fix: use koa-bodyparser instead of koa-middlewares

https://snyk.io/vuln/npm:qs:20170213

package.json

@@ -36,6 +36,7 @@
     "is-type-of": "^1.0.0",
     "kcors": "^1.2.1",
     "koa": "^1.2.0",
+    "koa-bodyparser": "^2.4.0",
     "koa-limit": "^1.0.2",
     "koa-markdown": "^2.0.1",
     "koa-maxrequests": "^1.0.0",

servers/registry.js

@@ -14,6 +14,7 @@ var notFound = require('../middleware/registry_not_found');
 var cors = require('kcors');
 var proxyToNpm = require('../middleware/proxy_to_npm');
 var maxrequests = require('koa-maxrequests');
+var bodyParser = require('koa-bodyparser');
 
 app.use(maxrequests());
 app.use(block());
@@ -24,7 +25,7 @@ app.use(staticCache);
 
 app.keys = ['todokey', config.sessionSecret];
 app.proxy = true;
-app.use(middlewares.bodyParser({ jsonLimit: config.jsonLimit }));
+app.use(bodyParser({ jsonLimit: config.jsonLimit }));
 app.use(cors({
   allowMethods: 'GET,HEAD',
 }));

servers/web.js

@@ -18,6 +18,7 @@ var http = require('http');
 var koa = require('koa');
 var fs = require('fs');
 var maxrequests = require('koa-maxrequests');
+var bodyParser = require('koa-bodyparser');
 
 var app = koa();
 
@@ -43,7 +44,7 @@ app.proxy = true;
 app.use(proxyToNpm({
   isWeb: true
 }));
-app.use(middlewares.bodyParser());
+app.use(bodyParser({ jsonLimit: config.jsonLimit }));
 app.use(auth());
 app.use(notFound);