+    });
+  });
+
+  describe('save()', function () {
+    before(function (done) {
+      var pkg2 = utils.getPackage('@cnpmtest/dist_tag_test_module_save', '1.0.1', utils.otherUser);
+      request(app.listen())
+      .put('/' + pkg2.name)
+      .set('authorization', utils.otherUserAuth)
+      .send(pkg2)
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/' + pkg2.name + '/dist-tags/next')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect(201, done);
+      });
+    });
+
+    it('should overwrite exists tags', function (done) {
+      request(app.listen())
+      .put('/-/package/@cnpmtest/dist_tag_test_module_save/dist-tags')
+      .set('authorization', utils.otherUserAuth)
+      .send({
+        latest: '1.0.1',
+        new: '1.0.1'
+      })
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .get('/-/package/@cnpmtest/dist_tag_test_module_save/dist-tags')
+        .expect(200)
+        .expect({
+          latest: '1.0.1',
+          new: '1.0.1',
+        }, done);
+      });
+    });
+
+    it('should overwrite exists scoped tags', function (done) {
+      request(app.listen())
+      .put('/-/package/@cnpmtest/dist_tag_test_module_save/dist-tags')
+      .set('authorization', utils.otherUserAuth)
+      .send({
+        latest: '1.0.1',
+        new: '1.0.1'
+      })
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .get('/-/package/@cnpmtest/dist_tag_test_module_save/dist-tags')
+        .expect(200)
+        .expect({
+          latest: '1.0.1',
+          new: '1.0.1',
+        }, done);
+      });
+    });
+  });
+
+  describe('update()', function () {
+    before(function (done) {
+      var pkg2 = utils.getPackage('@cnpmtest/dist_tag_test_module_update', '1.0.1', utils.otherUser);
+      request(app.listen())
+      .put('/' + pkg2.name)
+      .set('authorization', utils.otherUserAuth)
+      .send(pkg2)
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .put('/-/package/' + pkg2.name + '/dist-tags/next')
+        .set('authorization', utils.otherUserAuth)
+        .set('content-type', 'application/json')
+        .send(JSON.stringify('1.0.1'))
+        .expect(201, done);
+      });
+    });
+
+    it('should merge exists tags', function (done) {
+      request(app.listen())
+      .post('/-/package/@cnpmtest/dist_tag_test_module_update/dist-tags')
+      .set('authorization', utils.otherUserAuth)
+      .send({
+        latest: '1.0.1',
+        new: '1.0.1'
+      })
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .get('/-/package/@cnpmtest/dist_tag_test_module_update/dist-tags')
+        .expect(200)
+        .expect({
+          latest: '1.0.1',
+          next: '1.0.1',
+          new: '1.0.1',
+        }, done);
+      });
+    });
+
+    it('should merge exists scoped tags', function (done) {
+      request(app.listen())
+      .post('/-/package/@cnpmtest/dist_tag_test_module_update/dist-tags')
+      .set('authorization', utils.otherUserAuth)
+      .send({
+        latest: '1.0.1',
+        new: '1.0.1'
+      })
+      .expect({
+        ok: 'dist-tags updated'
+      })
+      .expect(201, function (err) {
+        should.not.exist(err);
+        request(app.listen())
+        .get('/-/package/@cnpmtest/dist_tag_test_module_update/dist-tags')
+        .expect(200)
+        .expect({
+          latest: '1.0.1',
+          next: '1.0.1',
+          new: '1.0.1',
+        }, done);
+      });
+    });
+  });
+});
--- a/test/controllers/registry/package/download.test.js
+++ b/test/controllers/registry/package/download.test.js
@@ -20,7 +20,7 @@ var utils = require('../../../utils');

 describe('controllers/registry/package/download.test.js', function () {
  before(function (done) {
-    var pkg = utils.getPackage('download-test-module', '1.0.0', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/download-test-module', '1.0.0', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
@@ -31,19 +31,19 @@ describe('controllers/registry/package/download.test.js', function () {
  describe('GET /:name/download/:filename', function () {
    it('should download a file with 200', function (done) {
      request(app.listen())
-      .get('/download-test-module/download/download-test-module-1.0.0.tgz')
+      .get('/@cnpmtest/download-test-module/download/@cnpmtest/download-test-module-1.0.0.tgz')
      .expect(200, done);
    });

    it('should alias /:name/-/:filename to /:name/download/:filename', function (done) {
      request(app.listen())
-      .get('/download-test-module/-/download-test-module-1.0.0.tgz')
+      .get('/@cnpmtest/download-test-module/-/@cnpmtest/download-test-module-1.0.0.tgz')
      .expect(200, done);
    });

    it('should 404 when package not exists', function (done) {
      request(app.listen())
-      .get('/download-test-module-not-exists/download/download-test-module-not-exists-1.0.0.tgz')
+      .get('/@cnpmtest/download-test-module-not-exists/download/@cnpmtest/download-test-module-not-exists-1.0.0.tgz')
      .expect(404, done);
    });
  });
--- a/test/controllers/registry/package/download_total.test.js
+++ b/test/controllers/registry/package/download_total.test.js
@@ -14,7 +14,6 @@
 * Module dependencies.
 */

-var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
 var DownloadTotal = require('../../../../services/download_total');
--- a/test/controllers/registry/package/list.test.js
+++ b/test/controllers/registry/package/list.test.js
@@ -17,35 +17,38 @@
 var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
+var pedding = require('pedding');
 var packageService = require('../../../../services/package');
 var app = require('../../../../servers/registry');
 var utils = require('../../../utils');
-var SyncModuleWorker = require('../../../../controllers/sync_module_worker');
 var config = require('../../../../config');

 describe('controllers/registry/package/list.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-list-1', '0.0.1', utils.admin);
+    done = pedding(2, done);
+    utils.sync('baidu', done);
+
+    var pkg = utils.getPackage('@cnpmtest/testmodule-list-1', '0.0.1', utils.otherUser);
    pkg.versions['0.0.1'].dependencies = {
      bytetest: '~0.0.1',
      mocha: '~1.0.0'
    };
    request(app.listen())
    .put('/' + pkg.name)
-    .set('authorization', utils.adminAuth)
+    .set('authorization', utils.otherUserAuth)
    .send(pkg)
    .expect(201, function (err) {
      should.not.exist(err);
-      var pkg = utils.getPackage('testmodule-list-1', '1.0.0', utils.admin);
+      var pkg = utils.getPackage('@cnpmtest/testmodule-list-1', '1.0.0', utils.otherUser);
      pkg.versions['1.0.0'].dependencies = {
        bytetest: '~0.0.1',
        mocha: '~1.0.0'
      };
      request(app.listen())
      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
+      .set('authorization', utils.otherUserAuth)
      .send(pkg)
      .expect(201, done);
    });
@@ -53,16 +56,16 @@ describe('controllers/registry/package/list.test.js', function () {

  it('should return all versions', function (done) {
    request(app.listen())
-    .get('/testmodule-list-1')
+    .get('/@cnpmtest/testmodule-list-1')
    .expect(200, function (err, res) {
      should.not.exist(err);
      var data = res.body;
-      data.name.should.equal('testmodule-list-1');
+      data.name.should.equal('@cnpmtest/testmodule-list-1');
      Object.keys(data.versions).should.eql(['1.0.0', '0.0.1']);

      // should 304
      request(app)
-      .get('/testmodule-list-1')
+      .get('/@cnpmtest/testmodule-list-1')
      .set('If-None-Match', res.headers.etag)
      .expect(304, done);
    });
@@ -73,11 +76,11 @@ describe('controllers/registry/package/list.test.js', function () {
      return ['fengmk2', 'foouser'];
    });
    request(app.listen())
-    .get('/testmodule-list-1')
+    .get('/@cnpmtest/testmodule-list-1')
    .expect(200, function (err, res) {
      should.not.exist(err);
      var data = res.body;
-      data.name.should.equal('testmodule-list-1');
+      data.name.should.equal('@cnpmtest/testmodule-list-1');
      data.users.should.eql({
        fengmk2: true,
        foouser: true
@@ -88,7 +91,7 @@ describe('controllers/registry/package/list.test.js', function () {

  it('should 404 when package not exists', function (done) {
    request(app.listen())
-    .get('/not-exists-package')
+    .get('/@cnpmtest/not-exists-package')
    .expect(404)
    .expect({
      error: 'not_found',
@@ -99,7 +102,7 @@ describe('controllers/registry/package/list.test.js', function () {
  it('should not sync not-exists package when config.syncByInstall = false', function (done) {
    mm(config, 'syncByInstall', false);
    request(app.listen())
-    .get('/not-exists-package')
+    .get('/@cnpmtest/not-exists-package')
    .expect(404)
    .expect({
      error: 'not_found',
@@ -110,8 +113,8 @@ describe('controllers/registry/package/list.test.js', function () {
  it('should sync not-exists package when config.syncByInstall = true', function (done) {
    mm(config, 'syncByInstall', true);
    request(app.listen())
-    .get('/pedding')
-    .expect(200, done);
+    .get('/should')
+    .expect(302, done);
  });

  it('should not sync not-exists scoped package', function (done) {
@@ -127,15 +130,11 @@ describe('controllers/registry/package/list.test.js', function () {

  describe('unpublished', function () {
    before(function (done) {
-      var worker = new SyncModuleWorker({
-        name: 'tfs',
-        noDep: true,
-      });
-      worker.start();
-      worker.on('end', done);
+      utils.sync('tfs', done);
    });

    it('should show unpublished info', function (done) {
+      mm(config, 'syncModel', 'all');
      request(app.listen())
      .get('/tfs')
      .expect(404, function (err, res) {
@@ -150,15 +149,11 @@ describe('controllers/registry/package/list.test.js', function () {

  describe('npm package', function () {
    before(function (done) {
-      var worker = new SyncModuleWorker({
-        name: 'tair',
-        noDep: true,
-      });
-      worker.start();
-      worker.on('end', done);
+      utils.sync('tair', done);
    });

    it('should show npm package after sync', function (done) {
+      mm(config, 'syncModel', 'all');
      request(app.listen())
      .get('/tair')
      .expect(200, function (err, res) {
@@ -180,7 +175,7 @@ describe('controllers/registry/package/list.test.js', function () {
    var tagModified;
    before(function (done) {
      request(app.listen())
-      .put('/testmodule-list-1/test-tag')
+      .put('/@cnpmtest/testmodule-list-1/test-tag')
      .set('content-type', 'application/json')
      .set('authorization', utils.adminAuth)
      .send(JSON.stringify('0.0.1'))
@@ -194,11 +189,11 @@ describe('controllers/registry/package/list.test.js', function () {

    it('should use tag gmt_modified', function (done) {
      request(app.listen())
-      .get('/testmodule-list-1')
+      .get('/@cnpmtest/testmodule-list-1')
      .expect(200, function (err, res) {
        should.not.exist(err);
        var data = res.body;
-        data.name.should.equal('testmodule-list-1');
+        data.name.should.equal('@cnpmtest/testmodule-list-1');
        data.time.modified.should.equal(tagModified);
        done();
      });
--- a/test/controllers/registry/package/list_all.test.js
+++ b/test/controllers/registry/package/list_all.test.js
@@ -17,6 +17,7 @@
 var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
+var config = require('../../../../config');
 var app = require('../../../../servers/registry');
 var utils = require('../../../utils');

@@ -24,12 +25,8 @@ describe('controllers/registry/package/list_all.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-list_all', '0.0.1', utils.admin);
-    request(app.listen())
-    .put('/' + pkg.name)
-    .set('authorization', utils.adminAuth)
-    .send(pkg)
-    .expect(201, done);
+    mm(config, 'syncModel', 'all');
+    utils.sync('pedding', done);
  });

  describe('GET /-/all', function () {
@@ -41,7 +38,7 @@ describe('controllers/registry/package/list_all.test.js', function () {
        res.body.should.be.an.Object;
        res.body._updated.should.be.a.Number;
        Object.keys(res.body).length.should.above(1);
-        res.body['testmodule-list_all'].should.equal(true);
+        res.body.pedding.should.equal(true);
        done();
      });
    });
--- a/test/controllers/registry/package/list_by_user.test.js
+++ b/test/controllers/registry/package/list_by_user.test.js
@@ -0,0 +1,87 @@
+/**!
+ * Copyright(c) cnpmjs.org and other contributors.
+ * MIT Licensed
+ *
+ * Authors:
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
+ */
+
+'use strict';
+
+/**
+ * Module dependencies.
+ */
+
+var request = require('supertest');
+var mm = require('mm');
+var should = require('should');
+var app = require('../../../../servers/registry');
+var utils = require('../../../utils');
+
+describe('test/controllers/registry/package/list_by_user.test.js', function () {
+  var user = 'cnpmjstest_list_by_user';
+  var userauth = 'Basic ' + new Buffer(user + ':' + user).toString('base64');
+
+  afterEach(mm.restore);
+
+  before(function (done) {
+    var pkg = utils.getPackage('@cnpmtest/list_by_user_module1', '1.0.1', user);
+    request(app)
+    .put('/' + pkg.name)
+    .set('authorization', userauth)
+    .send(pkg)
+    .expect(201, function (err) {
+      should.not.exist(err);
+
+      var pkg2 = utils.getPackage('@cnpmtest/list_by_user_module2', '2.0.0', user);
+      request(app)
+      .put('/' + pkg2.name)
+      .set('authorization', userauth)
+      .send(pkg2)
+      .expect(201, done);
+    });
+  });
+
+  describe('GET /-/users/:user/packages', function () {
+    it('should get 200', function (done) {
+      var url = '/-/users/' + user + '/packages';
+      request(app)
+      .get(url)
+      .expect(function(res) {
+        var data = res.body;
+        data.user.name.should.equal(user);
+        var map = {};
+        data.packages.forEach(function(pkg) {
+          map[pkg.name] = pkg;
+        });
+        map['@cnpmtest/list_by_user_module1'].should.be.an.Object;
+        map['@cnpmtest/list_by_user_module1'].should.eql({
+          name: '@cnpmtest/list_by_user_module1',
+          description: '',
+          version: '1.0.1',
+        });
+
+        map['@cnpmtest/list_by_user_module2'].should.be.an.Object;
+        map['@cnpmtest/list_by_user_module2'].should.eql({
+          name: '@cnpmtest/list_by_user_module2',
+          description: '',
+          version: '2.0.0',
+        });
+      })
+      .expect(200, done);
+    });
+
+    it('should get empty packages list when user not exists', function (done) {
+      var url = '/-/users/not-exist-username/packages';
+      request(app)
+      .get(url)
+      .expect({
+        user: {
+          name: 'not-exist-username',
+        },
+        packages: [],
+      })
+      .expect(200, done);
+    });
+  });
+});
--- a/test/controllers/registry/package/list_shorts.test.js
+++ b/test/controllers/registry/package/list_shorts.test.js
@@ -17,6 +17,7 @@
 var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
+var config = require('../../../../config');
 var app = require('../../../../servers/registry');
 var utils = require('../../../utils');

@@ -24,12 +25,8 @@ describe('controllers/registry/package/list_shorts.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-list_shorts', '0.0.1', utils.admin);
-    request(app.listen())
-    .put('/' + pkg.name)
-    .set('authorization', utils.adminAuth)
-    .send(pkg)
-    .expect(201, done);
+    mm(config, 'syncModel', 'all');
+    utils.sync('pedding', done);
  });

  describe('GET /-/short', function () {
@@ -40,7 +37,7 @@ describe('controllers/registry/package/list_shorts.test.js', function () {
        should.not.exist(err);
        res.body.should.be.an.Array;
        res.body.length.should.above(0);
-        res.body.indexOf('testmodule-list_shorts').should.above(-1);
+        res.body.indexOf('pedding').should.above(-1);
        done();
      });
    });
--- a/test/controllers/registry/package/list_since.test.js
+++ b/test/controllers/registry/package/list_since.test.js
@@ -24,7 +24,7 @@ describe('controllers/registry/package/list_since.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-list_since', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-list_since', '0.0.1', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
@@ -41,7 +41,7 @@ describe('controllers/registry/package/list_since.test.js', function () {
        res.body.should.be.an.Object;
        res.body._updated.should.be.a.Number;
        Object.keys(res.body).length.should.above(1);
-        res.body['testmodule-list_since'].should.equal(true);
+        res.body['@cnpmtest/testmodule-list_since'].should.equal(true);
        done();
      });
    });
@@ -54,7 +54,7 @@ describe('controllers/registry/package/list_since.test.js', function () {
        res.body.should.be.an.Object;
        res.body._updated.should.be.a.Number;
        Object.keys(res.body).length.should.above(1);
-        res.body['testmodule-list_since'].should.equal(true);
+        res.body['@cnpmtest/testmodule-list_since'].should.equal(true);
        done();
      });
    });
--- a/test/controllers/registry/package/remove.test.js
+++ b/test/controllers/registry/package/remove.test.js
@@ -5,7 +5,7 @@
 * MIT Licensed
 *
 * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -23,39 +23,31 @@ var config = require('../../../../config');
 var packageService = require('../../../../services/package');
 var nfs = require('../../../../common/nfs');

-describe('controllers/registry/package/remove.test.js', function () {
+describe('test/controllers/registry/package/remove.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-remove-1', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-remove-1', '1.0.0', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-remove-1', '1.0.0', utils.admin);
-      request(app.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    .expect(201, done);
  });

  it('should delete 401 when no auth', function (done) {
    request(app)
-    .del('/testmodule-remove-1/-rev/1')
+    .del('/@cnpmtest/testmodule-remove-1/-rev/1')
    .expect({
      error: 'unauthorized',
-      reason: 'Login first.'
+      reason: 'Login first'
    })
    .expect(401, done);
  });

  it('should 404 when package not exists', function (done) {
    request(app)
-    .del('/testmodule-remove-1-not-exists/-rev/1')
+    .del('/@cnpmtest/testmodule-remove-1-not-exists/-rev/1')
    .set('authorization', utils.adminAuth)
    .expect({
      error: 'not_found',
@@ -67,7 +59,7 @@ describe('controllers/registry/package/remove.test.js', function () {
  it('should delete 403 when user is not admin on config.enablePrivate = true', function (done) {
    mm(config, 'enablePrivate', true);
    request(app)
-    .del('/testmodule-remove-1/-rev/1')
+    .del('/@cnpmtest/testmodule-remove-1/-rev/1')
    .set('authorization', utils.otherUserAuth)
    .expect({
      error: 'no_perms',
@@ -77,43 +69,28 @@ describe('controllers/registry/package/remove.test.js', function () {
  });

  it('should 400 when scope not exists', function (done) {
-    mm(config, 'enablePrivate', false);
    request(app)
    .del('/@cnpm-not-exists/testmodule-remove-1/-rev/1')
    .set('authorization', utils.otherUserAuth)
    .expect({
      error: 'invalid scope',
-      reason: 'scope @cnpm-not-exists not match legal scopes: @cnpm, @cnpmtest'
+      reason: 'scope @cnpm-not-exists not match legal scopes: @cnpm, @cnpmtest, @cnpm-test'
    })
    .expect(400, done);
  });

  it('should 403 when delete non scoped package', function (done) {
-    mm(config, 'enablePrivate', false);
    request(app)
    .del('/testmodule-remove-1/-rev/1')
    .set('authorization', utils.otherUserAuth)
    .expect({
      error: 'no_perms',
-      reason: 'only allow publish with @cnpm, @cnpmtest scope(s)'
+      reason: 'only allow publish with @cnpm, @cnpmtest, @cnpm-test scope(s)'
    })
    .expect(403, done);
  });

-  it('should remove all versions ok', function (done) {
-    request(app)
-    .del('/testmodule-remove-1/-rev/1')
-    .set('authorization', utils.adminAuth)
-    .expect(200, function (err) {
-      should.not.exist(err);
-      request(app)
-      .get('/testmodule-remove-1')
-      .expect(404, done);
-    });
-  });
-
  it('should 403 when user not maintainer', function (done) {
-    mm(config, 'enablePrivate', false);
    request(app)
    .del('/@cnpmtest/testmodule-remove-1/-rev/1')
    .set('authorization', utils.otherUserAuth)
@@ -124,7 +101,7 @@ describe('controllers/registry/package/remove.test.js', function () {
    .expect(403, done);
  });

-  it('should remove scoped package all versions ok', function (done) {
+  it('should remove all versions ok', function (done) {
    request(app)
    .del('/@cnpmtest/testmodule-remove-1/-rev/1')
    .set('authorization', utils.adminAuth)
--- a/test/controllers/registry/package/remove_version.test.js
+++ b/test/controllers/registry/package/remove_version.test.js
@@ -26,9 +26,8 @@ describe('controllers/registry/package/remove_version.test.js', function () {
  afterEach(mm.restore);

  var lastRev;
-  var lastRevScoped;
  before(function (done) {
-    var pkg = utils.getPackage('testmodule-remove_version-1', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-remove_version-1', '0.0.1', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
@@ -36,22 +35,13 @@ describe('controllers/registry/package/remove_version.test.js', function () {
    .expect(201, function (err, res) {
      should.not.exist(err);
      lastRev = res.body.rev;
-      var pkg = utils.getPackage('@cnpmtest/testmodule-remove_version-1', '0.0.1', utils.admin);
-      request(app.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, function (err, res) {
-        should.not.exist(err);
-        lastRevScoped = res.body.rev;
-        done();
-      });
+      done();
    });
  });

  it('should 404 when version format error', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule_remove_version123.tgz/-rev/112312312321')
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule_remove_version123.tgz/-rev/112312312321')
    .set('authorization', utils.adminAuth)
    .expect({
      error: 'not_found',
@@ -62,7 +52,7 @@ describe('controllers/registry/package/remove_version.test.js', function () {

  it('should 404 when rev format error', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-1.0.1.tgz/-rev/abc')
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-1.0.1.tgz/-rev/abc')
    .set('authorization', utils.adminAuth)
    .expect({
      error: 'not_found',
@@ -73,7 +63,7 @@ describe('controllers/registry/package/remove_version.test.js', function () {

  it('should 404 when version not exists', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-1.0.1.tgz/-rev/112312312321')
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-1.0.1.tgz/-rev/112312312321')
    .set('authorization', utils.adminAuth)
    .expect({
      error: 'not_found',
@@ -84,47 +74,32 @@ describe('controllers/registry/package/remove_version.test.js', function () {

  it('should 401 when no auth', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
    .expect(401, done);
  });

  it('should 403 when auth error', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
    .set('authorization', utils.otherUserAuth)
    .expect(403, done);
  });

  it('should 200 when delete success', function (done) {
    request(app)
-    .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
-    .set('authorization', utils.adminAuth)
-    .expect(200, done);
-  });
-
-  it('should 200 when delete scoped package success', function (done) {
-    request(app)
-    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.1.tgz/-rev/123123123')
+    .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.1.tgz/-rev/' + lastRev)
    .set('authorization', utils.adminAuth)
    .expect(200, done);
  });

  describe('mock error', function () {
    before(function (done) {
-      var pkg = utils.getPackage('testmodule-remove_version-1', '0.0.2', utils.admin);
+      var pkg = utils.getPackage('@cnpmtest/testmodule-remove_version-1', '0.0.2', utils.admin);
      request(app.listen())
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
      .send(pkg)
-      .expect(201, function (err) {
-        should.not.exist(err);
-        var pkg = utils.getPackage('@cnpmtest/testmodule-remove_version-1', '0.0.2', utils.admin);
-        request(app.listen())
-        .put('/' + pkg.name)
-        .set('authorization', utils.adminAuth)
-        .send(pkg)
-        .expect(201, done);
-      });
+      .expect(201, done);
    });

    it('should auto add cdn key', function (done) {
@@ -136,17 +111,7 @@ describe('controllers/registry/package/remove_version.test.js', function () {
      });

      request(app)
-      .del('/testmodule-remove_version-1/download/testmodule-remove_version-1-0.0.2.tgz/-rev/' + lastRev)
-      .set('authorization', utils.adminAuth)
-      .expect(200, done);
-    });
-
-    it('should mock nfs.remove error', function (done) {
-      mm(nfs, 'remove', function* (key) {
-        throw new Error('mock remove ' + key + ' error');
-      });
-      request(app)
-      .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.2.tgz/-rev/1')
+      .del('/@cnpmtest/testmodule-remove_version-1/download/@cnpmtest/testmodule-remove_version-1-0.0.2.tgz/-rev/' + lastRev)
      .set('authorization', utils.adminAuth)
      .expect(200, done);
    });
--- a/test/controllers/registry/package/save.test.js
+++ b/test/controllers/registry/package/save.test.js
@@ -19,13 +19,20 @@ var request = require('supertest');
 var mm = require('mm');
 var packageService = require('../../../../services/package');
 var app = require('../../../../servers/registry');
+var config = require('../../../../config');
 var utils = require('../../../utils');

 describe('controllers/registry/package/save.test.js', function () {
  afterEach(mm.restore);

  describe('no @scoped package', function () {
+    beforeEach(function () {
+      mm(config, 'syncModel', 'all');
+      mm(config, 'privatePackages', ['testmodule-new-1', 'testmodule-new-2', 'testmodule-no-latest']);
+    });
+
    before(function (done) {
+      mm(config, 'privatePackages', ['testmodule-new-1', 'testmodule-new-2']);
      var pkg = utils.getPackage('testmodule-new-1', '0.0.1', utils.admin);
      pkg.versions['0.0.1'].dependencies = {
        'bytetest-1': '~0.0.1',
--- a/test/controllers/registry/package/show.test.js
+++ b/test/controllers/registry/package/show.test.js
@@ -24,42 +24,34 @@ describe('controllers/registry/package/show.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-show', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-show', '0.0.1', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-show', '0.0.1', utils.admin);
-      request(app.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    .expect(201, done);
  });

  it('should return one version', function (done) {
    request(app.listen())
-    .get('/testmodule-show/0.0.1')
+    .get('/@cnpmtest/testmodule-show/0.0.1')
    .expect(200, function (err, res) {
      should.not.exist(err);
      var data = res.body;
-      data.name.should.equal('testmodule-show');
+      data.name.should.equal('@cnpmtest/testmodule-show');
      data.version.should.equal('0.0.1');
-      data.dist.tarball.should.containEql('/testmodule-show/download/testmodule-show-0.0.1.tgz');
+      data.dist.tarball.should.containEql('/@cnpmtest/testmodule-show/download/@cnpmtest/testmodule-show-0.0.1.tgz');
      done();
    });
  });

  it('should return latest tag', function (done) {
    request(app.listen())
-    .get('/testmodule-show/latest')
+    .get('/@cnpmtest/testmodule-show/latest')
    .expect(200, function (err, res) {
      should.not.exist(err);
      var data = res.body;
-      data.name.should.equal('testmodule-show');
+      data.name.should.equal('@cnpmtest/testmodule-show');
      data.version.should.equal('0.0.1');
      done();
    });
@@ -67,7 +59,7 @@ describe('controllers/registry/package/show.test.js', function () {

  it('should 404 when package not exist', function (done) {
    request(app.listen())
-    .get('/testmodule-show-not-exists/latest')
+    .get('/@cnpmtest/testmodule-show-not-exists/latest')
    .expect(404, done);
  });

@@ -89,21 +81,9 @@ describe('controllers/registry/package/show.test.js', function () {
    .expect(404, done);
  });

-  it('should 200 when source npm exists', function (done) {
-    request(app.listen())
-    .get('/baidu/latest')
-    .expect(200, done);
-  });
-
  describe('show sync package', function () {
-    var SyncModuleWorker = require('../../../../controllers/sync_module_worker');
    before(function (done) {
-      var worker = new SyncModuleWorker({
-        name: 'baidu',
-        noDep: true,
-      });
-      worker.start();
-      worker.on('end', done);
+      utils.sync('baidu', done);
    });

    it('should 200 when source npm exists', function (done) {
--- a/test/controllers/registry/package/tag.test.js
+++ b/test/controllers/registry/package/tag.test.js
@@ -14,7 +14,6 @@
 * Module dependencies.
 */

-var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
 var app = require('../../../../servers/registry');
@@ -24,32 +23,15 @@ describe('controllers/registry/package/tag.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var pkg = utils.getPackage('testmodule-tag-1', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-tag-1', '1.0.0', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-tag-1', '1.0.0', utils.admin);
-      request(app.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
-  });
-
-  it('should create new tag ok', function (done) {
-    request(app)
-    .put('/testmodule-tag-1/newtag')
-    .set('content-type', 'application/json')
-    .set('authorization', utils.adminAuth)
-    .send('"0.0.1"')
    .expect(201, done);
  });

-  it('should create new tag on scoped package', function (done) {
+  it('should create new tag ok', function (done) {
    request(app)
    .put('/@cnpmtest/testmodule-tag-1/newtag')
    .set('content-type', 'application/json')
@@ -60,16 +42,16 @@ describe('controllers/registry/package/tag.test.js', function () {

  it('should override exist tag ok', function (done) {
    request(app)
-    .put('/testmodule-tag-1/newtag')
+    .put('/@cnpmtest/testmodule-tag-1/newtag')
    .set('content-type', 'application/json')
    .set('authorization', utils.adminAuth)
-    .send('"0.0.1"')
+    .send('"1.0.0"')
    .expect(201, done);
  });

  it('should 400 when version missing', function (done) {
    request(app)
-    .put('/testmodule-tag-1/newtag')
+    .put('/@cnpmtest/testmodule-tag-1/newtag')
    .set('content-type', 'application/json')
    .set('authorization', utils.adminAuth)
    .send('""')
@@ -82,33 +64,33 @@ describe('controllers/registry/package/tag.test.js', function () {

  it('should tag invalid version 403', function (done) {
    request(app)
-    .put('/testmodule-tag-1/newtag')
+    .put('/@cnpmtest/testmodule-tag-1/newtag')
    .set('content-type', 'application/json')
    .set('authorization', utils.adminAuth)
    .send('"hello"')
    .expect(403)
    .expect({
      error: 'forbidden',
-      reason: 'setting tag newtag to invalid version: hello: testmodule-tag-1/newtag'
+      reason: 'setting tag newtag to invalid version: hello: @cnpmtest/testmodule-tag-1/newtag'
    }, done);
  });

  it('should tag not eixst version 403', function (done) {
    request(app)
-    .put('/testmodule-tag-1/newtag')
+    .put('/@cnpmtest/testmodule-tag-1/newtag')
    .set('content-type', 'application/json')
    .set('authorization', utils.adminAuth)
    .send('"5.0.0"')
    .expect(403)
    .expect({
      error: 'forbidden',
-      reason: 'setting tag newtag to unknown version: 5.0.0: testmodule-tag-1/newtag'
+      reason: 'setting tag newtag to unknown version: 5.0.0: @cnpmtest/testmodule-tag-1/newtag'
    }, done);
  });

  describe('update tag not maintainer', function () {
    before(function (done) {
-      var pkg = utils.getPackage('update-tag-not-maintainer', '1.0.0');
+      var pkg = utils.getPackage('@cnpmtest/update-tag-not-maintainer', '1.0.0');
      request(app)
      .put('/' + pkg.name)
      .set('content-type', 'application/json')
@@ -119,14 +101,14 @@ describe('controllers/registry/package/tag.test.js', function () {

    it('should not maintainer update tag return no permission 403', function (done) {
      request(app)
-      .put('/update-tag-not-maintainer/newtag')
+      .put('/@cnpmtest/update-tag-not-maintainer/newtag')
      .set('content-type', 'application/json')
      .set('authorization', utils.otherUserAuth)
      .send('"1.0.0"')
      .expect(403)
      .expect({
        error: 'forbidden user',
-        reason: 'cnpmjstest101 not authorized to modify update-tag-not-maintainer'
+        reason: 'cnpmjstest101 not authorized to modify @cnpmtest/update-tag-not-maintainer'
      }, done);
    });
  });
--- a/test/controllers/registry/package/update.test.js
+++ b/test/controllers/registry/package/update.test.js
@@ -25,43 +25,27 @@ var config = require('../../../../config');
 describe('controllers/registry/package/update.test.js', function () {
  afterEach(mm.restore);

-  beforeEach(function () {
-    mm(config, 'enablePrivate', false);
-    mm(config, 'forcePublishWithScope', false);
-  });
-
  before(function (done) {
-    mm(config, 'enablePrivate', false);
-    mm(config, 'forcePublishWithScope', false);
-
-    var pkg = utils.getPackage('testmodule-update-1', '0.0.1', utils.otherUser);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-update-1', '1.0.0', utils.otherUser);
    request(app.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.otherUserAuth)
    .send(pkg)
    .expect(201, function (err) {
      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-update-1', '1.0.0', utils.otherUser);
+      var pkg = utils.getPackage('@cnpmtest/testmodule-update-1', '2.0.0', utils.otherUser);
      request(app.listen())
      .put('/' + pkg.name)
      .set('authorization', utils.otherUserAuth)
      .send(pkg)
-      .expect(201, function (err) {
-        should.not.exist(err);
-        var pkg = utils.getPackage('@cnpmtest/testmodule-update-1', '2.0.0', utils.otherUser);
-        request(app.listen())
-        .put('/' + pkg.name)
-        .set('authorization', utils.otherUserAuth)
-        .send(pkg)
-        .expect(201, done);
-      });
+      .expect(201, done);
    });
  });

  it('should 404 when update body wrong', function (done) {
    request(app)
-    .put('/testmodule-update-1/-rev/1')
-    .set('authorization', utils.adminAuth)
+    .put('/@cnpmtest/testmodule-update-1/-rev/1')
+    .set('authorization', utils.otherUserAuth)
    .send({
      foo: 'bar'
    })
@@ -74,11 +58,8 @@ describe('controllers/registry/package/update.test.js', function () {

  describe('PUT /:name/-rev/:rev updatePrivateModuleMaintainers()', function () {
    before(function (done) {
-      mm(config, 'enablePrivate', false);
-      mm(config, 'forcePublishWithScope', false);
-
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest101',
@@ -88,7 +69,7 @@ describe('controllers/registry/package/update.test.js', function () {
      .set('authorization', utils.otherUserAuth)
      .expect({
        ok: true,
-        id:"testmodule-update-1",
+        id:"@cnpmtest/testmodule-update-1",
        rev: "1"
      }, done);
    });
@@ -153,7 +134,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should add again new maintainers', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest101',
@@ -170,7 +151,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should add new maintainers by admin', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest101',
@@ -187,7 +168,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should rm maintainers', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest101',
@@ -201,7 +182,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should rm again maintainers', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest101',
@@ -211,7 +192,7 @@ describe('controllers/registry/package/update.test.js', function () {
      .set('authorization', utils.otherUserAuth)
      .expect(201)
      .expect({
-        id: 'testmodule-update-1',
+        id: '@cnpmtest/testmodule-update-1',
        rev: '1',
        ok: true
      }, done);
@@ -219,7 +200,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should rm all maintainers forbidden 403', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: []
      })
@@ -231,7 +212,7 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should 403 when not maintainer update', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
      .send({
        maintainers: [{
          name: 'cnpmjstest10',
@@ -242,18 +223,12 @@ describe('controllers/registry/package/update.test.js', function () {
      .expect(403)
      .expect({
        error: 'forbidden user',
-        reason: 'cnpmjstest102 not authorized to modify testmodule-update-1'
+        reason: 'cnpmjstest102 not authorized to modify @cnpmtest/testmodule-update-1'
      }, done);
    });

    describe('forcePublishWithScope = true', function () {
-      beforeEach(function () {
-        mm(config, 'forcePublishWithScope', true);
-      });
-
      before(function (done) {
-        mm(config, 'forcePublishWithScope', true);
-        mm(config, 'enablePrivate', false);
        var pkg = utils.getPackage('@cnpm/testmodule-update-1', '0.0.1', utils.otherUser);
        request(app)
        .put('/' + pkg.name)
@@ -375,21 +350,21 @@ describe('controllers/registry/package/update.test.js', function () {
  describe('PUT /:name/-rev/:rev updateVersions()', function () {
    it('should update 401 when no auth', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/123')
+      .put('/@cnpmtest/testmodule-update-1/-rev/123')
      .expect(401, done);
    });

    it('should update 403 when auth error', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/123')
+      .put('/@cnpmtest/testmodule-update-1/-rev/123')
      .set('authorization', utils.thirdUserAuth)
      .expect(403, done);
    });

    it('should remove nothing removed ok', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
-      .set('authorization', utils.adminAuth)
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
+      .set('authorization', utils.otherUserAuth)
      .send({
        versions: {
          '0.0.1': {},
@@ -402,7 +377,7 @@ describe('controllers/registry/package/update.test.js', function () {
    it('should remove lastest tag with scoped', function (done) {
      request(app)
      .put('/@cnpmtest/testmodule-update-1/-rev/1')
-      .set('authorization', utils.adminAuth)
+      .set('authorization', utils.otherUserAuth)
      .send({
        versions: {
          '1.0.0': {},
@@ -413,7 +388,7 @@ describe('controllers/registry/package/update.test.js', function () {
        // again should work
        request(app)
        .put('/@cnpmtest/testmodule-update-1/-rev/1')
-        .set('authorization', utils.adminAuth)
+        .set('authorization', utils.otherUserAuth)
        .send({
          versions: {
            '1.0.0': {},
@@ -426,7 +401,7 @@ describe('controllers/registry/package/update.test.js', function () {
    it('should 404 when package not exists', function (done) {
      request(app)
      .put('/@cnpmtest/testmodule-update-1-not-exists/-rev/1')
-      .set('authorization', utils.adminAuth)
+      .set('authorization', utils.otherUserAuth)
      .send({
        versions: {
          '0.0.1': {},
@@ -438,8 +413,8 @@ describe('controllers/registry/package/update.test.js', function () {

    it('should remove all version ok', function (done) {
      request(app)
-      .put('/testmodule-update-1/-rev/1')
-      .set('authorization', utils.adminAuth)
+      .put('/@cnpmtest/testmodule-update-1/-rev/1')
+      .set('authorization', utils.otherUserAuth)
      .send({
        versions: {}
      })
--- a/test/controllers/registry/user/show.test.js
+++ b/test/controllers/registry/user/show.test.js
@@ -20,18 +20,13 @@ var mm = require('mm');
 var app = require('../../../../servers/registry');
 var config = require('../../../../config');
 var userService = require('../../../../services/user');
-var SyncModuleWorker = require('../../../../controllers/sync_module_worker');
+var utils = require('../../../utils');

 describe('controllers/registry/user/show.test.js, GET /-/user/org.couchdb.user:name', function () {
  afterEach(mm.restore);

  before(function (done) {
-    var worker = new SyncModuleWorker({
-      name: 'pedding',
-      noDep: true,
-    });
-    worker.start();
-    worker.on('end', done);
+    utils.sync('pedding', done);
  });

  beforeEach(function () {
@@ -56,7 +51,7 @@ describe('controllers/registry/user/show.test.js, GET /-/user/org.couchdb.user:n
    .expect(200, function (err, res) {
      should.not.exist(err);
      res.body.name.should.equal('fengmk2');
-      res.body.github.should.equal('fengmk2');
+      // res.body.github.should.equal('fengmk2');
      res.body._cnpm_meta.should.have.keys('id', 'npm_user', 'custom_user',
        'gmt_modified', 'gmt_create');
      res.body._cnpm_meta.npm_user.should.equal(true);
--- a/test/controllers/registry/user_package.test.js
+++ b/test/controllers/registry/user_package.test.js
@@ -1,5 +1,5 @@
 /**!
- * cnpmjs.org - test/contributors/registry/user_package.test.js
+ * cnpmjs.org - test/controllers/registry/user_package.test.js
 *
 * Copyright(c) fengmk2 and other contributors.
 * MIT Licensed
@@ -19,24 +19,18 @@ var request = require('supertest');
 var pedding = require('pedding');
 var app = require('../../../servers/registry');
 var utils = require('../../utils');
-var SyncModuleWorker = require('../../../controllers/sync_module_worker');

-describe('contributors/registry/user_package.test.js', function () {
+describe('controllers/registry/user_package.test.js', function () {
  before(function (done) {
+    done = pedding(2, done);
    // sync pedding
-    var worker = new SyncModuleWorker({
-      name: 'pedding',
-      noDep: true,
-    });
-    worker.start();
-    worker.on('end', function () {
-      var pkg = utils.getPackage('test-user-package-module', '0.0.1', utils.otherAdmin2);
-      request(app)
-      .put('/' + pkg.name)
-      .set('authorization', utils.otherAdmin2Auth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    utils.sync('pedding', done);
+    var pkg = utils.getPackage('@cnpmtest/test-user-package-module', '0.0.1', utils.otherAdmin2);
+    request(app)
+    .put('/' + pkg.name)
+    .set('authorization', utils.otherAdmin2Auth)
+    .send(pkg)
+    .expect(201, done);
  });

  describe('listOne()', function () {
@@ -104,8 +98,6 @@ describe('contributors/registry/user_package.test.js', function () {
        should.not.exist(err);
        res.body.fengmk2.should.be.an.Array;
        res.body.fengmk2.should.containEql('pedding');
-        res.body.cnpmjstestAdmin2.should.be.an.Array;
-        res.body.cnpmjstestAdmin2.should.containEql('test-user-package-module');
        done();
      });
    });
--- a/test/controllers/sync.test.js
+++ b/test/controllers/sync.test.js
@@ -129,7 +129,7 @@ describe('controllers/sync.test.js', function () {
    it('should sync scope package not found', function (done) {
      request(webApp.listen())
      .put('/sync/@cnpm/not-exists-package')
-      .expect(404, done);
+      .expect(201, done);
    });
  });
 });
--- a/test/controllers/sync_module_worker.test.js
+++ b/test/controllers/sync_module_worker.test.js
@@ -5,7 +5,7 @@
 * MIT Licensed
 *
 * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -17,6 +17,7 @@
 var mm = require('mm');
 var thunkify = require('thunkify-wrap');
 var request = require('supertest');
+var urllib = require('urllib');
 var config = require('../../config');
 var SyncModuleWorker = require('../../controllers/sync_module_worker');
 var logService = require('../../services/module_log');
@@ -24,14 +25,17 @@ var packageService = require('../../services/package');
 var utils = require('../utils');
 var app = require('../../servers/registry');

-describe('controllers/sync_module_worker.test.js', function () {
+describe('test/controllers/sync_module_worker.test.js', function () {
  afterEach(mm.restore);

  beforeEach(function () {
+    mm(config, 'syncModel', 'all');
    mm(config, 'sourceNpmRegistryIsCNpm', false);
+    mm(config, 'privatePackages', ['google']);
  });

  before(function (done) {
+    mm(config, 'privatePackages', ['google']);
    var pkg = utils.getPackage('google', '0.0.1', utils.admin);
    request(app.listen())
    .put('/' + pkg.name)
@@ -50,9 +54,9 @@ describe('controllers/sync_module_worker.test.js', function () {
    yield end();
  });

-  it('should not sync scoped package', function* () {
+  it('should not sync private scoped package', function* () {
    var worker = new SyncModuleWorker({
-      name: '@scoped/google',
+      name: '@cnpmtest/google',
      username: 'fengmk2',
    });
    worker.start();
@@ -60,6 +64,44 @@ describe('controllers/sync_module_worker.test.js', function () {
    yield end();
  });

+  it('should sync public scoped package', function* () {
+    mm(config, 'sourceNpmRegistry', 'https://registry.npmjs.org');
+    var worker = new SyncModuleWorker({
+      name: '@sindresorhus/df',
+      username: 'fengmk2',
+    });
+    worker.start();
+    var end = thunkify.event(worker, 'end');
+    yield end();
+
+    // sync again
+    var worker = new SyncModuleWorker({
+      name: '@sindresorhus/df',
+      username: 'fengmk2',
+    });
+    worker.start();
+    var end = thunkify.event(worker, 'end');
+    yield end();
+
+    var tgzUrl;
+    function checkResult() {
+      return function (done) {
+        request(app.listen())
+        .get('/@sindresorhus/df')
+        .expect(function (res) {
+          var latest = res.body.versions[res.body['dist-tags']['latest']];
+          tgzUrl = latest.dist.tarball;
+        })
+        .expect(200, done);
+      };
+    }
+
+    yield checkResult();
+
+    var r = yield urllib.request(tgzUrl);
+    r.status.should.equal(200);
+  });
+
  it('should start a sync worker and dont sync deps', function* () {
    var log = yield* logService.create({
      name: 'byte',
@@ -245,4 +287,17 @@ describe('controllers/sync_module_worker.test.js', function () {
      ];
    });
  });
+
+  describe('sync user', function () {
+    it('should sync fengmk2', function* () {
+      var worker = new SyncModuleWorker({
+        type: 'user',
+        name: 'fengmk2',
+        username: 'fengmk2',
+      });
+      worker.start();
+      var end = thunkify.event(worker, 'end');
+      yield end();
+    });
+  });
 });
--- a/test/controllers/web/badge.test.js
+++ b/test/controllers/web/badge.test.js
@@ -5,7 +5,7 @@
 * MIT Licensed
 *
 * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.github.com)
+ *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.com)
 */

 'use strict';
@@ -26,7 +26,7 @@ describe('controllers/web/badge.test.js', function () {

  describe('GET /badge/v/:name.svg', function () {
    it('should show blue version on >=1.0.0 when package exists', function (done) {
-      var pkg = utils.getPackage('badge-test-module', '1.0.1', utils.admin);
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '1.0.1', utils.admin);
      request(registry)
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
@@ -34,14 +34,14 @@ describe('controllers/web/badge.test.js', function () {
      .end(function (err) {
        should.not.exists(err);
        request(app)
-        .get('/badge/v/badge-test-module.svg?style=flat-square')
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square')
        .expect('Location', 'https://img.shields.io/badge/cnpm-1.0.1-blue.svg?style=flat-square')
        .expect(302, done);
      });
    });

    it('should show tag', function (done) {
-      var pkg = utils.getPackage('badge-test-module', '2.0.1', utils.admin, 'v2');
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '2.0.1', utils.admin, 'v2');
      request(registry)
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
@@ -49,14 +49,14 @@ describe('controllers/web/badge.test.js', function () {
      .end(function (err) {
        should.not.exists(err);
        request(app)
-        .get('/badge/v/badge-test-module.svg?style=flat-square&tag=v2')
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square&tag=v2')
        .expect('Location', 'https://img.shields.io/badge/cnpm-2.0.1-blue.svg?style=flat-square')
        .expect(302, done);
      });
    });

-    it('should support 1.0.0-beta1', function (done) {
-      var pkg = utils.getPackage('badge-test-module', '1.0.0-beta1', utils.admin);
+    it('should support custom subject', function (done) {
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '3.0.1', utils.admin, 'v3');
      request(registry)
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
@@ -64,14 +64,29 @@ describe('controllers/web/badge.test.js', function () {
      .end(function (err) {
        should.not.exists(err);
        request(app)
-        .get('/badge/v/badge-test-module.svg?style=flat-square')
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square&tag=v3&subject=ant-design')
+        .expect('Location', 'https://img.shields.io/badge/ant--design-3.0.1-blue.svg?style=flat-square')
+        .expect(302, done);
+      });
+    });
+
+    it('should support 1.0.0-beta1', function (done) {
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '1.0.0-beta1', utils.admin);
+      request(registry)
+      .put('/' + pkg.name)
+      .set('authorization', utils.adminAuth)
+      .send(pkg)
+      .end(function (err) {
+        should.not.exists(err);
+        request(app)
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square')
        .expect('Location', 'https://img.shields.io/badge/cnpm-1.0.0--beta1-blue.svg?style=flat-square')
        .expect(302, done);
      });
    });

    it('should show green version on <1.0.0 & >=0.1.0 when package exists', function (done) {
-      var pkg = utils.getPackage('badge-test-module', '0.1.0', utils.admin);
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '0.1.0', utils.admin);
      request(registry)
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
@@ -79,14 +94,14 @@ describe('controllers/web/badge.test.js', function () {
      .end(function (err) {
        should.not.exists(err);
        request(app)
-        .get('/badge/v/badge-test-module.svg?style=flat-square')
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square')
        .expect('Location', 'https://img.shields.io/badge/cnpm-0.1.0-green.svg?style=flat-square')
        .expect(302, done);
      });
    });

    it('should show green version on <0.1.0 & >=0.0.0 when package exists', function (done) {
-      var pkg = utils.getPackage('badge-test-module', '0.0.0', utils.admin);
+      var pkg = utils.getPackage('@cnpmtest/badge-test-module', '0.0.0', utils.admin);
      request(registry)
      .put('/' + pkg.name)
      .set('authorization', utils.adminAuth)
@@ -94,7 +109,7 @@ describe('controllers/web/badge.test.js', function () {
      .end(function (err) {
        should.not.exists(err);
        request(app)
-        .get('/badge/v/badge-test-module.svg?style=flat-square')
+        .get('/badge/v/@cnpmtest/badge-test-module.svg?style=flat-square')
        .expect('Location', 'https://img.shields.io/badge/cnpm-0.0.0-red.svg?style=flat-square')
        .expect(302, done);
      });
@@ -102,9 +117,26 @@ describe('controllers/web/badge.test.js', function () {

    it('should show invalid when package not exists', function (done) {
      request(app)
-      .get('/badge/v/badge-test-module-not-exists.svg?style=flat')
+      .get('/badge/v/@cnpmtest/badge-test-module-not-exists.svg?style=flat')
      .expect('Location', 'https://img.shields.io/badge/cnpm-invalid-lightgrey.svg?style=flat')
      .expect(302, done);
    });
  });
+
+  describe('GET /badge/d/:name.svg', function () {
+    it('should show downloads count', function (done) {
+      var pkg = utils.getPackage('@cnpmtest/badge-download-module', '1.0.1', utils.admin);
+      request(registry)
+      .put('/' + pkg.name)
+      .set('authorization', utils.adminAuth)
+      .send(pkg)
+      .end(function (err) {
+        should.not.exists(err);
+        request(app)
+        .get('/badge/d/@cnpmtest/badge-download-module.svg?style=flat-square')
+        .expect('Location', 'https://img.shields.io/badge/downloads-0-brightgreen.svg?style=flat-square')
+        .expect(302, done);
+      });
+    });
+  });
 });
--- a/test/controllers/web/dist.test.js
+++ b/test/controllers/web/dist.test.js
@@ -1,215 +0,0 @@
-/**!
- * cnpmjs.org - test/controllers/web/dist.test.js
- *
- * Copyright(c) cnpmjs.org and other contributors.
- * MIT Licensed
- *
- * Authors:
- *  fengmk2 <fengmk2@gmail.com> (http://fengmk2.cnpmjs.org)
- */
-
-'use strict';
-
-/**
- * Module dependencies.
- */
-
-var should = require('should');
-var request = require('supertest');
-var mm = require('mm');
-var fs = require('fs');
-var nfs = require('../../../common/nfs');
-var app = require('../../../servers/web');
-var distService = require('../../../services/dist');
-
-describe('controllers/web/dist.test.js', function () {
-  before(function (done) {
-    app = app.listen(0, done);
-  });
-
-  afterEach(mm.restore);
-
-  describe('GET /dist/*', function () {
-    it('should GET /dist redirect to /dist/', function (done) {
-      request(app)
-      .get('/dist')
-      .expect(302)
-      .expect('Location', '/dist/', done);
-    });
-
-    it('should GET /dist/ show file list', function (done) {
-      request(app)
-      .get('/dist/')
-      .expect('Content-Type', 'text/html; charset=utf-8')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        res.text.should.containEql('<title>Mirror index of http://nodejs.org/dist/</title>');
-        done();
-      });
-    });
-
-    it('should mock return files and dirs', function (done) {
-      mm(distService, 'listdir', function* () {
-        return [
-          {name: 'ooxx/', date: '02-May-2014 00:54'},
-          {name: 'foo.txt', size: 1024, date: '02-May-2014 00:54'},
-        ];
-      });
-      request(app)
-      .get('/dist/v1.0.0/')
-      .expect('Content-Type', 'text/html; charset=utf-8')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        res.text.should.containEql('<title>Mirror index of http://nodejs.org/dist/v1.0.0/</title>');
-        res.text.should.containEql('<h1>Mirror index of <a target="_blank" href="http://nodejs.org/dist/v1.0.0/">http://nodejs.org/dist/v1.0.0/</a></h1>');
-        res.text.should.containEql('<a href="ooxx/">ooxx/</a>                                             02-May-2014 00:54                   -\n');
-        res.text.should.containEql('<a href="foo.txt">foo.txt</a>                                           02-May-2014 00:54                1024\n');
-        done();
-      });
-    });
-
-    it('should list files and dirs', function (done) {
-      mm(distService, 'listdir', function* () {
-        return [
-          {name: 'npm/', date: '02-May-2014 00:54'},
-          {name: 'npm-versions.txt', size: 1676, date: '02-May-2014 00:54'},
-        ];
-      });
-      request(app)
-      .get('/dist/')
-      .expect('Content-Type', 'text/html; charset=utf-8')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        res.text.should.containEql('<title>Mirror index of http://nodejs.org/dist/</title>');
-        res.text.should.containEql('<h1>Mirror index of <a target="_blank" href="http://nodejs.org/dist/">http://nodejs.org/dist/</a></h1>');
-        res.text.should.containEql('<a href="npm/">npm/</a>                                              02-May-2014 00:54                   -\n');
-        res.text.should.containEql('<a href="npm-versions.txt">npm-versions.txt</a>                                  02-May-2014 00:54                1676\n');
-        done();
-      });
-    });
-  });
-
-  describe('GET /dist/ files', function () {
-    it('should pipe txt', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: 'foo.txt', size: 1024, date: '02-May-2014 00:54',
-          url: 'http://mock.com/dist/v0.10.28/SHASUMS.txt'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/SHASUMS.txt'), '6eff580cc8460741155d42ef1ef537961194443f');
-
-      request(app)
-      .get('/dist/v0.10.28/SHASUMS.txt')
-      .expect('Content-Type', 'text/plain; charset=utf-8')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        should.not.exist(res.headers['Content-Disposition']);
-        done();
-      });
-    });
-
-    it('should pipe html', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: 'foo.html', size: 1024, date: '02-May-2014 00:54',
-          url: 'http://mock.com/dist/v0.10.28/foo.html'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/foo.html'), '<p>hi</p>');
-
-      request(app)
-      .get('/dist/v0.10.28/foo.html')
-      .expect('Content-Type', 'text/html; charset=utf-8')
-      .expect('<p>hi</p>')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        should.not.exist(res.headers['Content-Disposition']);
-        done();
-      });
-    });
-
-    it('should pipe json', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: 'foo.json', date: '02-May-2014 00:54',
-          url: 'http://mock.com/dist/v0.10.28/foo.json'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/foo.json'), '{}');
-
-      request(app)
-      .get('/dist/v0.10.28/foo.json')
-      .expect('Content-Type', 'application/json; charset=utf-8')
-      .expect('{}')
-      .expect(200, function (err, res) {
-        should.not.exist(err);
-        should.not.exist(res.headers['Content-Disposition']);
-        done();
-      });
-    });
-
-    it('should GET /dist/npm-versions.tgz redirect to nfs url', function (done) {
-      mm(distService, 'getfile', function* (fullname) {
-        fullname.should.equal('/npm-versions.tgz');
-        return {
-          name: 'npm-versions.txt', size: 1024, date: '02-May-2014 00:54',
-          url: 'http://mock.com/dist/npm-versions.tgz'
-        };
-      });
-
-      request(app)
-      .get('/dist/npm-versions.tgz')
-      .expect(302)
-      .expect('Location', 'http://mock.com/dist/npm-versions.tgz', done);
-    });
-
-    it('should download nfs txt file and send it', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: 'foo.txt',
-          size: 1264,
-          date: '02-May-2014 00:54',
-          url: '/dist/v0.10.28/SHASUMS.txt'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/SHASUMS.txt'), '6eff580cc8460741155d42ef1ef537961194443f');
-      request(app)
-      .get('/dist/v0.10.28/SHASUMS.txt')
-      .expect(200)
-      .expect(/6eff580cc8460741155d42ef1ef537961194443f/, done);
-    });
-
-    it('should download nfs tgz file and send it', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: 'foo.tgz',
-          size: 1264,
-          date: '02-May-2014 00:54',
-          url: '/dist/v0.10.28/foo.tgz'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/foo.tgz'), '6eff580cc8460741155d42ef1ef537961194443f');
-      request(app)
-      .get('/dist/v0.10.28/foo.tgz')
-      .expect('Content-Disposition', 'attachment; filename="foo.tgz"')
-      .expect(200, done);
-    });
-
-    it.skip('should download nfs no-ascii attachment file name', function (done) {
-      mm(distService, 'getfile', function* () {
-        return {
-          name: '中文名.tgz',
-          size: 1264,
-          date: '02-May-2014 00:54',
-          url: '/dist/v0.10.28/foo.tgz'
-        };
-      });
-      fs.writeFileSync(nfs._getpath('/dist/v0.10.28/foo.tgz'), '6eff580cc8460741155d42ef1ef537961194443f');
-      request(app)
-      .get('/dist/v0.10.28/foo.tgz')
-      .expect('Content-Disposition', 'attachment; filename="%E4%B8%AD%E6%96%87%E5%90%8D.tgz"')
-      .expect(200, done);
-    });
-  });
-});
--- a/test/controllers/web/package/list_privates.test.js
+++ b/test/controllers/web/package/list_privates.test.js
@@ -25,6 +25,7 @@ describe('controllers/web/package/list_privates.test.js', function () {
  afterEach(mm.restore);

  before(function (done) {
+    mm(config, 'privatePackages', ['testmodule-web-list_privates-no-scoped', 'hsf-haha']);
    var pkg = utils.getPackage('@cnpm/testmodule-web-list_privates', '0.0.1', utils.admin);
    request(registry.listen())
    .put('/' + pkg.name)
--- a/test/controllers/web/package/search.test.js
+++ b/test/controllers/web/package/search.test.js
@@ -6,6 +6,7 @@
 *
 * Authors:
 *  dead_horse <dead_horse@qq.com> (http://deadhorse.me)
+ *  fengmk2 <m@fengmk2.com> (http://fengmk2.com)
 */

 'use strict';
@@ -14,7 +15,6 @@
 * Module dependencies.
 */

-var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
 var app = require('../../../../servers/web');
@@ -23,41 +23,22 @@ var utils = require('../../../utils');

 describe('controllers/web/package/search.test.js', function () {
  before(function (done) {
-    var pkg = utils.getPackage('testmodule-web-search', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-web-search', '0.0.1', utils.admin);
    pkg.versions['0.0.1'].dependencies = {
      bytetest: '~0.0.1',
-      mocha: '~1.0.0'
+      mocha: '~1.0.0',
+      'testmodule-web-show': '0.0.1'
    };
    request(registry.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-web-search', '0.0.1', utils.admin);
-      pkg.versions['0.0.1'].dependencies = {
-        bytetest: '~0.0.1',
-        mocha: '~1.0.0',
-        'testmodule-web-show': '0.0.1'
-      };
-      request(registry.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    .expect(201, done);
  });

  afterEach(mm.restore);

  describe('GET /browse/keyword/:word', function () {
-    it('should list by keyword ok', function (done) {
-      request(app)
-      .get('/browse/keyword/testmodule-web-search')
-      .expect(200)
-      .expect(/Packages match/, done);
-    });
-
    it('should list by keyword ok', function (done) {
      request(app)
      .get('/browse/keyword/@cnpmtest/testmodule-web-search')
@@ -67,11 +48,25 @@ describe('controllers/web/package/search.test.js', function () {

    it('should list by keyword with json ok', function (done) {
      request(app)
-      .get('/browse/keyword/testmodule-web-search?type=json')
+      .get('/browse/keyword/@cnpmtest/testmodule-web-search?type=json')
      .expect(200)
+      .expect({
+        keyword: '@cnpmtest/testmodule-web-search',
+        match: { name: '@cnpmtest/testmodule-web-search', description: '' },
+        packages: [ { name: '@cnpmtest/testmodule-web-search', description: '' } ],
+        keywords: []
+      })
      .expect('content-type', 'application/json; charset=utf-8', done);
    });

+    it('should search with jsonp work', function (done) {
+      request(app)
+      .get('/browse/keyword/@cnpmtest/testmodule-web-search?type=json&callback=foo')
+      .expect(200)
+      .expect('/**/ typeof foo === \'function\' && foo({"keyword":"@cnpmtest/testmodule-web-search","match":{"name":"@cnpmtest/testmodule-web-search","description":""},"packages":[{"name":"@cnpmtest/testmodule-web-search","description":""}],"keywords":[]});')
+      .expect('content-type', 'application/javascript; charset=utf-8', done);
+    });
+
    it('should list no match ok', function (done) {
      request(app)
      .get('/browse/keyword/notexistpackage')
--- a/test/controllers/web/package/search_range.test.js
+++ b/test/controllers/web/package/search_range.test.js
@@ -23,29 +23,17 @@ var utils = require('../../../utils');

 describe('controllers/web/package/search_range.test.js', function () {
  before(function (done) {
-    var pkg = utils.getPackage('testmodule-web-search_range', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-web-search_range', '0.0.1', utils.admin);
    pkg.versions['0.0.1'].dependencies = {
      bytetest: '~0.0.1',
-      mocha: '~1.0.0'
+      mocha: '~1.0.0',
+      'testmodule-web-show': '0.0.1'
    };
    request(registry.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-web-search_range', '0.0.1', utils.admin);
-      pkg.versions['0.0.1'].dependencies = {
-        bytetest: '~0.0.1',
-        mocha: '~1.0.0',
-        'testmodule-web-show': '0.0.1'
-      };
-      request(registry.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    .expect(201, done);
  });

  afterEach(mm.restore);
--- a/test/controllers/web/package/show.test.js
+++ b/test/controllers/web/package/show.test.js
@@ -17,36 +17,24 @@
 var should = require('should');
 var request = require('supertest');
 var mm = require('mm');
+var config = require('../../../../config');
 var app = require('../../../../servers/web');
 var registry = require('../../../../servers/registry');
-var SyncModuleWorker = require('../../../../controllers/sync_module_worker');
 var utils = require('../../../utils');

 describe('controllers/web/package/show.test.js', function () {
  before(function (done) {
-    var pkg = utils.getPackage('testmodule-web-show', '0.0.1', utils.admin);
+    var pkg = utils.getPackage('@cnpmtest/testmodule-web-show', '0.0.1', utils.admin);
    pkg.versions['0.0.1'].dependencies = {
      bytetest: '~0.0.1',
-      mocha: '~1.0.0'
+      mocha: '~1.0.0',
+      'testmodule-web-show': '0.0.1'
    };
    request(registry.listen())
    .put('/' + pkg.name)
    .set('authorization', utils.adminAuth)
    .send(pkg)
-    .expect(201, function (err) {
-      should.not.exist(err);
-      var pkg = utils.getPackage('@cnpmtest/testmodule-web-show', '0.0.1', utils.admin);
-      pkg.versions['0.0.1'].dependencies = {
-        bytetest: '~0.0.1',
-        mocha: '~1.0.0',
-        'testmodule-web-show': '0.0.1'
-      };
-      request(registry.listen())
-      .put('/' + pkg.name)
-      .set('authorization', utils.adminAuth)
-      .send(pkg)
-      .expect(201, done);
-    });
+    .expect(201, done);
  });

  afterEach(mm.restore);
@@ -54,7 +42,7 @@ describe('controllers/web/package/show.test.js', function () {
  describe('GET /package/:name', function () {
    it('should get 200', function (done) {
      request(app.listen())
-      .get('/package/testmodule-web-show')
+      .get('/package/@cnpmtest/testmodule-web-show')
      .expect(200)
      .expect('content-type', 'text/html; charset=utf-8')
      .expect(/testmodule-web-show/)
@@ -86,7 +74,7 @@ describe('controllers/web/package/show.test.js', function () {

    it('should get 404', function (done) {
      request(app)
-      .get('/package/not-exist-module')
+      .get('/package/@cnpmtest/not-exist-module')
      .expect(404, done);
    });
  });
@@ -94,7 +82,7 @@ describe('controllers/web/package/show.test.js', function () {
  describe('GET /package/:name/:version', function () {
    it('should 200 when get by version', function (done) {
      request(app)
-      .get('/package/testmodule-web-show/0.0.1')
+      .get('/package/@cnpmtest/testmodule-web-show/0.0.1')
      .expect(200)
      .expect(/testmodule-web-show/)
      .expect(/Maintainers/)
@@ -104,7 +92,7 @@ describe('controllers/web/package/show.test.js', function () {

    it('should 200 when get by tag', function (done) {
      request(app)
-      .get('/package/testmodule-web-show/latest')
+      .get('/package/@cnpmtest/testmodule-web-show/latest')
      .expect(200)
      .expect(/testmodule-web-show/)
      .expect(/Maintainers/)
@@ -114,59 +102,61 @@ describe('controllers/web/package/show.test.js', function () {

    it('should 404 when get by version not exist', function (done) {
      request(app)
-      .get('/package/testmodule-web-show/1.1.2')
+      .get('/package/@cnpmtest/testmodule-web-show/1.1.2')
      .expect(404, done);
    });

    it('should 404 when get by tag', function (done) {
      request(app)
-      .get('/package/testmodule-web-show/notexisttag')
+      .get('/package/@cnpmtest/testmodule-web-show/notexisttag')
      .expect(404, done);
    });
  });

  describe('unpublished package', function () {
    before(function (done) {
-      var worker = new SyncModuleWorker({
-        name: ['tnpm'],
-        username: 'fengmk2'
-      });
-
-      worker.start();
-      worker.on('end', function () {
-        var names = worker.successes.concat(worker.fails);
-        names.sort();
-        names.should.eql(['tnpm']);
-        done();
-      });
+      utils.sync('tfs', done);
    });

    it('should display unpublished info', function (done) {
+      mm(config, 'syncModel', 'all');
      request(app)
-      .get('/package/tnpm')
+      .get('/package/tfs')
      .expect(200)
      .expect(/This package has been unpublished\./, done);
    });
  });

-  describe('show npm package', function () {
+  describe('xss filter', function () {
    before(function (done) {
-      var worker = new SyncModuleWorker({
-        name: ['pedding'],
-        username: 'fengmk2',
-        noDep: true
-      });
+      var pkg = utils.getPackage('@cnpmtest/xss-test-ut', '0.0.1', utils.admin, null, '[xss link](javascript:alert(2)) \n\nfoo<script>alert(1)</script>/xss\'"&#');
+      request(registry.listen())
+      .put('/' + pkg.name)
+      .set('authorization', utils.adminAuth)
+      .send(pkg)
+      .end(done);
+    });

-      worker.start();
-      worker.on('end', function () {
-        var names = worker.successes.concat(worker.fails);
-        names.sort();
-        names.should.eql(['pedding']);
+    it('should filter xss content', function (done) {
+      request(app.listen())
+      .get('/package/@cnpmtest/xss-test-ut')
+      .expect(200, function (err, res) {
+        should.not.exist(err);
+        res.text.should.not.containEql('<script>alert(1)</script>');
+        res.text.should.not.containEql('alert(2)"');
        done();
      });
    });
+  });
+
+  describe('show npm package', function () {
+    before(function (done) {
+      mm(config, 'syncModel', 'exists');
+      utils.sync('pedding', done);
+    });

    it('should show pedding package info and contributors', function (done) {
+      mm(config, 'syncModel', 'exists');
      request(app)
      .get('/package/pedding')
      .expect(200)
--- a/test/controllers/web/package/show_sync.test.js
+++ b/test/controllers/web/package/show_sync.test.js
@@ -1,5 +1,5 @@
 /*!
- * cnpmjs.org - test/controllers/web/package/show_sync.test.js
+ * cnpmjs.org - test/controllers/web/show_sync.test.js
 *
 * Copyright(c) cnpmjs.org and other contributors.
 * MIT Licensed
@@ -15,15 +15,15 @@
 */

 var request = require('supertest');
-var app = require('../../../../servers/web');
+var app = require('../../../servers/web');

-describe('controllers/web/package/show_sync.test.js', function () {
+describe('controllers/web/show_sync.test.js', function () {
  describe('GET /sync/:name', function () {
    it('should display ok', function (done) {
      request(app.listen())
      .get('/sync/cutter')
      .expect(200)
-      .expect(/Sync Package/)
+      .expect(/Sync package/)
      .expect(/Log/, done);
    });
  });
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
fengmk2	af724960c2	Release 2.2.0	2015-09-29 01:28:32 +08:00
fengmk2	79797376d3	Merge pull request #663 from cnpm/list-package-by-username feat: list packages by username	2015-09-28 14:05:26 +08:00
fengmk2	7fd264440e	feat: list packages by username GET /-/users/:user/packages return user packages list { "user": { "name": $name }, "packages": [ { "name": $name, "description": $description, "version": $version }, ... ], } closes #661	2015-09-28 13:58:02 +08:00
fengmk2	1982b9404e	Merge pull request #656 from cnpm/badge-subject feat(badge): support custom subject	2015-09-08 11:01:29 +08:00
fengmk2	4bea6f4e5f	test: use codecov	2015-09-08 10:58:53 +08:00
fengmk2	3dd04b6aac	feat(badge): support custom subject https://cnpmjs.org/badge/v/npm.svg?tag=beta&subject=偏右 => https://img.shields.io/badge/%E5%81%8F%E5%8F%B3-3.3.1-blue.svg?style=flat-square closes #655	2015-09-08 10:51:34 +08:00
fengmk2	ec605efc9c	Merge pull request #653 from cnpm/since-tool feat(sync): add sync scripts	2015-09-08 10:45:52 +08:00
fengmk2	7f27447dac	fix(sync): add recover logic	2015-09-08 08:03:28 +08:00
fengmk2	a2c151f246	feat(sync): add sync scripts	2015-09-06 14:50:12 +08:00
fengmk2	35efc132b3	Release 2.1.5	2015-09-05 22:00:41 +08:00
fengmk2	dd37527651	Merge pull request #652 from cnpm/filter-update-packages-by-modified fix: only sync update packages	2015-09-05 21:48:35 +08:00
fengmk2	a82e772097	fix: only sync update packages	2015-09-05 21:41:27 +08:00
fengmk2	70fb543e7a	Release 2.1.4	2015-09-05 18:00:07 +08:00
fengmk2	bbfc3e57db	Merge pull request #651 from cnpm/support-old-map fix: support new array and old map format both	2015-09-05 17:52:42 +08:00
fengmk2	9b9ec50ccf	fix: support new array and old map format both	2015-09-05 17:49:31 +08:00
fengmk2	4098d966b8	Merge pull request #650 from cnpm/fetch-update-package-return-data-change fix: /-/all/since had been redirect to /-/all/static/today.json	2015-09-05 17:38:51 +08:00
fengmk2	6e7d528c9f	fix: /-/all/since had been redirect to /-/all/static/today.json data format from map change to array http://weibo.com/1400854834/Cz8OkaAQL	2015-09-05 17:34:39 +08:00
fengmk2	701abe831f	Merge pull request #646 from cnpm/fix-etag fix(list): let koa-etag to caculate the etag	2015-08-23 00:28:10 +08:00
dead_horse	449deab2ed	fix(list): let koa-etag to caculate the etag	2015-08-23 00:20:28 +08:00
fengmk2	20f1ab3af8	Release 2.1.3	2015-08-18 10:53:44 +08:00
fengmk2	a932b6487d	Merge pull request #644 from cnpm/fix-public-scope-package-store-filepath fix: sync public scope package download url is wrong	2015-08-18 10:22:15 +08:00
fengmk2	8f05a6e8b9	fix: sync public scope package download url is wrong	2015-08-18 10:16:45 +08:00
fengmk2	4a91795288	fix: default registry change to taobao registry	2015-08-14 16:25:35 +08:00
fengmk2	de72396cd2	Release 2.1.2	2015-08-09 02:03:04 +08:00
fengmk2	7f48d45e0d	Merge pull request #640 from cnpm/add-downloads-badge feat(web): add downloads badge	2015-08-09 02:02:15 +08:00
fengmk2	553c1daf85	fix(syncer): sync worker pkg null bug	2015-08-09 01:59:23 +08:00
fengmk2	084b83e8d7	feat(web): add downloads badge http://cnpmjs.org/badge/d/{name}.svg	2015-08-09 01:48:42 +08:00
fengmk2	05e5ac86ba	Release 2.1.1	2015-07-27 12:34:47 +08:00
fengmk2	2a530a3d6e	Merge pull request #634 from cnpm/fix-private-package fix: fix private scope package detect	2015-07-27 12:32:30 +08:00
fengmk2	bde9de9f90	fix: fix private scope package detect	2015-07-27 12:28:04 +08:00
Yiyu He	d538658be9	Merge pull request #631 from cnpm/sync-public-scope-package fix(sync): support sync public scope package	2015-07-27 10:48:59 +08:00
fengmk2	81a010bc53	fix: dont sync if upstream is npm registry	2015-07-27 01:24:33 +08:00
fengmk2	7f2c5725e5	fix(sync): support sync public scope package e.g.: @sindresorhus/df closes cnpm/cnpm#64 closes cnpm/cnpm#61	2015-07-27 01:20:30 +08:00
fengmk2	7f89b3be92	test: fix fails tests	2015-07-26 20:10:48 +08:00
fengmk2	1c6eb50e05	fix: ignore 503 server error	2015-07-26 20:02:48 +08:00
fengmk2	aa8d4ac850	fix: ignore sync 503 server error	2015-07-26 19:54:07 +08:00
fengmk2	e0eeefa43e	Release 2.1.0	2015-07-08 23:21:19 +08:00
Yiyu He	662b91ea9a	Merge pull request #630 from cnpm/search-support-jsonp feat(web): search support jsonp	2015-07-08 22:19:55 +08:00
fengmk2	cc70f9e6b1	feat(web): search support jsonp http://localhost:7002/browse/keyword/mk2?type=json&callback=foo	2015-07-08 21:06:14 +08:00
dead_horse	7312d761ca	fix function name	2015-06-15 23:10:39 +08:00
fengmk2	d5c0e07c1c	Release 2.0.0	2015-05-11 22:48:35 +08:00
fengmk2	e108b4804d	Merge pull request #608 from cnpm/http-proxy feat(urllib): support http_proxy	2015-05-11 15:25:33 +08:00
Yiyu He	92c218d755	Merge pull request #610 from cnpm/download-as-stream fix: real download as stream	2015-04-20 00:47:02 +08:00
fengmk2	df2a974b2c	fix: real download as stream	2015-04-20 00:40:06 +08:00
fengmk2	7fc1a8411c	add custom ad banner config	2015-03-28 09:53:44 +08:00
fengmk2	0759328140	add sponsors: ucloud.cn	2015-03-23 09:31:02 +08:00
Yiyu He	3fc2ea7f25	Merge pull request #609 from limianwang/master fix small typo	2015-03-09 14:14:19 +08:00
Limian Wang	2f2794785f	fix small typo	2015-03-08 23:03:52 -07:00
fengmk2	ea1f253624	feat(urllib): support http_proxy Fixes #607	2015-03-09 11:25:05 +08:00
fengmk2	b25eaaf73e	force using https links	2015-02-16 11:19:18 +08:00
fengmk2	0b0164cbf4	Release 2.0.0-rc.15	2015-02-15 11:07:21 +08:00
Yiyu He	8a727c351d	Merge pull request #602 from cnpm/pg feat(database): support PostgreSQL	2015-02-14 23:52:26 +08:00
fengmk2	2c6a08908d	fix(markdown): filter xss after markdown render	2015-02-14 22:02:31 +08:00
fengmk2	9a7e94f7a4	feat(database): support PostgreSQL And the big problem of pg is bigint will be convert to string Fixes #309 Fixes #489	2015-02-14 17:54:04 +08:00
fengmk2	9a2fba42c6	Release 2.0.0-rc.14	2015-02-14 10:21:21 +08:00
fengmk2	ab8d6bfd19	fix config load flows	2015-02-14 10:15:43 +08:00
Yiyu He	619f4310e8	Merge pull request #601 from cnpm/always-auth feat: support always-auth	2015-02-14 10:10:20 +08:00
fengmk2	41eea6747d	feat: support always-auth Add `alwaysAuth: true` to config and set npm cli config. Use 'http://registry.sample.com' for example, set npm config below: $ npm config set '//registry.sample.com/:always-auth=true' Fixes #600	2015-02-13 20:39:40 +08:00
fengmk2	4e3a50f3bb	fix mysql select args = [] bug	2015-02-13 17:51:50 +08:00
fengmk2	e5a9a22f86	fix #597 sequelize raw query.	2015-02-13 17:40:40 +08:00
fengmk2	eb66d8958f	fix(markdown): hotfix markdown-it cpu problem Fixes #598	2015-02-13 17:14:23 +08:00
Yiyu He	8a0dcb5063	Merge pull request #596 from cnpm/co4 feat: upgrade to co4	2015-02-10 09:43:16 +08:00
fengmk2	cba9d5dbbb	feat: upgrade to co4	2015-02-10 09:00:55 +08:00
Yiyu He	233b736401	Merge pull request #595 from cnpm/kcors use kcors fixes #594	2015-02-09 14:05:28 +08:00
fengmk2	58d72bde22	use kcors fixes #594	2015-02-09 14:01:03 +08:00
fengmk2	38683a82ef	Release 2.0.0-rc.13	2015-02-04 01:28:11 +08:00
Yiyu He	71cc54fb3b	Merge pull request #592 from cnpm/easy-deploy Deploy a private npm registry in 5 minutes	2015-02-04 01:24:11 +08:00
fengmk2	b0eb611dc4	use gnode to make sure harmony enable	2015-02-04 01:08:51 +08:00
fengmk2	7e810dba48	docs: Deploy a private npm registry in 5 minutes	2015-02-03 23:15:06 +08:00
fengmk2	f4dc41ede5	bump deps	2015-02-03 19:48:31 +08:00
fengmk2	5574301909	refactor(config): move application data to ~/.cnpmjs.org/	2015-02-03 19:43:53 +08:00
Yiyu He	261c97f1e8	Merge pull request #590 from cnpm/sync-none-proxy-to-npm feat(sync): enable none syncModel proxy all public packages	2015-02-03 18:21:46 +08:00
fengmk2	af8ae63eab	fix(sync): make get popular pakcage faster Fixes #591	2015-02-03 18:09:51 +08:00
fengmk2	89e7ae3ba2	feat(sync): web page also redirect to npm www	2015-02-03 17:28:08 +08:00
fengmk2	46d65a1878	refactor(config): make syncModel to none by default	2015-02-03 15:50:34 +08:00
fengmk2	77074e3ae3	test: fix admin can not publish non-scoped package test cases	2015-02-03 15:15:17 +08:00
dead_horse	34fa887aa8	docs: add chinese mirror link	2015-02-03 01:16:24 +08:00
fengmk2	6dc779a9b4	fix: admin can not publish non scoped package on "none" sync model	2015-02-03 00:51:37 +08:00
fengmk2	24d6831a68	feat(sync): enable none syncModel proxy all public packages Fixes #589 #581	2015-02-03 00:33:50 +08:00
fengmk2	d83c52b32f	Merge pull request #588 from cnpm/stat-user-syncing Star user syncing bugfix	2015-02-01 21:52:34 +08:00
fengmk2	25334e5d95	fix: ignore username start with " or ' Fixes #583	2015-02-01 21:49:25 +08:00
fengmk2	e27af73ccc	remove unused files	2015-02-01 21:33:49 +08:00
fengmk2	f85da0a384	fix(bin): fix stop not work on iojs	2015-02-01 16:49:48 +08:00
fengmk2	1b6159132d	Release 2.0.0-rc.12	2015-02-01 16:44:09 +08:00
fengmk2	2130041f7f	Merge pull request #587 from cnpm/syncer-ua feat(syncer): add hostname ua	2015-02-01 16:43:03 +08:00
fengmk2	b5646e12a6	feat(syncer): add hostname ua Fixes #584	2015-02-01 15:51:54 +08:00
fengmk2	d70c284b83	Merge pull request #586 from cnpm/remove-contributor fix: remove pkg.contributors logic	2015-02-01 15:26:40 +08:00
dead_horse	ddbb0b4fed	fix: remove pkg.contributors logic	2015-02-01 15:18:22 +08:00
fengmk2	35c1a956f7	Release 2.0.0-rc.11	2015-02-01 00:23:09 +08:00
fengmk2	416e2650cc	fix xss tests	2015-02-01 00:22:38 +08:00
Yiyu He	964cfd5242	Merge pull request #582 from cnpm/revert-marky-markdown fix(markdown): revert marky-markdown	2015-02-01 00:21:02 +08:00
fengmk2	dd5ac02876	fix(markdown): revert marky-markdown We dont want to use cpp module	2015-02-01 00:19:05 +08:00
fengmk2	54a11ebb17	Release 2.0.0-rc.10	2015-01-31 22:55:01 +08:00
Yiyu He	9131dcb105	Merge pull request #579 from cnpm/cors feat(middleware): CORS headers for GET and HEAD requests	2015-01-31 22:50:07 +08:00
fengmk2	6e276c58c2	feat(middleware): CORS headers for GET and HEAD requests Fixes #570	2015-01-31 21:35:17 +08:00
Yiyu He	7b1929b717	Merge pull request #580 from cnpm/marky-markdown feat(markdown): use npm same markdown parser	2015-01-31 17:50:24 +08:00
fengmk2	ec4a74f439	fix(readme): fix index page markdown	2015-01-31 17:45:28 +08:00
fengmk2	027d2bb46b	feat(markdown): use npm same markdown parser Fixes #574	2015-01-31 14:27:15 +08:00
Yiyu He	2b6bd06bec	Merge pull request #578 from cnpm/download-redirect-to-nfs feat(download): support download redirect to nfs	2015-01-31 00:44:59 +08:00
fengmk2	ff523d7374	feat(download): support download redirect to nfs	2015-01-31 00:04:02 +08:00
fengmk2	931afd7f4b	Merge pull request #576 from cnpm/npm-request-gzip-enable feat(syncer): request npm registry with gzip	2015-01-30 20:55:59 +08:00
fengmk2	f2724d959f	feat(syncer): request npm registry with gzip Fixes #575	2015-01-30 20:55:40 +08:00
Yiyu He	ca884d92ca	Merge pull request #573 from cnpm/remove-dist change(sync): remove dist syncer	2015-01-29 12:02:29 +08:00
fengmk2	44c8e05563	change(sync): remove dist syncer move to https://github.com/cnpm/mirrors Fixes #523 #504 #307	2015-01-29 10:18:10 +08:00
Yiyu He	8c0f9057ac	Merge pull request #572 from cnpm/dist-tags-endpoints Dist tags endpoints	2015-01-28 22:58:45 +08:00
fengmk2	fde319a788	feat(registry): add dist tag api Fixes #568	2015-01-28 17:11:47 +08:00
fengmk2	c6704782a7	refactor(common): remove redis store	2015-01-28 11:46:43 +08:00
dead_horse	491b91ac0e	Release 2.0.0-rc.9	2015-01-22 12:33:33 +08:00
dead_horse	f7819186e7	hotfix reame render error, pin xss	2015-01-22 12:32:54 +08:00
Yiyu He	4652eca74e	Merge pull request #564 from cnpm/update-registry-api fix registry user auth api	2015-01-16 11:41:04 +08:00
fengmk2	ebb7cbcf68	fix registry user auth api	2015-01-16 11:38:08 +08:00
fengmk2	20b98b1227	update authors	2015-01-10 16:33:33 +08:00
fengmk2	7e288a442c	Release 2.0.0-rc.8	2015-01-10 13:06:31 +08:00
fengmk2	17d1527551	fix(markdown): readme.md allow scripts	2015-01-10 13:04:08 +08:00
Yiyu He	4de50e2bf8	Merge pull request #561 from afc163/patch-1 fix(style) flexbox compatibility for both chrome and firefox	2015-01-09 13:39:08 +08:00
偏右	80bf9d2d73	fix(style) flexbox compatibility for both chrome and firefox	2015-01-09 13:36:39 +08:00
fengmk2	7d8f6ec92f	Merge pull request #559 from cnpm/default-sync-exist feat(sync): default sync exist packages	2015-01-07 11:37:15 +08:00
dead_horse	1bbf4d7ebe	feat(sync): default sync exist packages	2015-01-07 11:04:50 +08:00
fengmk2	88f8cb8fa9	Release 2.0.0-rc.7	2015-01-07 01:57:32 +08:00
fengmk2	7c59fa5e37	install sync dont check `enablePrivate` Fixes #549	2015-01-07 01:56:08 +08:00
fengmk2	ccb24025b5	Merge pull request #555 from cnpm/filter-xss-before-markdown-render fix(markdown): filter xss readme before markdown render	2015-01-05 18:37:13 +08:00
fengmk2	6f24c10cad	fix(markdown): filter xss readme before markdown render Fixes #554	2015-01-05 18:27:56 +08:00
fengmk2	2579b62e3a	Release 2.0.0-rc.6	2015-01-05 10:44:37 +08:00
fengmk2	38ed0a91b2	fix(markdown): use markdown-it Fixes #552	2015-01-04 23:27:07 +08:00
fengmk2	57a025d96e	add userService options on config	2015-01-04 15:50:59 +08:00
fengmk2	eef7467321	add upload to nfs sync info log	2015-01-04 10:59:21 +08:00
fengmk2	4c89b8a4c1	Release 2.0.0-rc.5	2015-01-03 02:46:24 +08:00
fengmk2	353177deee	Merge pull request #553 from cnpm/hotfix-markdown fix(markdown): use marked instead of remarkable	2015-01-03 02:30:08 +08:00
fengmk2	603fdeea06	fix(markdown): use marked instead of remarkable Fixes #552	2015-01-03 02:25:39 +08:00
fengmk2	1850d33b83	Merge pull request #550 from cnpm/sync-user-profile Sync user profile	2015-01-03 01:18:02 +08:00
fengmk2	8827ca26a7	fix(package): pkg.readme is not a string, dont remarkable it Fixes #551	2015-01-03 00:52:56 +08:00
fengmk2	9e34566a19	test(web): change position	2015-01-02 09:25:28 +08:00
fengmk2	8e4fd68cca	feat(sync): sync user profile Fixes #535	2015-01-02 09:22:29 +08:00