chore: update versions (6-next) (#2245)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -0,0 +1,245 @@
+{
+  "projectName": "verdaccio",
+  "projectOwner": "verdaccio",
+  "repoType": "github",
+  "repoHost": "https://github.com",
+  "commitConvention": "none",
+  "files": [
+    "CONTRIBUTORS.md"
+  ],
+  "contributors": [
+    {
+      "login": "juanpicado",
+      "name": "Juan Picado",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
+      "profile": "https://www.linkedin.com/in/jotadeveloper/",
+      "contributions": [
+        "doc",
+        "code",
+        "infra",
+        "eventOrganizing",
+        "blog",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "sergiohgz",
+      "name": "Sergio Herrera",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
+      "profile": "https://github.com/sergiohgz",
+      "contributions": [
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "DanielRuf",
+      "name": "Daniel Ruf",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
+      "profile": "https://daniel-ruf.de/",
+      "contributions": [
+        "security",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "priscilawebdev",
+      "name": "Priscila Oliveira",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
+      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
+      "contributions": [
+        "design",
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "ayusharma",
+      "name": "Ayush Sharma",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
+      "profile": "http://ayusharma.github.io/",
+      "contributions": [
+        "infra",
+        "code",
+        "design"
+      ]
+    },
+    {
+      "login": "trentearl",
+      "name": "Trent Earl",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
+      "profile": "https://github.com/trentearl",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jmwilkinson",
+      "name": "jmwilkinson",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
+      "profile": "https://github.com/jmwilkinson",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "bufferoverflow",
+      "name": "Roger Meier",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
+      "profile": "https://github.com/bufferoverflow",
+      "contributions": [
+        "plugin"
+      ]
+    },
+    {
+      "login": "jamesgeorge007",
+      "name": "James George",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
+      "profile": "https://ghuser.io/jamesgeorge007",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "AvailCat",
+      "name": "AvailCat",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
+      "profile": "https://github.com/AvailCat",
+      "contributions": [
+        "code",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "lgaitan",
+      "name": "Lucius Gaitán",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
+      "profile": "https://www.luciusgaitan.com/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ramonornela",
+      "name": "Ramon Henrique Ornelas",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
+      "profile": "https://github.com/ramonornela",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "UnitedMarsupials-zz",
+      "name": "UnitedMarsupials-zz",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
+      "profile": "https://people.freebsd.org/~mi/resume/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ryan-codingintrigue",
+      "name": "Ryan Graham",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
+      "profile": "http://www.codingintrigue.co.uk/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "coolsp",
+      "name": "coolsp",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
+      "profile": "https://github.com/coolsp",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ashishsurana",
+      "name": "Ashish Surana",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
+      "profile": "http://ashishsurana.in/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "buffaybu",
+      "name": "Wang Yifei",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
+      "profile": "https://github.com/buffaybu",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "lirantal",
+      "name": "Liran Tal",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
+      "profile": "https://twitter.com/liran_tal",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "brenordr",
+      "name": "Breno Rodrigues",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
+      "profile": "https://github.com/brenordr",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jachstet-sea",
+      "name": "jachstet-sea",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
+      "profile": "https://github.com/jachstet-sea",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "Vrtak-CZ",
+      "name": "Patrik Votoček",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
+      "profile": "https://patrik.votocek.cz/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "monkeywithacupcake",
+      "name": "jess",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
+      "profile": "https://github.com/monkeywithacupcake",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "toolsofraj",
+      "name": "toolsofraj",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
+      "profile": "https://github.com/toolsofraj",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ddhp",
+      "name": "Jian-Chen Chen (jesse)",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
+      "profile": "https://github.com/ddhp",
+      "contributions": [
+        "translation",
+        "code"
+      ]
+    }
+  ],
+  "skipCi": true,
+  "contributorsPerLine": 7
+}

.babelrc

@@ -0,0 +1,26 @@
+{
+  "presets": [ [
+    "@babel/env",
+    {
+      "useBuiltIns": "usage",
+      "corejs": {
+        "version": 3, "proposals": true
+      },
+      "targets": {
+        "node": 12
+      }
+    }
+  ],
+    "@babel/typescript"
+  ],
+  "plugins": [
+    "babel-plugin-dynamic-import-node",
+    "@babel/proposal-class-properties",
+    "@babel/proposal-object-rest-spread",
+    "@babel/plugin-proposal-optional-chaining",
+    "@babel/plugin-proposal-nullish-coalescing-operator"
+    ],
+  "ignore": [
+    "**/*.d.ts"
+  ]
+}

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/master/docs/common-questions.md)

.changeset/afraid-mice-obey.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/types': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/web': minor
+---
+
+allow disable login on ui and endpoints
+
+To be able disable the login, set `login: false`, anything else would enable login. This flag will disable access via UI and web endpoints.
+
+```yml
+web:
+  title: verdaccio
+  login: false
+```

.changeset/big-lobsters-sin.md

@@ -0,0 +1,23 @@
+---
+'@verdaccio/local-storage': major
+'@verdaccio/url': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/store': major
+---
+
+# async storage plugin bootstrap
+
+Gives a storage plugin the ability to perform asynchronous tasks on initialization
+
+## Breaking change
+
+Plugin must have an init method in which asynchronous tasks can be executed
+
+```js
+public async init(): Promise<void> {
+   this.data = await this._fetchLocalPackages();
+   this._sync();
+}
+```

.changeset/calm-pants-impress.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-aws-s3-storage': patch
+---
+
+Fix the prefix used to delete from s3 when unpublishing packages

.changeset/config.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@1.3.0/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "linked": [],
+  "access": "public",
+  "baseBranch": "master",
+  "updateInternalDependencies": "patch",
+  "ignore": []
+}

.changeset/few-cooks-destroy.md

@@ -0,0 +1,46 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/commons-api': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'@verdaccio/readme': major
+'@verdaccio/streams': major
+'@verdaccio/types': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/mock': major
+'@verdaccio/node-api': major
+'@verdaccio/active-directory': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/proxy': major
+'@verdaccio/server': major
+'@verdaccio/store': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+'@verdaccio/website': major
+---
+
+feat!: experiments config renamed to flags
+
+- The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
+
+```js
+flags: token: false;
+search: false;
+```
+
+- The `self_path` property from the config file is being removed in favor of `config_file` full path.
+- Refactor `config` module, better types and utilities

.changeset/fifty-jars-rest.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/web': patch
+---
+
+Remove @ts-ignore and any in packages/web/src/endpoint/package.ts

.changeset/gentle-parrots-lay.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/e2e-ui': minor
+---
+
+Some verdaccio modules depend on 'mkdirp' library which provides recursive directory creation functionality.
+NodeJS can do this out of the box since v.10.12. The last commit in 'mkdirp' was made in early 2016, and it's mid 2021 now.
+Time to stick with a built-in library solution!
+
+- All 'mkdirp' calls are replaced with appropriate 'fs' calls.

.changeset/gentle-trains-switch.md

@@ -0,0 +1,44 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/commons-api': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'@verdaccio/readme': major
+'@verdaccio/streams': major
+'@verdaccio/types': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/mock': major
+'@verdaccio/node-api': major
+'@verdaccio/proxy': major
+'@verdaccio/server': major
+'@verdaccio/store': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+- Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
+- Introduce environment variables for legacy tokens
+
+### Code Improvements
+
+- Add debug library for improve developer experience
+
+### Breaking change
+
+- The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+- The secret key must have 32 characters long.
+
+### New environment variables
+
+- `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+- `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory

.changeset/gold-vans-tease.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/utils': patch
+---
+
+Fixed the validation of the name when searching for a tarball that have scoped package name

.changeset/healthy-bikes-behave.md

@@ -0,0 +1,21 @@
+---
+'@verdaccio/cli': patch
+'@verdaccio/types': patch
+'@verdaccio/node-api': patch
+'@verdaccio/server': patch
+---
+
+fix: restore logger on init
+
+Enable logger after parse configuration and log the very first step on startup phase.
+
+```bash
+ warn --- experiments are enabled, it is recommended do not use experiments in production comment out this section to disable it
+ info --- support for experiment [token]  is disabled
+ info --- support for experiment [search]  is disabled
+(node:50831) Warning: config.logs is deprecated, rename configuration to "config.log"
+(Use `node --trace-warnings ...` to show where the warning was created)
+ info --- http address http://localhost:4873/
+ info --- version: 6.0.0-6-next.11
+ info --- server started
+```

.changeset/healthy-poets-compare.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/config': patch
+---
+
+Feature
+
+- add option to set storage from environment variable VERDACCIO_STORAGE_PATH
+
+#### Related tickets
+
+https://github.com/verdaccio/verdaccio/issues/1681

.changeset/heavy-ravens-lay.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/cli': minor
+'@verdaccio/fastify-migration': minor
+---
+
+[Fastify] Add ping endpoint

.changeset/hip-hounds-destroy.md

@@ -0,0 +1,39 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/server': patch
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/readme': patch
+'@verdaccio/streams': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/active-directory': patch
+'verdaccio-audit': patch
+'verdaccio-auth-memory': patch
+'verdaccio-aws-s3-storage': patch
+'verdaccio-google-cloud': patch
+'verdaccio-memory': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+'@verdaccio/web': patch
+'@verdaccio/e2e-cli': patch
+'@verdaccio/e2e-ui': patch
+'@verdaccio/website': patch
+---
+
+chore: add release step to private regisry on merge changeset pr

.changeset/late-adults-love.md

@@ -0,0 +1,20 @@
+---
+'@verdaccio/api': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+---
+
+feat: remove level dependency by lowdb for npm token cli as storage
+
+### new npm token database
+
+There will be a new database located in your storage named `.token-db.json` which
+will store all references to created tokens, **it does not store tokens**, just
+mask of them and related metadata required to reference them.
+
+#### Breaking change
+
+If you were relying on `npm token` experiment. This PR will replace the
+used database (level) by a json plain based one (lowbd) which does not
+require Node.js C++ compilation step and has less dependencies. Since was
+a experiment there is no migration step.

.changeset/late-parents-act.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/hooks': patch
+'@verdaccio/proxy': patch
+---
+
+refactor: migrate request to node-fetch at hooks package

.changeset/many-vans-care.md

@@ -0,0 +1,16 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/mock': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/server': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+---
+
+Bug Fixes
+
+- fix escaped slash in namespaced packages
+
+#### Related tickets
+
+https://github.com/verdaccio/verdaccio/pull/2193

.changeset/modern-spies-tell.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': minor
+'verdaccio': minor
+---
+
+feat: ui theme plugin part of the application

.changeset/neat-toes-report.md

@@ -0,0 +1,51 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/commons-api': minor
+'@verdaccio/file-locking': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/readme': minor
+'@verdaccio/streams': minor
+'@verdaccio/types': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/mock': minor
+'@verdaccio/node-api': minor
+'@verdaccio/active-directory': minor
+'verdaccio-audit': minor
+'verdaccio-auth-memory': minor
+'verdaccio-aws-s3-storage': minor
+'verdaccio-google-cloud': minor
+'verdaccio-memory': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/store': minor
+'@verdaccio/dev-types': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+---
+
+feat: add server rate limit protection to all request
+
+To modify custom values, use the server settings property.
+
+```markdown
+server:
+
+## https://www.npmjs.com/package/express-rate-limit#configuration-options
+
+rateLimit:
+windowMs: 1000
+max: 10000
+```
+
+The values are intended to be high, if you want to improve security of your server consider
+using different values.

.changeset/perfect-kangaroos-agree.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/cli': major
+---
+
+feat: use clipanion over commander

.changeset/plenty-news-remember.md

@@ -0,0 +1,30 @@
+---
+'@verdaccio/auth': major
+'verdaccio-htpasswd': major
+'verdaccio-audit': major
+'@verdaccio/server': major
+'@verdaccio/cli-standalone': major
+---
+
+feat: standalone registry with no dependencies
+
+## Usage
+
+To install a server with no dependencies
+
+```bash
+npm install -g @verdaccio/standalone
+```
+
+with no internet required
+
+```bash
+npm install -g ./tarball.tar.gz
+```
+
+Bundles htpasswd and audit plugins.
+
+### Breaking Change
+
+It does not allow anymore the `auth` and `middleware` property at config file empty,
+it will fallback to those plugins by default.

.changeset/plenty-spiders-melt.md

@@ -0,0 +1,36 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/commons-api': minor
+'@verdaccio/file-locking': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/readme': minor
+'@verdaccio/streams': minor
+'@verdaccio/types': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/mock': minor
+'@verdaccio/node-api': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/store': minor
+'@verdaccio/dev-types': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+'@verdaccio/website': minor
+---
+
+feat: add typescript project references settings
+
+Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
+
+It allows to navigate (IDE) trough the packages without need compile the packages.
+
+Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).

.changeset/plenty-tables-refuse.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/cli': minor
+'@verdaccio/node-api': minor
+---
+
+feat: improve cli loggin on start up

.changeset/pre.json

@@ -0,0 +1,77 @@
+{
+  "mode": "pre",
+  "tag": "6-next",
+  "initialVersions": {
+    "@verdaccio/api": "6.0.0-alpha.0",
+    "@verdaccio/auth": "6.0.0-alpha.0",
+    "@verdaccio/cli": "6.0.0-alpha.0",
+    "@verdaccio/config": "6.0.0-alpha.0",
+    "@verdaccio/commons-api": "11.0.0-alpha.0",
+    "@verdaccio/file-locking": "11.0.0-alpha.0",
+    "verdaccio-htpasswd": "11.0.0-alpha.0",
+    "@verdaccio/local-storage": "11.0.0-alpha.0",
+    "@verdaccio/readme": "11.0.0-alpha.0",
+    "@verdaccio/streams": "11.0.0-alpha.0",
+    "@verdaccio/types": "11.0.0-alpha.0",
+    "@verdaccio/hooks": "6.0.0-alpha.0",
+    "@verdaccio/loaders": "6.0.0-alpha.0",
+    "@verdaccio/logger": "6.0.0-alpha.0",
+    "@verdaccio/logger-prettify": "6.0.0-alpha.0",
+    "@verdaccio/middleware": "6.0.0-alpha.0",
+    "@verdaccio/mock": "6.0.0-alpha.0",
+    "@verdaccio/node-api": "6.0.0-alpha.0",
+    "@verdaccio/proxy": "6.0.0-alpha.0",
+    "@verdaccio/server": "6.0.0-alpha.0",
+    "@verdaccio/store": "6.0.0-alpha.0",
+    "@verdaccio/dev-types": "6.0.0-alpha.0",
+    "@verdaccio/utils": "6.0.0-alpha.0",
+    "verdaccio": "6.0.0-alpha.0",
+    "@verdaccio/web": "6.0.0-alpha.0",
+    "@verdaccio/active-directory": "11.0.0-alpha.0",
+    "verdaccio-audit": "11.0.0-alpha.0",
+    "verdaccio-auth-memory": "11.0.0-alpha.0",
+    "verdaccio-aws-s3-storage": "11.0.0-alpha.0",
+    "verdaccio-google-cloud": "11.0.0-alpha.0",
+    "verdaccio-memory": "11.0.0-alpha.0",
+    "@verdaccio/ui-theme": "6.0.0-alpha.1",
+    "@verdaccio/e2e-cli": "1.0.0",
+    "@verdaccio/e2e-ui": "1.0.0",
+    "@verdaccio/cli-standalone": "6.0.0-alpha.3",
+    "@verdaccio/tarball": "11.0.0-alpha.3",
+    "@verdaccio/url": "11.0.0-alpha.3",
+    "@verdaccio/fastify-migration": "6.0.0-6-next.9",
+    "@verdaccio/eslint-config": "1.0.0"
+  },
+  "changesets": [
+    "afraid-mice-obey",
+    "big-lobsters-sin",
+    "calm-pants-impress",
+    "few-cooks-destroy",
+    "fifty-jars-rest",
+    "gentle-parrots-lay",
+    "gentle-trains-switch",
+    "gold-vans-tease",
+    "healthy-bikes-behave",
+    "healthy-poets-compare",
+    "heavy-ravens-lay",
+    "hip-hounds-destroy",
+    "late-adults-love",
+    "late-parents-act",
+    "many-vans-care",
+    "modern-spies-tell",
+    "neat-toes-report",
+    "perfect-kangaroos-agree",
+    "plenty-news-remember",
+    "plenty-spiders-melt",
+    "plenty-tables-refuse",
+    "pretty-hounds-tap",
+    "red-chefs-float",
+    "shiny-chefs-heal",
+    "smart-apricots-kneel",
+    "spicy-frogs-press",
+    "tender-bags-call",
+    "three-pots-sit",
+    "two-dolls-check",
+    "wild-jokes-beam"
+  ]
+}

.changeset/pretty-hounds-tap.md

@@ -0,0 +1,29 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/readme': patch
+'@verdaccio/streams': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/proxy': patch
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+'@verdaccio/web': patch
+---
+
+Enable prerelease mode with **changesets**

.changeset/red-chefs-float.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/web': patch
+---
+
+Fix the search by exact name of the package
+
+Full package name queries was not finding anithing. It was happening
+becouse of stemmer of [lunr.js](https://lunrjs.com/).
+
+To fix this, the stemmer of [lunr.js](https://lunrjs.com/) was removed from search pipeline.

.changeset/shiny-chefs-heal.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+testing changesets

.changeset/smart-apricots-kneel.md

@@ -0,0 +1,79 @@
+---
+'@verdaccio/ui-theme': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/web': major
+---
+
+feat: flexible user interface generator
+
+**breaking change**
+
+The UI does not provide a pre-generated `index.html`, instead the server generates
+the body of the web application based in few parameters:
+
+- Webpack manifest
+- User configuration details
+
+It allows inject html tags, javascript and new CSS to make the page even more flexible.
+
+### Web new properties for dynamic template
+
+The new set of properties are made in order allow inject _html_ and _JavaScript_ scripts within the template. This
+might be useful for scenarios like Google Analytics scripts or custom html in any part of the body.
+
+- metaScripts: html injected before close the `head` element.
+- scriptsBodyAfter: html injected before close the `body` element.
+- bodyAfter: html injected after _verdaccio_ JS scripts.
+
+```yaml
+web:
+  scriptsBodyAfter:
+    - '<script type="text/javascript" src="https://my.company.com/customJS.min.js"></script>'
+  metaScripts:
+    - '<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>'
+    - '<script type="text/javascript" src="https://browser.sentry-cdn.com/5.15.5/bundle.min.js"></script>'
+    - '<meta name="robots" content="noindex" />'
+  bodyBefore:
+    - '<div id="myId">html before webpack scripts</div>'
+  bodyAfter:
+    - '<div id="myId">html after webpack scripts</div>'
+```
+
+### UI plugin changes
+
+- `index.html` is not longer used, template is generated based on `manifest.json` generated by webpack.
+- Plugin must export:
+  - the manifest file.
+  - the manifest files: matcher (array of id that generates required scripts to run the ui)
+  - static path: The absolute path where the files are located in `node_modules`
+
+```
+exports.staticPath = path.join(__dirname, 'static');
+exports.manifest = require('./static/manifest.json');
+exports.manifestFiles = {
+  js: ['runtime.js', 'vendors.js', 'main.js'],
+  css: [],
+  ico: 'favicon.ico',
+};
+```
+
+- Remove font files
+- CSS is inline on JS (this will help with #2046)
+
+### Docker v5 Examples
+
+- Move all current examples to v4 folder
+- Remove any v3 example
+- Create v5 folder with Nginx Example
+
+#### Related tickets
+
+https://github.com/verdaccio/verdaccio/issues/1523
+https://github.com/verdaccio/verdaccio/issues/1297
+https://github.com/verdaccio/verdaccio/issues/1593
+https://github.com/verdaccio/verdaccio/discussions/1539
+https://github.com/verdaccio/website/issues/264
+https://github.com/verdaccio/verdaccio/issues/1565
+https://github.com/verdaccio/verdaccio/issues/1251
+https://github.com/verdaccio/verdaccio/issues/2029
+https://github.com/verdaccio/docker-examples/issues/29

.changeset/spicy-frogs-press.md

@@ -0,0 +1,32 @@
+---
+'verdaccio-htpasswd': major
+---
+
+feat: allow other password hashing algorithms (#1917)
+
+**breaking change**
+
+The current implementation of the `htpasswd` module supports multiple hash formats on verify, but only `crypt` on sign in.
+`crypt` is an insecure old format, so to improve the security of the new `verdaccio` release we introduce the support of multiple hash algorithms on sign in step.
+
+### New hashing algorithms
+
+The new possible hash algorithms to use are `bcrypt`, `md5`, `sha1`. `bcrypt` is chosen as a default, because of its customizable complexity and overall reliability. You can read more about them [here](https://httpd.apache.org/docs/2.4/misc/password_encryptions.html).
+
+Two new properties are added to `auth` section in the configuration file:
+
+- `algorithm` to choose the way you want to hash passwords.
+- `rounds` is used to determine `bcrypt` complexity. So one can improve security according to increasing computational power.
+
+Example of the new `auth` config file section:
+
+```yaml
+auth:
+htpasswd:
+  file: ./htpasswd
+  max_users: 1000
+  # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+  algorithm: bcrypt
+  # Rounds number for "bcrypt", will be ignored for other algorithms.
+  rounds: 10
+```

.changeset/tender-bags-call.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/logger': major
+---
+
+logging prettifier only in development mode
+
+- Verdaccio prettify `@verdaccio/logger-prettify` the logging which looks beautiful. But there are scenarios which does not make sense in production. This feature enables disable by default the prettifies if production `NODE_ENV` is enabled.
+- Updates pino.js to `^6.7.0`.
+- Suppress the warning when prettifier is enabled `suppressFlushSyncWarning`

.changeset/three-pots-sit.md

@@ -0,0 +1,33 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/readme': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/proxy': patch
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+---
+
+ESLint Warnings Fixed
+
+Related to issue #1461
+
+- max-len: most of the sensible max-len errors are fixed
+- no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
+- @typescript-eslint/no-unused-vars: same as above

.changeset/two-dolls-check.md

@@ -0,0 +1,28 @@
+---
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/types': major
+'@verdaccio/logger': major
+'@verdaccio/node-api': major
+'verdaccio-google-cloud': major
+'verdaccio': major
+---
+
+feat: node api new structure based on promise
+
+```js
+import { runServer } from '@verdaccio/node-api';
+// or
+import { runServer } from 'verdaccio';
+
+const app = await runServer(); // default configuration
+const app = await runServer('./config/config.yaml');
+const app = await runServer({ configuration });
+app.listen(4000, (event) => {
+  // do something
+});
+```
+
+### Breaking Change
+
+If you are using the node-api, the new structure is Promise based and less arguments.

.changeset/wild-jokes-beam.md

@@ -0,0 +1,32 @@
+---
+'@verdaccio/types': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/web': minor
+---
+
+web: allow ui hide package managers on sidebar
+
+If there is a package manager of preference over others, you can define the package managers to be displayed on the detail page and sidebar, just define in the `config.yaml` and web section the list of package managers to be displayed.
+
+```
+web:
+  title: Verdaccio
+  sort_packages: asc
+  primary_color: #cccccc
+  pkgManagers:
+    - pnpm
+    - yarn
+    # - npm
+```
+
+To disable all package managers, just define empty:
+
+```
+web:
+  title: Verdaccio
+  sort_packages: asc
+  primary_color: #cccccc
+  pkgManagers:
+```
+
+and the section would be hidden.

.dockerignore

@@ -8,22 +8,22 @@
 .*
 # you can add exceptions like in .gitignore to maintain a whitelist:
 # e.g.
-!babel.config.js
-!eslintrc.js
-!.prettierrc
+!.babelrc
+!.eslintrc
+!.prettierrc.json
+!.prettierignore
 !.eslintignore
 !.stylelintrc
-!.jest.config.js
-!.jestEnvironment.js
-!.yarnrc.yml
-!.yarn/releases/yarn-*.cjs
-!.yarn/plugins/*
-!.pnp.js
 
-# just in case, yarn 2 pnp is enabled
+# do not copy over node_modules we will run `pnpm install` anyway
 node_modules
-.husky/
-.git/
+website
+jest
+docs
+contrib
+docker-examples
+website
+systemd
 
 # output from test runs and similar things
 *.log
@@ -33,21 +33,7 @@ coverage/
 # IDE config files
 jsconfig.json
 *.iml
+
 # let's not get too recursive ;)
 Dockerfile*
 docker-compose*.yaml
-.github/
-.husky/
-*.log
-coverage/
-.vscode/
-*.md
-contrib/
-docs/
-docker-examples/
-systemd/
-assets/
-jest*.js
-test/
-wiki/
-debug/

.editorconfig

@@ -7,6 +7,7 @@ end_of_line = lf
 insert_final_newline = true
 
 # 2 space indentation
-[{.,}*.{js,jsx,yml,yaml}]
+[{.,}*.{ts,tsx,js,jsx,yml,yaml}]
 indent_style = space
 indent_size = 2
+quote_type = single

.eslintignore

@@ -0,0 +1,12 @@
+**/fixtures/**
+**/mock/store/**
+**/partials/**
+**/types/custom.d.ts
+build/
+coverage/
+flow-typed/
+node_modules/
+static/
+website/
+wiki/
+dist/

.eslintrc.js

@@ -0,0 +1,3 @@
+module.exports = {
+  extends: ['@verdaccio/eslint-config'],
+};

.gitattributes

@@ -0,0 +1,199 @@
+## GITATTRIBUTES FOR WEB PROJECTS
+#
+# These settings are for any web project.
+#
+# Details per file setting:
+#   text    These files should be normalized (i.e. convert CRLF to LF).
+#   binary  These files are binary and should be left untouched.
+#
+# Note that binary is a macro for -text -diff.
+######################################################################
+
+# Auto detect
+##   Handle line endings automatically for files detected as
+##   text and leave all files detected as binary untouched.
+##   This will handle all files NOT defined below.
+*                 text=lf
+
+# Source code
+*.bash            text eol=lf
+*.bat             text eol=crlf
+*.cmd             text eol=crlf
+*.coffee          text eol=lf
+*.css             text eol=lf
+*.htm             text diff=html
+*.html            text diff=html
+*.inc             text eol=lf
+*.ini             text eol=lf
+*.js              text eol=lf
+*.json            text eol=lf
+*.jsx             text eol=lf
+*.less            text eol=lf
+*.ls              text eol=lf
+*.map             text -diff
+*.od              text eol=lf
+*.onlydata        text eol=lf
+*.php             text diff=php
+*.pl              text eol=lf
+*.ps1             text eol=crlf
+*.py              text diff=python
+*.rb              text diff=ruby
+*.sass            text eol=lf
+*.scm             text eol=lf
+*.scss            text diff=css
+*.sh              text eol=lf
+*.sql             text eol=lf
+*.styl            text eol=lf
+*.tag             text eol=lf
+*.ts              text eol=lf
+*.tsx             text eol=lf
+*.xml             text eol=lf
+*.xhtml           text diff=html
+
+# Docker
+Dockerfile        text eol=lf
+
+# Documentation
+*.ipynb           text eol=lf
+*.markdown        text eol=lf
+*.md              text eol=lf
+*.mdwn            text eol=lf
+*.mdown           text eol=lf
+*.mkd             text eol=lf
+*.mkdn            text eol=lf
+*.mdtxt           text eol=lf
+*.mdtext          text eol=lf
+*.txt             text eol=lf
+AUTHORS           text eol=lf
+CHANGELOG         text eol=lf
+CHANGES           text eol=lf
+CONTRIBUTING      text eol=lf
+COPYING           text eol=lf
+copyright         text eol=lf
+*COPYRIGHT*       text eol=lf
+INSTALL           text eol=lf
+license           text eol=lf
+LICENSE           text eol=lf
+NEWS              text eol=lf
+readme            text eol=lf
+*README*          text eol=lf
+TODO              text eol=lf
+
+# Templates
+*.dot             text eol=lf
+*.ejs             text eol=lf
+*.haml            text eol=lf
+*.handlebars      text eol=lf
+*.hbs             text eol=lf
+*.hbt             text eol=lf
+*.jade            text eol=lf
+*.latte           text eol=lf
+*.mustache        text eol=lf
+*.njk             text eol=lf
+*.phtml           text eol=lf
+*.tmpl            text eol=lf
+*.tpl             text eol=lf
+*.twig            text eol=lf
+*.vue             text eol=lf
+
+# Configs
+*.cnf             text eol=lf
+*.conf            text eol=lf
+*.config          text eol=lf
+.editorconfig     text eol=lf
+.env              text eol=lf
+.gitattributes    text eol=lf
+.gitconfig        text eol=lf
+.htaccess         text eol=lf
+*.lock            text -diff
+package-lock.json text -diff
+*.toml            text eol=lf
+*.yaml            text eol=lf
+*.yml             text eol=lf
+browserslist      text eol=lf
+Makefile          text eol=lf
+makefile          text eol=lf
+
+# Heroku
+Procfile          text eol=lf
+
+# Graphics
+*.ai              binary
+*.bmp             binary
+*.eps             binary
+*.gif             binary
+*.gifv            binary
+*.ico             binary
+*.jng             binary
+*.jp2             binary
+*.jpg             binary
+*.jpeg            binary
+*.jpx             binary
+*.jxr             binary
+*.pdf             binary
+*.png             binary
+*.psb             binary
+*.psd             binary
+# SVG treated as an asset (binary) by default.
+*.svg             text eol=lf
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg           binary
+*.svgz            binary
+*.tif             binary
+*.tiff            binary
+*.wbmp            binary
+*.webp            binary
+
+# Audio
+*.kar             binary
+*.m4a             binary
+*.mid             binary
+*.midi            binary
+*.mp3             binary
+*.ogg             binary
+*.ra              binary
+
+# Video
+*.3gpp            binary
+*.3gp             binary
+*.as              binary
+*.asf             binary
+*.asx             binary
+*.fla             binary
+*.flv             binary
+*.m4v             binary
+*.mng             binary
+*.mov             binary
+*.mp4             binary
+*.mpeg            binary
+*.mpg             binary
+*.ogv             binary
+*.swc             binary
+*.swf             binary
+*.webm            binary
+
+# Archives
+*.7z              binary
+*.gz              binary
+*.jar             binary
+*.rar             binary
+*.tar             binary
+*.zip             binary
+
+# Fonts
+*.ttf             binary
+*.eot             binary
+*.otf             binary
+*.woff            binary
+*.woff2           binary
+
+# Executables
+*.exe             binary
+*.pyc             binary
+
+# RC files (like .babelrc or .eslintrc)
+*.*rc             text eol=lf
+
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text eol=lf

.github/ISSUE_TEMPLATE/bug_report.md

@@ -7,9 +7,11 @@ assignees: ''
 ---
 
 **Describe the bug**
+
 <!-- A clear and concise description of what the bug is. -->
 
 **To Reproduce**
+
 <!-- IMPORTANT:
  - How to reproduce the issue
  - Steps to reproduce the issue
@@ -18,9 +20,11 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 -->
 
 **Expected behavior**
+
 <!-- A clear and concise description of what you expected to happen. -->
 
 **Screenshots**
+
 <!-- If applicable, add screenshots to help explain your problem.  -->
 
 **Configuration File (cat ~/.config/verdaccio/config.yaml)**
@@ -28,16 +32,17 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 <!-- Please be careful do not leak any sensitive information, remove tokens -->
 
 **Environment information**
+
 <!-- Please paste the results of running `verdaccio --info` -->
 
 **Debugging output**
- - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
- - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
- - `$ npm -ddd` prints:
- - `$ npm config get registry` prints:
+
+- `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
+- `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+- `$ npm -ddd` prints:
+- `$ npm config get registry` prints:
 
 <!--
 
 IMPORTANT: please do not attach external files, all content should be visible from any device.
 -->
-

.github/ISSUE_TEMPLATE/feature.md

@@ -1,10 +1,9 @@
 ---
-name: "Feature Request \U0001F52E"
+name: 'Feature Request 🔮'
 about: You want a feature request.
 title: ''
 labels: 'topic: feature request'
 assignees: ''
-
 ---
 
 <!--

.github/dependabot.yml

@@ -5,23 +5,21 @@
 
 version: 2
 updates:
-
   # Maintain dependencies for GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
 
   # Maintain dependencies for npm
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "daily"
-    allow:   
-      - dependency-name: "@verdaccio/*"
-      - dependency-name: "verdaccio-*"
+      interval: 'daily'
+    allow:
+      - dependency-name: '@verdaccio/*'
+      - dependency-name: 'verdaccio-*'
     assignees:
-      - "verdacciobot"
+      - 'verdacciobot'
     labels:
-      - "bot: dependencies"
-      
+      - 'bot: dependencies'

.github/disabled/e2e-angular-cli-workflow.yml

@@ -0,0 +1,131 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Angular CLI with verdaccio'
+jobs:
+  # todo: fix yarn global issue, cannot find ng
+  #  yarn:
+  #    strategy:
+  #      fail-fast: false
+  #      matrix:
+  #        os: [ubuntu-latest, windows-latest]
+  #
+  #    name: '${{ matrix.os }} / yarn:angular example'
+  #    runs-on: ${{ matrix.os }}
+  #
+  #    steps:
+  #      - uses: actions/checkout@v2.3.1
+  #
+  #      - name: 'Use Node.js 10.x'
+  #        uses: actions/setup-node@v2.1.1
+  #        with:
+  #          node-version: 10.x
+  #      - name: Install Dependencies
+  #        run: yarn install --pure-lockfile
+  #      - name: 'Run verdaccio in the background'
+  #        run: |
+  #          nohup node ./scripts/run-verdaccio.js &
+  #      - name: 'Ping to verdaccio'
+  #        run: |
+  #          npm ping --registry http://localhost:4873
+  #      - name: 'Running the integration test'
+  #        run: |
+  #          source scripts/e2e-setup-ci.sh
+  #          yarn init --yes
+  #
+  #          yarn global add @angular/cli
+  #          which nodemon
+  #          ng new verdaccio-angular --interactive=false
+  #
+  #          cd verdaccio-angular
+  #          echo "registry=http://localhost:4873" > ~/.npmrc
+  #          yarn add @angular-devkit/core@next @babel/preset-env @babel/core -D
+  #
+  #          ng build --aot
+  npm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:angular example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest npm'
+        run: npm i -g npm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="http"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+
+#  pnpm throws errors worth to check why
+#  pnpm:
+#    strategy:
+#      fail-fast: false
+#      matrix:
+#        os: [ubuntu-latest, windows-latest]
+#
+#    name: '${{ matrix.os }} / pnpm:angular example'
+#    runs-on: ${{ matrix.os }}
+#
+#    steps:
+#      - uses: actions/checkout@v2.3.1
+#
+#      - name: 'Use Node.js 10.x'
+#        uses: actions/setup-node@v2.1.1
+#        with:
+#          node-version: 10.x
+#      - name: 'install latest pnpm'
+#        run: npm i -g pnpm
+#      - name: Install Dependencies
+#        run: yarn install --pure-lockfile
+#      - name: 'Run verdaccio in the background'
+#        run: |
+#          nohup node ./scripts/run-verdaccio.js &
+#      - name: 'Ping to verdaccio'
+#        run: |
+#          pnpm ping --registry http://localhost:4873
+#      - name: 'Running the integration test'
+#        run: |
+#          source scripts/e2e-setup-ci.sh
+#          pnpm init --force
+#
+#          pnpm install -g @angular/cli
+#          ng new verdaccio-angular --interactive=false
+#
+#          cd verdaccio-angular
+#          echo "registry=http://localhost:4873" > ~/.npmrc
+#          pnpm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+#
+#          pnpm run ng build --aot

.github/disabled/e2e-gatsbyjs-cli-workflow.yml

@@ -0,0 +1,49 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Gatsby.js CLI with verdaccio'
+jobs:
+  npm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:gatsby example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 14.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 14.x
+      - name: 'install latest npm'
+        run: npm i -g npm@latest-6
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="silent"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build

.github/disabled/e2e-jest-workflow.yml

@@ -0,0 +1,121 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Jest with verdaccio'
+jobs:
+  yarn:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / yarn:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn add jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest npm'
+        run: npm i -g npm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --force
+          npm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  pnpm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / pnpm:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init --force
+          pnpm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js

.github/disabled/registry.yml

@@ -0,0 +1,13 @@
+name: Test local registry for js vulnerabilities
+
+on:
+  schedule:
+    - cron: '0 4 * * 4'
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Test for public javascript library vulnerabilities
+        uses: lirantal/is-website-vulnerable@1.15.10
+        with:
+          scan-url: 'https://registry.verdaccio.org'

.github/disabled/release-canary.yml

@@ -0,0 +1,35 @@
+name: Canary Release to Verdaccio
+
+on:
+  pull_request:
+    paths:
+      - .github/workflows/release-canary.yml
+      - 'packages/**'
+      - 'package.json'
+      - 'lerna.json'
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: Use Node (latest)
+        uses: actions/setup-node@v1
+        with:
+          node_version: 13
+      - name: Install
+        run: yarn --frozen-lockfile
+      - name: Clean
+        run: yarn clean
+      - name: Lint
+        run: yarn lint
+      - name: Build
+        run: yarn build
+      - name: Test
+        run: yarn test
+      - name: Publish
+        run: |
+          echo "//registry.verdaccio.org/:_authToken=${{ secrets.VERDACCIO_TOKEN }}" > .npmrc
+          git update-index --assume-unchanged .npmrc
+          yarn publish:canary

.github/lock.yml

@@ -0,0 +1,35 @@
+# Configuration for lock-threads - https://github.com/dessant/lock-threads
+
+# Number of days of inactivity before a closed issue or pull request is locked
+daysUntilLock: 90
+
+# Issues and pull requests with these labels will not be locked. Set to `[]` to disable
+exemptLabels: []
+
+# Label to add before locking, such as `outdated`. Set to `false` to disable
+lockLabel: false
+
+# Comment to post before locking. Set to `false` to disable
+lockComment: >
+  🤖This thread has been automatically locked 🔒 since there has not been
+  any recent activity after it was closed. 
+
+  We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data 
+  and to provide you better feedback 🤝and better visibility 👀. 
+
+  If you consider, you can attach this ticket 📨 to the new one as a reference for better context.
+
+  Thanks for being a part of the Verdaccio community! 💘
+
+# Limit to only `issues` or `pulls`
+# only: issues
+
+# Optionally, specify configuration settings just for `issues` or `pulls`
+issues:
+  exemptLabels:
+    - help-wanted
+  lockLabel: outdated
+
+pulls:
+  daysUntilLock: 90
+  lockLabel: outdated

.github/stale.yml

@@ -0,0 +1,26 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 15
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 10
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - dev: high priority
+  - topic: feature request
+  - issue: need verification
+  - issue: bug
+  - dev: discuss
+# Label to use when marking an issue as stale
+staleLabel: 'issue: wontfix'
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  Hi pal 👋🏼!
+
+  This issue has gone quiet 😶.
+
+   We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
+   If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
+   As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
+
+   Thanks for being a part of the Verdaccio community! 💘
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false

.github/workflows/changesets.yml

@@ -0,0 +1,63 @@
+name: Changesets
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+
+  push:
+    branches:
+      - master
+
+env:
+  CI: true
+  PNPM_CACHE_FOLDER: .pnpm-store
+
+jobs:
+  # Update package versions from changesets.
+  version:
+    timeout-minutes: 14
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
+    steps:
+      - name: checkout code repository
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: setup node.js
+        uses: actions/setup-node@v2
+        with:
+          node-version: 14
+          registry-url: 'https://registry.verdaccio.org'
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+
+      - name: install pnpm
+        run: npm i pnpm@latest -g
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+
+      - name: setup pnpm config
+        run: pnpm config set store-dir $PNPM_CACHE_FOLDER
+      - name: setup pnpm config registry
+        run: pnpm config set registry https://registry.verdaccio.org
+
+      - name: install dependencies
+        run: pnpm install
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+
+      - name: build
+        run: pnpm build
+
+      - name: create versions
+        uses: verdaccio/changeset-action@master
+        with:
+          version: pnpm ci:version
+          commit: 'chore: update versions'
+          title: 'chore: update versions'
+          publish: pnpm ci:publish
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}

.github/workflows/ci-lint.yml

@@ -1,10 +0,0 @@
-name: CI Lint
-
-on: [push, pull_request]
-
-permissions:
-  contents: read
-
-jobs:
-  lint:  
-    uses: verdaccio/verdaccio/.github/workflows/yarn-ci-lint.yml@master

.github/workflows/ci.yml

@@ -1,19 +1,217 @@
 name: CI
 
-on: [push, pull_request]
-
-permissions:
-  contents: read
-concurrency:
-  group: ci-${{ github.ref }}-6.x
-  cancel-in-progress: true  
-
+on:
+  push:
+    branches:
+      - master
+      - 'changeset-release/master'
+  pull_request:
+    paths:
+      - .changeset/**
+      - .github/workflows/ci.yml
+      - 'packages/**'
+      - 'jest/**'
+      - 'package.json'
+      - 'pnpm-workspace.yaml'
 jobs:
-  build: 
+  prepare:
+    runs-on: ubuntu-latest
+    name: setup verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:5
+        ports:
+          - 4873:4873
+    steps:
+    - uses: actions/checkout@v2.3.1
+    - name: Use Node 14
+      uses: actions/setup-node@v1
+      with:
+        node-version: 14 
+    - name: Install pnpm
+      run: npm i pnpm@latest -g
+    - name: set store
+      run: | 
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+    - name: Install
+      run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
+    - name: Cache .pnpm-store
+      uses: actions/cache@v2
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+        restore-keys: |
+          pnpm-
+  lint:
+    runs-on: ubuntu-latest
+    name: Lint
+    needs: prepare
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node 16
+        uses: actions/setup-node@v1
+        with:
+          node-version: 16
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
+      - name: Install
+        run: pnpm recursive install --frozen-lockfile --ignore-scripts
+      - name: Lint
+        run: pnpm lint
+  format:
+    runs-on: ubuntu-latest
+    name: Format
+    needs: prepare
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node 16
+        uses: actions/setup-node@v1
+        with:
+          node-version: 16
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
+      - name: Install
+        run: pnpm recursive install --frozen-lockfile --ignore-scripts
+      - name: Lint
+        run: pnpm format:check
+  build:
+    runs-on: ubuntu-latest
+    name: build
+    needs: [format, lint]
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node 16
+        uses: actions/setup-node@v1
+        with:
+          node-version: 16
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
+      - name: Install
+        run: pnpm recursive install --frozen-lockfile --ignore-scripts
+      - name: build
+        run: pnpm build
+      - name: tar packages
+        run: |      
+          tar -czvf ${{ github.workspace }}/pkg.tar.gz -C ${{ github.workspace }}/packages .
+      - uses: actions/upload-artifact@v2
+        with:
+          name: verdaccio-artifact
+          path: pkg.tar.gz            
+  test:
+    needs: build
     strategy:
-      fail-fast: false
+      fail-fast: true
       matrix:
-        node_version: [18, 20, 22, 24]    
-    uses: verdaccio/verdaccio/.github/workflows/yarn-ci.yml@master
-    with:
-      node_version: ${{ matrix.node_version }}
+        os: [ubuntu-latest]
+        node_version: [12, 14]
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@v1
+        with:
+          node-version: ${{ matrix.node_version }}
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
+      - name: Install
+        run: pnpm recursive install --frozen-lockfile --ignore-scripts 
+      - name: Test
+        run: pnpm test
+  ci-e2e-ui:
+    needs: build
+    runs-on: ubuntu-latest
+    name: UI Test E2E Node 14
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - uses: actions/setup-node@v1
+        with:
+          node-version: 14
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
+      - name: Install
+        ## we need scripts, pupetter downloads aditional content
+        run: pnpm recursive install --frozen-lockfile 
+      - name: Test UI
+        run: pnpm test:e2e:ui
+        env:
+          DEBUG: verdaccio:e2e*       
+  ci-e2e-cli:
+    needs: build
+    runs-on: ubuntu-latest
+    name: CLI Test E2E Node 14
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - uses: actions/setup-node@v1
+        with:
+          node-version: 14
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
+      - name: Install
+        ## we need scripts, pupetter downloads aditional content
+        run: pnpm recursive install --frozen-lockfile
+      - name: Test CLI
+        run: pnpm test:e2e:cli
+  test-windows:
+    needs: [format, lint]
+    runs-on: windows-latest
+    name: windows test node 14
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node 14
+        uses: actions/setup-node@v1
+        with:
+          node-version: 14
+      - name: Install pnpm
+        run: npm i pnpm@latest -g
+       # pnpm cache is not working for windows (we need a solution)
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                            
+      - name: Install
+        run: pnpm recursive install --frozen-lockfile --ignore-scripts 
+      - name: build
+        run: pnpm build
+      - name: Test
+        run: pnpm test

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,52 @@
+name: 'Code scanning - action'
+
+on:
+  pull_request:
+    paths:
+      - .github/workflows/codeql-analysis.yml
+      - 'packages/**'
+  schedule:
+    - cron: '0 2 * * 4'
+
+jobs:
+  CodeQL-Build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2.3.1
+        with:
+          # We must fetch at least the immediate parents so that if this is
+          # a pull request then we can checkout the head.
+          fetch-depth: 2
+
+      # If this run was triggered by a pull request event, then checkout
+      # the head of the pull request instead of the merge commit.
+      - run: git checkout HEAD^2
+        if: ${{ github.event_name == 'pull_request' }}
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v1
+
+      # Override language selection by uncommenting this and choosing your languages
+      # with:
+      #   languages: go, javascript, csharp, python, cpp, java
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v1
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
+
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+      #    and modify them (or add more) to build your code if your project
+      #    uses a compiled language
+
+      #- run: |
+      #   make bootstrap
+      #   make release
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v1

.github/workflows/docker-publish.yml

@@ -4,25 +4,48 @@ on:
   push:
     paths:
       - .github/workflows/docker-publish.yml
-      - 'src/**'
-      - 'conf/**'
-      - 'types/**'
+      - .github/workflows/docker-publish.yml
+      - 'packages/**'
       - 'docker-bin/**'
-      - 'bin/**'
       - 'package.json'
-      - 'yarn.lock'
-      - '.yarn/**'
-      - '.yarnrc.yaml'
+      - 'pnpm-*.yaml'
+      - 'Dockerfile'
+      - '.dockerignore'
     branches:
-      - '**'
+      - 'master'
     tags:
-     - 'v*'
-
+      - 'v*'
 jobs:
-  docker-publish:
-      secrets: inherit
-      uses: verdaccio/verdaccio/.github/workflows/shared-docker-publish.yml@master    
-      with:
-        tag-latest: true
-        tag-custom: 6.x-next
-        tag-custom-only: ${{ github.ref == 'refs/heads/6.x' }}
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: docker/setup-qemu-action@v1
+      - uses: docker/setup-buildx-action@v1
+        with:
+          driver-opts: network=host
+      - uses: docker/login-action@v1
+        name: Login Docker Hub
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Prepare docker image tags
+        id: docker_meta
+        uses: crazy-max/ghaction-docker-meta@v1
+        with:
+          images: ${{ github.repository }}
+          tag-custom: nightly-master
+          tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
+          tag-semver: |
+            {{version}}
+            {{major}}
+            {{major}}.{{minor}}
+      - name: Build & Push
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/e2e-audit-workflow.yml

@@ -1,12 +0,0 @@
-on:
-  pull_request:
-  push:
-
-concurrency:
-  group: e2e-audit-${{ github.ref }}-6.x
-  cancel-in-progress: true  
-
-name: 'Plugin Audit E2E'
-jobs:
-  e2e:  
-    uses: verdaccio/verdaccio/.github/workflows/x-e2e-audit-workflow.yml@master

.github/workflows/e2e-libraries-install-cli-workflow.yml

@@ -1,17 +0,0 @@
-on:
-  pull_request:
-        
-concurrency:
-  group: e2e-cli-${{ github.ref }}-6.x
-  cancel-in-progress: true  
-
-name: 'E2E install CLI libraries through verdaccio' 
-jobs:
-  e2e-gatsbyjs:  
-    uses: verdaccio/verdaccio/.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml@master
-  e2e-jest:  
-    uses: verdaccio/verdaccio/.github/workflows/x-e2e-jest-workflow.yml@master
-  e2e-angular-cli:  
-    uses: verdaccio/verdaccio/.github/workflows/x-e2e-angular-cli-workflow.yml@master
-
-

.github/workflows/release-snapshot.yml

@@ -1,11 +0,0 @@
-name: Release Canary
-
-on:
-  workflow_dispatch:
-  push:
-    branches:
-      - 6.x
-jobs:
-  snapshot:
-    secrets: inherit
-    uses: verdaccio/verdaccio/.github/workflows/x-release-snapshot.yml@master

.github/workflows/release.yml

@@ -1,11 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - '*'
-jobs:
-  snapshot:
-    secrets: inherit
-    uses: verdaccio/verdaccio/.github/workflows/x-release.yml@master
-

.github/workflows/smoke-test-docker.yml

@@ -1,17 +0,0 @@
-name: Docker Smoke Test
-on:
-  workflow_dispatch:
-  push:
-permissions:
-  contents: read
-
-concurrency:
-  group: e2e-docker-pkgs-${{ github.ref }}-6.x
-  cancel-in-progress: true  
-
-jobs:
-  smoke:  
-    uses: verdaccio/verdaccio/.github/workflows/x-smok-test-docker.yml@master
-    with:
-      docker_tag: '6.x-next'
-      module_tag: '@latest'

.github/workflows/smoke-test-import-module.yml

@@ -1,90 +0,0 @@
-name: Import Module Smoke Test
-
-on: [pull_request]  
-
-permissions:
-  contents: read
-concurrency:
-  group: smoke-test-import-module-${{ github.ref }}-6x
-  cancel-in-progress: true    
-jobs:
-  test:    
-    strategy:
-      fail-fast: false
-      matrix:
-        node_version: [18, 20, 22, 24]    
-    
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0    
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Docker test
-        run: |
-            docker run -d -it --rm --name verdaccio -p 4873:4873 -e "DEBUG=verdaccio*" verdaccio/verdaccio:6
-      - name: login    
-        run: npx npm-cli-login -u test -p 1234 -e test@domain.test -r http://localhost:4873                 
-      - name: Install dependencies
-        run: yarn
-      - name: Bump up package and save version
-        run: |
-          npm version prerelease --no-git-tag-version --preid $(date +%s%N)
-          echo "VERDACCIO_VERSION=$(node -p "require('./package.json').version")" >> $GITHUB_ENV
-      - name: Build
-        run: yarn build
-      - name: publish verdaccio 
-        run: npm publish --tag next --registry http://localhost:4873
-      - name: 'Running runServer / export the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          npm init --force
-          npm install vitest --registry http://localhost:4873
-          npm install verdaccio@${{ env.VERDACCIO_VERSION }} --loglevel info --registry http://localhost:4873
-          echo "import { describe, expect, test } from 'vitest';
-                import { runServer, getDefaultConfig, fileUtils } from 'verdaccio';    
-
-          test('runServer should start correctly with default config', async () => {          
-            const storage = await fileUtils.createTempStorageFolder('basic-test');
-            expect(typeof runServer).toBe('function');            
-            
-            const defaultConfig = {...getDefaultConfig(), storage}
-            console.log('Default Config:', defaultConfig);
-            const server = await runServer(defaultConfig);
-            
-            expect(server).toBeDefined();
-            expect(server).toHaveProperty('listen');
-            
-            if (server && typeof server.close === 'function') {
-              await server.close();
-            }
-          });" | tee module.spec.js
-          cat module.spec.js
-          DEBUG=verdaccio* yarn vitest run module.spec --reporter verbose 
-      - name: 'Running startVerdaccio / export integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          npm init --force
-          npm install vitest --registry http://localhost:4873
-          npm install verdaccio@${{ env.VERDACCIO_VERSION }} --loglevel info --registry http://localhost:4873         
-          echo "import { describe, expect, test } from 'vitest';
-                import { startVerdaccio, getDefaultConfig, fileUtils } from 'verdaccio';    
-          test('run server should be able to listen', async () => {
-            const storage = await fileUtils.createTempStorageFolder('basic-test');
-            expect(typeof startVerdaccio).toBe('function');                        
-            const defaultConfig = {...getDefaultConfig(), storage}
-            console.log('Default Config:', defaultConfig);
-            return new Promise((done) => {
-              startVerdaccio(defaultConfig, '5000', storage, '1.0.0', 'verdaccio', (server, addr) => {
-                expect(server).toBeDefined();
-                expect(addr).toBeDefined();
-                expect(addr.port).toBe('5000');
-                server.close();
-                done(true);
-              });
-            });
-          });" | tee legacy.module.spec.js
-          cat legacy.module.spec.js
-          DEBUG=verdaccio* yarn vitest run legacy.module.spec.js --reporter verbose           
-

.github/workflows/test-docker-build.yml

@@ -1,148 +0,0 @@
-name: Test Docker Build
-
-on: [push, pull_request]
-
-concurrency:
-  group: ci-${{ github.ref }}-docker-build-test
-  cancel-in-progress: true    
-
-jobs:
-  testDocker:
-    name: Test Docker Build
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-
-      - name: Build Docker image
-        run: docker build -t verdaccio-test .
-        env:
-          VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
-
-      - name: Run Verdaccio in background
-        run: |
-          docker run -d --name verdaccio-test -e "DEBUG=verdaccio*" -p 4873:4873 verdaccio-test
-          sleep 10  # Give Verdaccio some time to start
-
-      - name: Test npm install from local Verdaccio
-        run: |
-          npm set registry http://localhost:4873
-          npm install -g verdaccio
-
-      - name: Show Verdaccio logs (for debugging)
-        if: always()
-        run: docker logs verdaccio-test
-
-      - name: Stop Verdaccio
-        if: always()
-        run: docker stop verdaccio-test
-
-  testStorageVolume:
-    name: Test Storage Volume
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-
-      - name: Build Docker image
-        run: docker build -t verdaccio-test .
-        env:
-          VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
-
-      - name: Prepare storage directory
-        run: |
-          mkdir -p storage          
-          sudo chown -R 10001:root storage
-
-      - name: Run Verdaccio with storage volume
-        run: |
-          docker run -d --name verdaccio-test -e "DEBUG=verdaccio*" -p 4873:4873 \
-            -v $PWD/storage:/verdaccio/storage \
-            verdaccio-test
-          sleep 10
-
-      - name: Test npm install from local Verdaccio
-        run: |
-          npm set registry http://localhost:4873
-          npm install -g verdaccio
-
-      - name: Show Verdaccio logs (for debugging)
-        if: always()
-        run: docker logs verdaccio-test
-
-      - name: Stop Verdaccio
-        if: always()
-        run: docker stop verdaccio-test
-
-  testConfigVolume:
-    name: Test Config Volume
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-
-      - name: Build Docker image
-        run: docker build -t verdaccio-test .
-        env:
-          VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
-
-      - name: Create config.yaml without comments
-        run: |
-          cat > config.yaml <<'EOF'
-          storage: /verdaccio/storage/data
-          plugins: /verdaccio/plugins
-          web:
-            title: Verdaccio
-          auth:
-            htpasswd:
-              file: /verdaccio/storage/htpasswd
-          uplinks:
-            npmjs:
-              url: https://registry.npmjs.org/
-            yarn:
-              url: https://registry.yarnpkg.com/              
-          packages:
-            '@*/*':
-              access: $all
-              publish: $authenticated
-              unpublish: $authenticated
-              proxy: npmjs
-            '**':
-              access: $all
-              publish: $authenticated
-              unpublish: $authenticated
-              proxy: yarn
-          server:
-            keepAliveTimeout: 60
-          middlewares:
-            audit:
-              enabled: true
-          log:
-            type: stdout
-            format: pretty
-            level: http
-          i18n:
-            web: en-US
-          EOF
-      - name: Set permissions for config.yaml
-        run: |
-          sudo chown 10001:root config.yaml
-          sudo chmod 644 config.yaml
-          
-      - name: Run Verdaccio with config volume
-        run: |
-          docker run -d --name verdaccio-test -e "DEBUG=verdaccio*" -p 4873:4873 \
-            -v $PWD/config.yaml:/verdaccio/conf/config.yaml \
-            verdaccio-test
-          sleep 10
-
-      - name: Test npm install from local Verdaccio
-        run: |
-          npm set registry http://localhost:4873
-          npm install -g verdaccio
-
-      - name: Show Verdaccio logs (for debugging)
-        if: always()
-        run: docker logs verdaccio-test
-
-      - name: Stop Verdaccio
-        if: always()
-        run: docker stop verdaccio-test
-

.github/workflows/test-publish-package.yml

@@ -1,9 +0,0 @@
-name: Test Publish Package
-
-on: [push, pull_request]
-
-jobs:
-  testVerdaccio:
-    uses: verdaccio/verdaccio/.github/workflows/test-publish-package.yml@master    
-    with:
-     verdaccio-version: "6"

.gitignore

@@ -1,41 +1,47 @@
-
+*.log*
 verdaccio-*.tgz
 .DS_Store
 build/
+.eslintcache
+./dist
 
 ### Test
 
-test/unit/partials/store/test-*-storage/*
-test/unit/partials/store/*-storage/*
-test/unit/partials/store/storage_default_storage/*
 .verdaccio-db.json
 .sinopia-db.json
 
 ###
-!bin/verdaccio
 test-storage*
-access-storage*
 .verdaccio_test_env
 node_modules
 package-lock.json
-npm_test-fails-add-tarball*
 yarn-error.log
-.yarn/cache
-./conf/*.yaml
+yarn.lock
 
-# coverage
+
+# docker examples
+docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
+docker-examples/v5/**/storage/*
+
+# jest
 reports/
 coverage/
 
-# IDE
+## IDE
 .idea/
 
 # Compiled script
-static/*
+packages/partials
+tsconfig.tsbuildinfo
 
-# This is the Yarn build state; it's local to each clone
-/.yarn/build-state.yml
+## bundle files
+packages/standalone/dist/
+## ui
+packages/plugins/ui-theme/static
 
-# This is the Yarn install state cache, it can be rebuilt anytime
-/.yarn/install-state.gz
-.history
+# website
+website/public
+website/.cache
+
+# CI Pnpm cache
+.pnpm-store/

.npmignore

@@ -1,15 +1,18 @@
 
 ## npm
+npm-debug.log
 yarn-error.log
 node_modules
 verdaccio-*.tgz
 docker-compose.yaml
 Dockerfile
+crowdin.yaml
 scripts/
 src/
 /.*
 .vscode/
 .circleci/
+debug/
 docker-examples/
 reports/
 ## assets and website
@@ -37,12 +40,3 @@ jest.config.js
 contrib/
 storage_default_storage/
 docker-bin/
-tsconfig.json
-*.md
-prettier.config.js
-eslintrc.cjs
-babel.config.js
-debug/*
-tsconfig*
-vitest.config.mjs
-

.npmrc

@@ -1,2 +1,5 @@
 always-auth = true
+recursive-install = true
+registry = https://registry.verdaccio.org
+loglevel=warn
 fetch-retries="10"

.nvmrc

@@ -1 +1 @@
-22
+14

.prettierignore

@@ -3,23 +3,23 @@
 **/corrupted.json
 **/invalid.js
 **/invalid.json
+**/pnpm-lock.yaml
 **/verdaccio-corrupted.db.json
 **/wrong.package.json
+/website/.cache/
+/website/crowdin/
+/website/public/
+/website/src/dictionaries/
 CHANGELOG.md
-README.md
 CONTRIBUTORS.md
-test/unit/partials/config/js/*
 node_modules/
 **/coverage/**
+**/static/*.js
 **/build/*.js
-build/*
-.github/
+packages/core/local-storage/_storage/**
+packages/standalone/dist/bundle.js
+docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
+docker-examples/
+build/
 .vscode/
-.yarnrc.yml
-.yarn/
-test/functional/store/*
-storage_default_storage/*
-.prettierignore
-.npmignore
-.gitignore
-*.ico
+.github/

.prettierrc

@@ -1,15 +0,0 @@
-{
-  "endOfLine": "lf",
-  "useTabs": false,
-  "printWidth": 100,
-  "tabWidth": 2,
-  "singleQuote": true,
-  "bracketSpacing": true,
-  "trailingComma": "es5",
-  "semi": true,
-  "plugins": ["@trivago/prettier-plugin-sort-imports"],
-  "importOrder": ["^@verdaccio/(.*)$", "^[./]"],
-  "importOrderSeparation": true,
-  "importOrderParserPlugins": ["typescript", "classProperties", "jsx"],
-  "importOrderSortSpecifiers": true
-}

.prettierrc.json

@@ -0,0 +1,11 @@
+{
+  "endOfLine": "lf",
+  "useTabs": false,
+  "printWidth": 100,
+  "tabWidth": 2,
+  "singleQuote": true,
+  "bracketSpacing": true,
+  "jsxBracketSameLine": true,
+  "trailingComma": "es5",
+  "semi": true
+}

.sonarcloud.properties

@@ -1 +0,0 @@
-

.vscode/extensions.json

@@ -1,10 +0,0 @@
-{
-  // See http://go.microsoft.com/fwlink/?LinkId=827846 to learn about workspace recommendations.
-  // Extension identifier format: ${publisher}.${name}. Example: vscode.csharp
-  // List of extensions which should be recommended for users of this workspace.
-  "recommendations": [
-    "EditorConfig.EditorConfig"
-  ],
-  // List of extensions recommended by VS Code that should not be recommended for users of this workspace.
-  "unwantedRecommendations": []
-}

.vscode/launch.json

@@ -1,14 +1,81 @@
 {
-	"version": "0.2.0",
-	"configurations": [
-	{
-		"name": "Attach by Process ID",
-		"processId": "${command:PickProcess}",
-		"request": "attach",
-		"skipFiles": [
-			"<node_internals>/**"
-		],
-		"type": "node"
-	}
-	]
+  // Use IntelliSense to learn about possible Node.js debug attributes.
+  // Hover to view descriptions of existing attributes.
+  // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Verdaccio Debug",
+      "port": 9229,
+      "request": "attach",
+      "skipFiles": ["<node_internals>/**"],
+      "type": "pwa-node"
+    },
+    {
+      "type": "node",
+      "request": "launch",
+      "name": "CLI Babel Registry",
+      "stopOnEntry": false,
+      "program": "${workspaceFolder}/debug/bootstrap.js",
+      "args": ["-l", "0.0.0.0:4873"],
+      "env": {
+        "BABEL_ENV": "registry"
+      },
+      "preLaunchTask": "npm: build:webui",
+      "console": "integratedTerminal"
+    },
+    {
+      "name": "Unit Tests",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceRoot}/node_modules/bin/jest",
+      "stopOnEntry": false,
+      "args": ["--debug=true"],
+      "cwd": "${workspaceRoot}",
+      "runtimeExecutable": null,
+      "runtimeArgs": ["--nolazy"],
+      "env": {
+        "NODE_ENV": "test",
+        "TZ": "UTC"
+      },
+      "console": "integratedTerminal"
+    },
+    {
+      "name": "Functional Tests",
+      "type": "node",
+      "request": "launch",
+      "program": "${workspaceRoot}/node_modules/.bin/jest",
+      "stopOnEntry": false,
+      "args": [
+        "--config",
+        "./test/jest.config.functional.js",
+        "--testPathPattern",
+        "./test/functional/index*",
+        "--debug=false",
+        "--verbose",
+        "--useStderr",
+        "--detectOpenHandles"
+      ],
+      "cwd": "${workspaceRoot}",
+      "env": {
+        "BABEL_ENV": "testOldEnv",
+        "VERDACCIO_DEBUG": "true",
+        "VERDACCIO_DEBUG_INJECT": "true",
+        "NODE_DEBUG": "TO_DEBUG_REQUEST_REMOVE_THIS_request"
+      },
+      "preLaunchTask": "pre-test",
+      "console": "integratedTerminal",
+      "runtimeExecutable": null,
+      "runtimeArgs": ["--nolazy"]
+    },
+    {
+      "type": "node",
+      "request": "launch",
+      "name": "Verdaccio Compiled",
+      "preLaunchTask": "npm: code:build",
+      "program": "${workspaceRoot}/bin/verdaccio",
+      "args": ["-l", "0.0.0.0:4873"],
+      "console": "integratedTerminal"
+    }
+  ]
 }

.vscode/settings.json

@@ -1,15 +1,12 @@
 // Place your settings in this file to overwrite default and user settings.
 {
-  
   "files.exclude": {
-    "**/.idea": true,
-    "**/coverage": true
-  },
-  "editor.formatOnSave": true,
-  "search.exclude": {
-    "**/.yarn": true ,
-    "**/node_modules": true,
+    "**/.nyc_output": true,
     "**/build": true,
+    "**/coverage": true,
+    ".idea": true,
+    "storage_default_storage": true,
+    ".yarn": true
   },
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "typescript.tsdk": "node_modules/typescript/lib"
 }

.vscode/tasks.json

@@ -0,0 +1,21 @@
+{
+  // See https://go.microsoft.com/fwlink/?LinkId=733558
+  // for the documentation about the tasks.json format
+  "version": "2.0.0",
+  "tasks": [
+    {
+      "type": "npm",
+      "script": "build:webui",
+      "problemMatcher": []
+    },
+    {
+      "type": "npm",
+      "script": "code:build",
+      "problemMatcher": []
+    },
+    {
+      "label": "pre-test",
+      "dependsOn": ["npm: code:build", "npm: test:clean"]
+    }
+  ]
+}

.yarnrc.yml

@@ -1,7 +0,0 @@
-defaultSemverRangePrefix: ""
-
-nodeLinker: node-modules
-
-npmRegistryServer: "https://registry.npmjs.org"
-
-yarnPath: .yarn/releases/yarn-4.9.2.cjs

CHANGELOG.md

@@ -2,998 +2,6 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-### [6.2.1](https://github.com/verdaccio/verdaccio/compare/v6.2.0...v6.2.1) (2025-10-24)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#5440](https://github.com/verdaccio/verdaccio/issues/5440)) ([78494d8](https://github.com/verdaccio/verdaccio/commit/78494d88f7ead3b0bc4d843e76b8875a343101db))
-
-## [6.2.0](https://github.com/verdaccio/verdaccio/compare/v6.1.6...v6.2.0) (2025-09-29)
-
-
-### Features
-
-* 6.x refactor test and deps ([#5315](https://github.com/verdaccio/verdaccio/issues/5315)) ([af55fbb](https://github.com/verdaccio/verdaccio/commit/af55fbb65f1d4258ad025b8c4d30e901e20d6d40))
-
-
-### Bug Fixes
-
-* [#5281](https://github.com/verdaccio/verdaccio/issues/5281) view packages logged in ([#5399](https://github.com/verdaccio/verdaccio/issues/5399)) ([9e404c1](https://github.com/verdaccio/verdaccio/commit/9e404c1dca3db6a79cedc41f0a2586e86f11a46a))
-* **deps:** update core verdaccio dependencies ([#5327](https://github.com/verdaccio/verdaccio/issues/5327)) ([f389431](https://github.com/verdaccio/verdaccio/commit/f38943144679083e641a32c983d865e902e1de74))
-* **deps:** update core verdaccio dependencies (6.x) ([#5388](https://github.com/verdaccio/verdaccio/issues/5388)) ([012c19f](https://github.com/verdaccio/verdaccio/commit/012c19f383be67a83c24536dd7378eaa4b299641))
-* **deps:** update dependency debug to v4.4.3 ([#5387](https://github.com/verdaccio/verdaccio/issues/5387)) ([24edd64](https://github.com/verdaccio/verdaccio/commit/24edd646c01ec9457b5c072dca75965768abac23))
-* filter plugins not loading ([#5382](https://github.com/verdaccio/verdaccio/issues/5382)) ([2cbd326](https://github.com/verdaccio/verdaccio/commit/2cbd3268d6ea8657da71c9224826ad2dd20ff8a0))
-* remove unused dependencies ([#5349](https://github.com/verdaccio/verdaccio/issues/5349)) ([87bb1b8](https://github.com/verdaccio/verdaccio/commit/87bb1b8c4d1645d6622e38191a0a34722a87784b))
-
-### [6.1.6](https://github.com/verdaccio/verdaccio/compare/v6.1.5...v6.1.6) (2025-07-25)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @cypress/request to v3.0.9 ([#5336](https://github.com/verdaccio/verdaccio/issues/5336)) ([ae6668c](https://github.com/verdaccio/verdaccio/commit/ae6668c8e4b091e0ea2dc30ccf46e644816fb335))
-* **deps:** update dependency compression to v1.8.1 ([#5337](https://github.com/verdaccio/verdaccio/issues/5337)) ([4421d86](https://github.com/verdaccio/verdaccio/commit/4421d86af83172ae52e89898d6508a5537bfe82c))
-
-### [6.1.5](https://github.com/verdaccio/verdaccio/compare/v6.1.4...v6.1.5) (2025-06-29)
-
-
-### Bug Fixes
-
-* allow config changes in docker image ([#5304](https://github.com/verdaccio/verdaccio/issues/5304)) ([1e4af4e](https://github.com/verdaccio/verdaccio/commit/1e4af4e8426c42bef2ad37e2febc8863a4c5536e))
-* **deps:** update core verdaccio dependencies ([#5308](https://github.com/verdaccio/verdaccio/issues/5308)) ([07d0535](https://github.com/verdaccio/verdaccio/commit/07d05354c6cdc71bdfecb5b664624d7497fc73ac))
-
-### [6.1.4](https://github.com/verdaccio/verdaccio/compare/v6.1.3...v6.1.4) (2025-06-17)
-
-
-### Bug Fixes
-
-* config web login default (6.x) ([#5279](https://github.com/verdaccio/verdaccio/issues/5279)) ([ba00fee](https://github.com/verdaccio/verdaccio/commit/ba00feeb97af0be8f1da2c8a96242e36fe709689))
-* **deps:** update core verdaccio dependencies ([#5283](https://github.com/verdaccio/verdaccio/issues/5283)) ([88c0766](https://github.com/verdaccio/verdaccio/commit/88c076698f4f287bf98b057cb0f01321c210ff48))
-* **deps:** update dependency semver to v7.7.2 ([#5284](https://github.com/verdaccio/verdaccio/issues/5284)) ([4c5c45d](https://github.com/verdaccio/verdaccio/commit/4c5c45d34595ddff9498a0377bd6e33db7b15678))
-
-### [6.1.3](https://github.com/verdaccio/verdaccio/compare/v6.1.2...v6.1.3) (2025-06-15)
-
-
-### Bug Fixes
-
-* anonymous access web ui (6.x) ([#5250](https://github.com/verdaccio/verdaccio/issues/5250)) ([31a8d76](https://github.com/verdaccio/verdaccio/commit/31a8d7636cfcff23509eaa503889d610f1a39717))
-* **deps:** update core verdaccio dependencies ([#5263](https://github.com/verdaccio/verdaccio/issues/5263)) ([213bade](https://github.com/verdaccio/verdaccio/commit/213bade6a5310e0a2881fcdc0dabf86c994c3569))
-* **deps:** update dependency debug to v4.4.1 ([#5264](https://github.com/verdaccio/verdaccio/issues/5264)) ([6c23c61](https://github.com/verdaccio/verdaccio/commit/6c23c61b32ff3782f7059cb29e8d58c89671c9cb))
-* docker smoke test (6.x) ([#5251](https://github.com/verdaccio/verdaccio/issues/5251)) ([f66bff5](https://github.com/verdaccio/verdaccio/commit/f66bff549fdc9a797fe93e652e3e882cba17b0f2))
-* unpublish broken [#5214](https://github.com/verdaccio/verdaccio/issues/5214) ([#5275](https://github.com/verdaccio/verdaccio/issues/5275)) ([16cbf18](https://github.com/verdaccio/verdaccio/commit/16cbf18812b923d1c3d9fc5b118fb134ca0aba09))
-* update yarn 4.9.2 and remove pnp ([#5266](https://github.com/verdaccio/verdaccio/issues/5266)) ([9eb6618](https://github.com/verdaccio/verdaccio/commit/9eb6618d8df34c527cd4dd3558a7ba0675420f50))
-
-### [6.1.2](https://github.com/verdaccio/verdaccio/compare/v6.1.1...v6.1.2) (2025-04-01)
-
-
-### Bug Fixes
-
-* add missing packages argument on getMatchedPackagesSpec ([#5185](https://github.com/verdaccio/verdaccio/issues/5185)) ([2e572ac](https://github.com/verdaccio/verdaccio/commit/2e572ac97b05bb4e87f7adea8c7c52908ada1de0)), closes [#5175](https://github.com/verdaccio/verdaccio/issues/5175) [#5160](https://github.com/verdaccio/verdaccio/issues/5160)
-* **deps:** update core verdaccio dependencies (6.x) ([#5179](https://github.com/verdaccio/verdaccio/issues/5179)) ([adb1373](https://github.com/verdaccio/verdaccio/commit/adb13735897e6996577544b95d8332a1a875d0ab))
-
-### [6.1.1](https://github.com/verdaccio/verdaccio/compare/v6.1.0...v6.1.1) (2025-03-30)
-
-
-### Bug Fixes
-
-* add legacy getMatchedPackagesSpec to config ([#5173](https://github.com/verdaccio/verdaccio/issues/5173)) ([abea8ce](https://github.com/verdaccio/verdaccio/commit/abea8ce09511462727e73a7665606c59375310b8))
-* **deps:** update core verdaccio dependencies (6.x) ([#5172](https://github.com/verdaccio/verdaccio/issues/5172)) ([cbd69af](https://github.com/verdaccio/verdaccio/commit/cbd69af5d0ec618bc254fb5cdcf25a0bc8276a1e))
-
-## [6.1.0](https://github.com/verdaccio/verdaccio/compare/v6.0.5...v6.1.0) (2025-03-24)
-
-
-### Features
-
-* refactor add api names and update core dependencies ([#5090](https://github.com/verdaccio/verdaccio/issues/5090)) ([f2cc71c](https://github.com/verdaccio/verdaccio/commit/f2cc71cd2cc09db81c0c3e3b730ea2098cee877c))
-* upgrade load plugin and auth ([#5130](https://github.com/verdaccio/verdaccio/issues/5130)) ([4c5c509](https://github.com/verdaccio/verdaccio/commit/4c5c509566b6cf29e9ce6301d94d033e0e74884c))
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#5154](https://github.com/verdaccio/verdaccio/issues/5154)) ([890f4fd](https://github.com/verdaccio/verdaccio/commit/890f4fddc9f360c0184b02e41c478bebcb7086b2))
-* **deps:** update dependency @cypress/request to v3.0.8 ([#5155](https://github.com/verdaccio/verdaccio/issues/5155)) ([c9ee50c](https://github.com/verdaccio/verdaccio/commit/c9ee50c2c0247bf340730a94fd0d050ffbc2f650))
-* **deps:** update dependency compression to v1.8.0 ([#5091](https://github.com/verdaccio/verdaccio/issues/5091)) ([5bacb93](https://github.com/verdaccio/verdaccio/commit/5bacb9375a22cf9649f6fba5e637ab6704f3149d))
-
-### [6.0.5](https://github.com/verdaccio/verdaccio/compare/v6.0.4...v6.0.5) (2024-12-21)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#5014](https://github.com/verdaccio/verdaccio/issues/5014)) ([f878a34](https://github.com/verdaccio/verdaccio/commit/f878a34548f2c49b6351b795becf84c679daf182))
-
-### [6.0.4](https://github.com/verdaccio/verdaccio/compare/v6.0.3...v6.0.4) (2024-12-17)
-
-
-### Bug Fixes
-
-* **api:** fix scope handling in package routes ([#5006](https://github.com/verdaccio/verdaccio/issues/5006)) ([cc63799](https://github.com/verdaccio/verdaccio/commit/cc63799d5aa4f53ebdb8d265d2ff351937e70c46)), closes [#5000](https://github.com/verdaccio/verdaccio/issues/5000)
-
-### [6.0.3](https://github.com/verdaccio/verdaccio/compare/v6.0.2...v6.0.3) (2024-12-15)
-
-
-### Bug Fixes
-
-* [#4984](https://github.com/verdaccio/verdaccio/issues/4984) improved paths for web endpoint ([#5000](https://github.com/verdaccio/verdaccio/issues/5000)) ([fb8b2c4](https://github.com/verdaccio/verdaccio/commit/fb8b2c40aa2dd72bdaeb078425fb1822b330c538))
-* **deps:** update core verdaccio dependencies ([#5001](https://github.com/verdaccio/verdaccio/issues/5001)) ([30a8b4d](https://github.com/verdaccio/verdaccio/commit/30a8b4d00ae8b25c85829d33d396e9d9486adda2))
-* **deps:** update dependency @cypress/request to v3.0.7 ([#4995](https://github.com/verdaccio/verdaccio/issues/4995)) ([df4e435](https://github.com/verdaccio/verdaccio/commit/df4e435e8c584276c99bc2ee0bdf36d827f33763))
-* **deps:** update dependency debug to v4.4.0 ([#4996](https://github.com/verdaccio/verdaccio/issues/4996)) ([7c935e9](https://github.com/verdaccio/verdaccio/commit/7c935e955da6a0b2d8b7c33717a9b77787ad6aa9))
-* **deps:** update dependency express to v4.21.2 (6.x) ([#4988](https://github.com/verdaccio/verdaccio/issues/4988)) ([153a33f](https://github.com/verdaccio/verdaccio/commit/153a33fd7ec76c9e4713351031b4469d0d6297cb))
-* **deps:** update node.js to v20.18.1 ([#4994](https://github.com/verdaccio/verdaccio/issues/4994)) ([e345b3b](https://github.com/verdaccio/verdaccio/commit/e345b3b537d5f0c8d0dae3aaaab7d35951744a0c))
-
-### [6.0.2](https://github.com/verdaccio/verdaccio/compare/v6.0.1...v6.0.2) (2024-11-17)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4952](https://github.com/verdaccio/verdaccio/issues/4952)) ([4416a52](https://github.com/verdaccio/verdaccio/commit/4416a524fc9250527a633279d8ad916d857621e6))
-* **deps:** update dependency compression to v1.7.5 ([#4934](https://github.com/verdaccio/verdaccio/issues/4934)) ([8da7a41](https://github.com/verdaccio/verdaccio/commit/8da7a413b8be362a6f07b1946ce2be131c9eae66))
-
-### [6.0.1](https://github.com/verdaccio/verdaccio/compare/v6.0.0...v6.0.1) (2024-10-16)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4862](https://github.com/verdaccio/verdaccio/issues/4862)) ([2781bf0](https://github.com/verdaccio/verdaccio/commit/2781bf021c92eb305c50440af5dbd684670fcd90))
-* **deps:** update core verdaccio dependencies ([#4907](https://github.com/verdaccio/verdaccio/issues/4907)) ([7ebc4ff](https://github.com/verdaccio/verdaccio/commit/7ebc4ff598ac3f7f9491bdc42868987d6380eb05))
-* **deps:** update dependency clipanion to v4.0.0-rc.4 ([#4863](https://github.com/verdaccio/verdaccio/issues/4863)) ([39538fb](https://github.com/verdaccio/verdaccio/commit/39538fb75971cb98fe2966d0bcf9298d472e2351))
-* **deps:** update dependency express to v4.21.1 ([#4899](https://github.com/verdaccio/verdaccio/issues/4899)) ([3172c30](https://github.com/verdaccio/verdaccio/commit/3172c302554738b28cb58de78c25febeff272f8e))
-
-## [6.0.0](https://github.com/verdaccio/verdaccio/compare/v6.0.0-rc.1...v6.0.0) (2024-09-20)
-
-
-### Bug Fixes
-
-* **deps:** update dependency debug to v4.3.7 ([#4838](https://github.com/verdaccio/verdaccio/issues/4838)) ([cdf7810](https://github.com/verdaccio/verdaccio/commit/cdf7810f1de21c48840f988fdd253cda26d86cd6))
-* **deps:** update dependency envinfo to v7.14.0 ([#4843](https://github.com/verdaccio/verdaccio/issues/4843)) ([c36d87f](https://github.com/verdaccio/verdaccio/commit/c36d87f3b6926943dfc194ad6560e8a3332e3fcd))
-
-## [6.0.0-rc.1](https://github.com/verdaccio/verdaccio/compare/v5.32.2...v6.0.0-rc.1) (2024-09-15)
-
-
-### ⚠ BREAKING CHANGES
-
-* drop Node.js 16 (#4835)
-
-### Features
-
-* drop Node.js 16 ([#4835](https://github.com/verdaccio/verdaccio/issues/4835)) ([78b759c](https://github.com/verdaccio/verdaccio/commit/78b759ccfb6ed0d80b49b6b3ff845f9da67d88b2))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @cypress/request to v3.0.5 ([#4828](https://github.com/verdaccio/verdaccio/issues/4828)) ([d68f1db](https://github.com/verdaccio/verdaccio/commit/d68f1db408835741595418a42f07bab8b2d621df))
-* **deps:** update dependency async to v3.2.6 ([#4829](https://github.com/verdaccio/verdaccio/issues/4829)) ([2bdca6a](https://github.com/verdaccio/verdaccio/commit/2bdca6ac98ca00fa3addbddff7f96a538f613453))
-
-### [5.32.2](https://github.com/verdaccio/verdaccio/compare/v5.32.1...v5.32.2) (2024-09-12)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies (5.x) ([#4825](https://github.com/verdaccio/verdaccio/issues/4825)) ([f17b5a9](https://github.com/verdaccio/verdaccio/commit/f17b5a9c9fb82e152a9c137efae3801e1a274f47))
-* **deps:** update dependency express to v4.21.0 ([#4815](https://github.com/verdaccio/verdaccio/issues/4815)) ([f8e5395](https://github.com/verdaccio/verdaccio/commit/f8e53957f7aad605a36a8c3889f7fe356a02f0b3))
-
-### [5.32.1](https://github.com/verdaccio/verdaccio/compare/v5.32.0...v5.32.1) (2024-08-02)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4752](https://github.com/verdaccio/verdaccio/issues/4752)) ([960924b](https://github.com/verdaccio/verdaccio/commit/960924b3c280808fff21e24d583d8b22c25fb8a3))
-
-## [5.32.0](https://github.com/verdaccio/verdaccio/compare/v5.31.1...v5.32.0) (2024-07-28)
-
-
-### Features
-
-* update core deps ([#4726](https://github.com/verdaccio/verdaccio/issues/4726)) ([6dc8e91](https://github.com/verdaccio/verdaccio/commit/6dc8e91bf4bf0dec43f20d7ab2bc291eb3b201df))
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4737](https://github.com/verdaccio/verdaccio/issues/4737)) ([e062a02](https://github.com/verdaccio/verdaccio/commit/e062a02c0393f43c553e527a821848bafa1011ec))
-* **deps:** update core verdaccio dependencies (5.x) ([#4708](https://github.com/verdaccio/verdaccio/issues/4708)) ([301deca](https://github.com/verdaccio/verdaccio/commit/301deca8e38105726fbbafefe5782ef3425d09a2))
-
-### [5.31.1](https://github.com/verdaccio/verdaccio/compare/v5.31.0...v5.31.1) (2024-06-06)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4668](https://github.com/verdaccio/verdaccio/issues/4668)) ([9e3a79d](https://github.com/verdaccio/verdaccio/commit/9e3a79d50345602bf8584b08005518f27f7e2afb))
-* **deps:** update node.js to v20.14.0 ([#4663](https://github.com/verdaccio/verdaccio/issues/4663)) ([6591927](https://github.com/verdaccio/verdaccio/commit/65919277274c9d5360ad39177f88ceb653164653))
-* set engine to 14.21.3 ([6cf6064](https://github.com/verdaccio/verdaccio/commit/6cf6064d06a9375016294bd017834d19c474e738))
-* set engine to Node.js 14 ([9a6d5b3](https://github.com/verdaccio/verdaccio/commit/9a6d5b3d442fd8819baf2f31487d0999c4289a0a))
-
-## [5.31.0](https://github.com/verdaccio/verdaccio/compare/v5.30.3...v5.31.0) (2024-05-11)
-
-
-### Features
-
-* add property forceMigrateToSecureLegacySignature ([#4625](https://github.com/verdaccio/verdaccio/issues/4625)) ([2941522](https://github.com/verdaccio/verdaccio/commit/2941522099fabb4d58280672191a2d95193f825c))
-
-
-### Bug Fixes
-
-* **deps:** update dependency express to v4.19.2 ([#4596](https://github.com/verdaccio/verdaccio/issues/4596)) ([4123dbc](https://github.com/verdaccio/verdaccio/commit/4123dbc8bd9a77bccc81d1947042e141793c79d1))
-
-### [5.30.3](https://github.com/verdaccio/verdaccio/compare/v5.30.2...v5.30.3) (2024-04-06)
-
-
-### Bug Fixes
-
-* upgrade docker file base image to v20.12.1 ([#4576](https://github.com/verdaccio/verdaccio/issues/4576)) ([513b10d](https://github.com/verdaccio/verdaccio/commit/513b10d8b023c52755f9320b9c31f3bf2f68574d))
-
-### [5.30.2](https://github.com/verdaccio/verdaccio/compare/v5.30.1...v5.30.2) (2024-03-24)
-
-
-### Bug Fixes
-
-* update @verdaccio/search-indexer engine restrictions ([1ceb9f9](https://github.com/verdaccio/verdaccio/commit/1ceb9f98dbe55512337c2da39908e363396d1239))
-
-### [5.30.1](https://github.com/verdaccio/verdaccio/compare/v5.30.0...v5.30.1) (2024-03-24)
-
-
-### Bug Fixes
-
-* remove search dependency ([#4560](https://github.com/verdaccio/verdaccio/issues/4560)) ([a9cfae5](https://github.com/verdaccio/verdaccio/commit/a9cfae580035796a74afe6d446dbf8a83e55c994))
-
-## [5.30.0](https://github.com/verdaccio/verdaccio/compare/v5.29.2...v5.30.0) (2024-03-24)
-
-
-### Features
-
-* **deps:** update core verdaccio dependencies (5.x) ([#4558](https://github.com/verdaccio/verdaccio/issues/4558)) ([72c3ab7](https://github.com/verdaccio/verdaccio/commit/72c3ab72a0391451c4cf39223f470ba9a6e78f49))
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4530](https://github.com/verdaccio/verdaccio/issues/4530)) ([7206f84](https://github.com/verdaccio/verdaccio/commit/7206f84df6895534ea564349ceb0d6026ca9001b))
-* **deps:** update core verdaccio dependencies (5.x) ([#4539](https://github.com/verdaccio/verdaccio/issues/4539)) ([da50302](https://github.com/verdaccio/verdaccio/commit/da5030221e63e45b9732adf54ceaaafcb149465c))
-* **deps:** update dependency envinfo to v7.11.1 ([#4527](https://github.com/verdaccio/verdaccio/issues/4527)) ([c2604e7](https://github.com/verdaccio/verdaccio/commit/c2604e788e00adcee5dd1ddb1b39b7e6f3838b90))
-* **deps:** update dependency express to v4.18.3 ([#4528](https://github.com/verdaccio/verdaccio/issues/4528)) ([e07c352](https://github.com/verdaccio/verdaccio/commit/e07c35201acb753eccfdc36b3fd8ed5e2a61165e))
-* **deps:** update dependency semver to v7.6.0 ([#4529](https://github.com/verdaccio/verdaccio/issues/4529)) ([43d3c5e](https://github.com/verdaccio/verdaccio/commit/43d3c5e3e15909dd3a7154d0ecf2f517ac4ebd7a))
-* newline after version command ([#4543](https://github.com/verdaccio/verdaccio/issues/4543)) ([c478324](https://github.com/verdaccio/verdaccio/commit/c4783246433ee570c42d49248dec94ad20517bba))
-
-### [5.29.2](https://github.com/verdaccio/verdaccio/compare/v5.29.1...v5.29.2) (2024-02-21)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies (5.x) ([#4516](https://github.com/verdaccio/verdaccio/issues/4516)) ([11f3309](https://github.com/verdaccio/verdaccio/commit/11f3309fd92f75e06296a618bbc3ed54ed988353))
-
-### [5.29.1](https://github.com/verdaccio/verdaccio/compare/v5.29.0...v5.29.1) (2024-02-17)
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#4389](https://github.com/verdaccio/verdaccio/issues/4389)) ([f64b395](https://github.com/verdaccio/verdaccio/commit/f64b3958e04bfa74a6013f8a4373608cfc56df4f))
-* **deps:** update core verdaccio dependencies ([#4428](https://github.com/verdaccio/verdaccio/issues/4428)) ([30af49f](https://github.com/verdaccio/verdaccio/commit/30af49f0a1202d145439cc8f26c73296fb7ba7ae))
-* **deps:** update core verdaccio dependencies ([#4499](https://github.com/verdaccio/verdaccio/issues/4499)) ([e10b381](https://github.com/verdaccio/verdaccio/commit/e10b381a2810009309c2ddef324826f78e007589))
-* **deps:** update core verdaccio dependencies ([#4508](https://github.com/verdaccio/verdaccio/issues/4508)) ([23afe22](https://github.com/verdaccio/verdaccio/commit/23afe222d8d01fc148e31503695754880bfb6b05))
-* **deps:** update core verdaccio dependencies (5.x) ([#4352](https://github.com/verdaccio/verdaccio/issues/4352)) ([b41f6c9](https://github.com/verdaccio/verdaccio/commit/b41f6c9e2bf15e177ddbdaceb0372c38107b67f3))
-* **deps:** update dependency cookies to v0.9.0 ([#4341](https://github.com/verdaccio/verdaccio/issues/4341)) ([0bdc10e](https://github.com/verdaccio/verdaccio/commit/0bdc10efd71a0701d750eb9e7a7567341b42e993))
-* **deps:** update dependency cookies to v0.9.1 ([#4371](https://github.com/verdaccio/verdaccio/issues/4371)) ([c96468a](https://github.com/verdaccio/verdaccio/commit/c96468a9e9d9902d02e3dfd06ba287481af82d37))
-* **deps:** update dependency verdaccio-audit to v12.0.0-next.5 ([#4353](https://github.com/verdaccio/verdaccio/issues/4353)) ([11421c0](https://github.com/verdaccio/verdaccio/commit/11421c0138f951ef062259b47c1c7fa4518d5d92))
-* **deps:** update dependency verdaccio-htpasswd to v12.0.0-next.5 ([#4355](https://github.com/verdaccio/verdaccio/issues/4355)) ([03d8bb4](https://github.com/verdaccio/verdaccio/commit/03d8bb48812e2a9e6f8e2f666d79361c1a554b25))
-
-## [5.29.0](https://github.com/verdaccio/verdaccio/compare/v5.28.0...v5.29.0) (2023-12-08)
-
-
-### Features
-
-* replace request with @cypress/request ([#4234](https://github.com/verdaccio/verdaccio/issues/4234)) ([e11d95d](https://github.com/verdaccio/verdaccio/commit/e11d95d41f7bdf6c82b0784faf67cd596bd6a29a))
-
-## [5.28.0](https://github.com/verdaccio/verdaccio/compare/v5.27.1...v5.28.0) (2023-12-05)
-
-
-### Features
-
-* update docker base image to node20 ([#4231](https://github.com/verdaccio/verdaccio/issues/4231)) ([adf6927](https://github.com/verdaccio/verdaccio/commit/adf6927374d4d3c060435341b816f1922eddc3b2))
-
-
-### Bug Fixes
-
-* restore search all endpoint ([#4233](https://github.com/verdaccio/verdaccio/issues/4233)) ([591ad20](https://github.com/verdaccio/verdaccio/commit/591ad20ee840b50aa9e0932587cb3f6d8d8a932e))
-
-### [5.27.1](https://github.com/verdaccio/verdaccio/compare/v5.27.0...v5.27.1) (2023-12-02)
-
-
-### Bug Fixes
-
-* reuse middleware reporting layer ([#4114](https://github.com/verdaccio/verdaccio/issues/4114)) ([6a317f8](https://github.com/verdaccio/verdaccio/commit/6a317f88194731120dbac2d77ac349654563607b))
-
-## [5.27.0](https://github.com/verdaccio/verdaccio/compare/v5.26.3...v5.27.0) (2023-10-14)
-
-
-### Features
-
-* update core dependencies ([#4073](https://github.com/verdaccio/verdaccio/issues/4073)) ([257d46a](https://github.com/verdaccio/verdaccio/commit/257d46a76f3899ca052c97e234e494a1e1791c3c))
-
-### [5.26.3](https://github.com/verdaccio/verdaccio/compare/v5.26.2...v5.26.3) (2023-09-24)
-
-
-### Bug Fixes
-
-* update core dependencies ([#4035](https://github.com/verdaccio/verdaccio/issues/4035)) ([bd0d029](https://github.com/verdaccio/verdaccio/commit/bd0d0291b6a89af930c2a74cab2adde2b5905c2d))
-
-### [5.26.2](https://github.com/verdaccio/verdaccio/compare/v5.26.1...v5.26.2) (2023-08-26)
-
-
-### Bug Fixes
-
-* **deps:** update dependency validator to v13.11.0 ([#3967](https://github.com/verdaccio/verdaccio/issues/3967)) ([f61cfda](https://github.com/verdaccio/verdaccio/commit/f61cfda1c33a020bb1eddb99f0e606f5bf68b499))
-* update core depepedencies 5.x  ([#3991](https://github.com/verdaccio/verdaccio/issues/3991)) ([528a902](https://github.com/verdaccio/verdaccio/commit/528a9027557298e40058dd997fc486267178c9bb)), closes [#3988](https://github.com/verdaccio/verdaccio/issues/3988) [#3989](https://github.com/verdaccio/verdaccio/issues/3989)
-
-### [5.26.1](https://github.com/verdaccio/verdaccio/compare/v5.26.0...v5.26.1) (2023-07-21)
-
-
-### Bug Fixes
-
-* add missing token auth middleware ([#3944](https://github.com/verdaccio/verdaccio/issues/3944)) ([5e9637d](https://github.com/verdaccio/verdaccio/commit/5e9637da9041cc11978e8366e3d5f5a3667791f0))
-
-## [5.26.0](https://github.com/verdaccio/verdaccio/compare/v5.25.0...v5.26.0) (2023-07-15)
-
-
-### Features
-
-* refactor middleware and bufixes  ([#3922](https://github.com/verdaccio/verdaccio/issues/3922)) ([43de79d](https://github.com/verdaccio/verdaccio/commit/43de79d46a9a41313489f30992dcd7cbecddc8ad))
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#3873](https://github.com/verdaccio/verdaccio/issues/3873)) ([f0bb451](https://github.com/verdaccio/verdaccio/commit/f0bb451111f9bd5d24ff21f31db3b9a81d41d16e))
-* **deps:** update dependency clipanion to v3.2.1 ([#3874](https://github.com/verdaccio/verdaccio/issues/3874)) ([b39c01f](https://github.com/verdaccio/verdaccio/commit/b39c01f1581c9b00ffb38e3fbdce678e9697e4da))
-* **deps:** update dependency semver to v7.5.2 ([#3895](https://github.com/verdaccio/verdaccio/issues/3895)) ([a699787](https://github.com/verdaccio/verdaccio/commit/a69978755deacb5034fae8a8a35291ed7ad19473))
-* **deps:** update dependency verdaccio-audit to v11.0.0-6-next.35 ([#3877](https://github.com/verdaccio/verdaccio/issues/3877)) ([a84d178](https://github.com/verdaccio/verdaccio/commit/a84d1786f8134022524e3c5ba80e3bbe87a4eb55))
-* docker update v18.16.1 ([#3923](https://github.com/verdaccio/verdaccio/issues/3923)) ([c671faa](https://github.com/verdaccio/verdaccio/commit/c671faace5a09d3d9d0a75eaa654fa2429eeacdf))
-* remove req.host deprecation warning ([#3921](https://github.com/verdaccio/verdaccio/issues/3921)) ([4be19db](https://github.com/verdaccio/verdaccio/commit/4be19db0c13335502940538a011b239f589a4325))
-* update dependencies ([971d500](https://github.com/verdaccio/verdaccio/commit/971d500c6e3edb685ae880970b85eff62269cb97))
-
-## [5.25.0](https://github.com/verdaccio/verdaccio/compare/v5.24.1...v5.25.0) (2023-06-03)
-
-
-### Features
-
-* replace internal web search indexer ([#3818](https://github.com/verdaccio/verdaccio/issues/3818)) ([770cd27](https://github.com/verdaccio/verdaccio/commit/770cd27759846fde1ff69c8b3e4c80768b18d343))
-
-
-### Bug Fixes
-
-* **deps:** update core verdaccio dependencies ([#3822](https://github.com/verdaccio/verdaccio/issues/3822)) ([2d6dbc7](https://github.com/verdaccio/verdaccio/commit/2d6dbc7daf5b942dc81b36ef2479ae2587b309af))
-* **deps:** update dependency @babel/eslint-parser to v7.21.8 ([#3807](https://github.com/verdaccio/verdaccio/issues/3807)) ([271f918](https://github.com/verdaccio/verdaccio/commit/271f918fc843ba79e39e46e5faf673677185f09f))
-* **deps:** update dependency semver to v7.5.1 ([#3816](https://github.com/verdaccio/verdaccio/issues/3816)) ([373c584](https://github.com/verdaccio/verdaccio/commit/373c584019403b593278b667b25c6197fcf2ac14))
-* **deps:** update dependency verdaccio-audit to v11.0.0-6-next.33 ([#3824](https://github.com/verdaccio/verdaccio/issues/3824)) ([a7a2d5f](https://github.com/verdaccio/verdaccio/commit/a7a2d5f3e12888af2e25eb4a856666e132e1e6d7))
-* **docker:** remove yarn symlinks ([#3840](https://github.com/verdaccio/verdaccio/issues/3840)) ([1a5d5b4](https://github.com/verdaccio/verdaccio/commit/1a5d5b41d5c6d2a7f61c2ded1624b40509677a51)), closes [/github.com/nodejs/docker-node/blob/02a64a08a98a472c6141cd583d2e9fc47bcd9bfd/18/alpine3.16/Dockerfile#L91-L92](https://github.com/verdaccio//github.com/nodejs/docker-node/blob/02a64a08a98a472c6141cd583d2e9fc47bcd9bfd/18/alpine3.16/Dockerfile/issues/L91-L92)
-* update verdaccio 6.x dependencies ([#3853](https://github.com/verdaccio/verdaccio/issues/3853)) ([99d06e5](https://github.com/verdaccio/verdaccio/commit/99d06e5f029e532e23fb9fc8006069da88bb6890))
-
-### [5.24.1](https://github.com/verdaccio/verdaccio/compare/v5.24.0...v5.24.1) (2023-04-24)
-
-
-### Bug Fixes
-
-* fixed an issue where logger.info in allow_action always output undefined ([#3763](https://github.com/verdaccio/verdaccio/issues/3763)) ([268c5e7](https://github.com/verdaccio/verdaccio/commit/268c5e7740115fdef56fddca04ac2a4d3e5481d4))
-
-## [5.24.0](https://github.com/verdaccio/verdaccio/compare/v5.23.2...v5.24.0) (2023-04-22)
-
-
-### Features
-
-* update docker base image v18.16.0 ([#3751](https://github.com/verdaccio/verdaccio/issues/3751)) ([d3bb520](https://github.com/verdaccio/verdaccio/commit/d3bb520374675d2d5c00829a3128d2a9baa42619))
-* upgrade plugin htpassw major  ([#3712](https://github.com/verdaccio/verdaccio/issues/3712)) ([e939ca2](https://github.com/verdaccio/verdaccio/commit/e939ca24af58c0d11ea515833f4a88463204b4ff))
-
-
-### Bug Fixes
-
-* **deps:** update dependency semver to v7.5.0 ([#3733](https://github.com/verdaccio/verdaccio/issues/3733)) ([dcd530b](https://github.com/verdaccio/verdaccio/commit/dcd530ba851916ed11abb431b7474092954d390e))
-* **deps:** update dependency verdaccio-htpasswd to v10.5.5 ([#3749](https://github.com/verdaccio/verdaccio/issues/3749)) ([b3ea816](https://github.com/verdaccio/verdaccio/commit/b3ea8162ac09ffa90272ad660413a929a6f7f809))
-
-### [5.23.2](https://github.com/verdaccio/verdaccio/compare/v5.23.1...v5.23.2) (2023-04-04)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/config to v6.0.0-6-next.67 ([#3716](https://github.com/verdaccio/verdaccio/issues/3716)) ([8e79e5f](https://github.com/verdaccio/verdaccio/commit/8e79e5f4ab1bbf04f2c6c046181e10d8358fed1d))
-* ui package search ([#3713](https://github.com/verdaccio/verdaccio/issues/3713)) ([1029d7a](https://github.com/verdaccio/verdaccio/commit/1029d7a3811461d836bcb3b40cc2c3071fbba864))
-
-### [5.23.1](https://github.com/verdaccio/verdaccio/compare/v5.23.0...v5.23.1) (2023-03-23)
-
-
-### Bug Fixes
-
-* package.json main field ([#3700](https://github.com/verdaccio/verdaccio/issues/3700)) ([5d83c52](https://github.com/verdaccio/verdaccio/commit/5d83c52da31166d69c5bf375e5ca24624d60f347))
-
-## [5.23.0](https://github.com/verdaccio/verdaccio/compare/v5.22.1...v5.23.0) (2023-03-23)
-
-
-### Features
-
-* update docker image base to v18.15.0 ([fd78ca9](https://github.com/verdaccio/verdaccio/commit/fd78ca9772adb059d62ab142c334f0ba69627cdc))
-
-
-### Bug Fixes
-
-* add missing version on footer [#3671](https://github.com/verdaccio/verdaccio/issues/3671) ([b85ba99](https://github.com/verdaccio/verdaccio/commit/b85ba995b5947ad60ab41c332328db47e7a519dc))
-* update core dependencies ([c95ab88](https://github.com/verdaccio/verdaccio/commit/c95ab88e46741f306ad4a730050c020770327561))
-* update core dependencies ([#3688](https://github.com/verdaccio/verdaccio/issues/3688)) ([2a6fc98](https://github.com/verdaccio/verdaccio/commit/2a6fc98f9208aa5a7faefc9c1d592610f88a17aa))
-
-### [5.22.1](https://github.com/verdaccio/verdaccio/compare/v5.22.0...v5.22.1) (2023-03-07)
-
-
-### Bug Fixes
-
-* [#3666](https://github.com/verdaccio/verdaccio/issues/3666) experiments config fail on startup ([#3668](https://github.com/verdaccio/verdaccio/issues/3668)) ([f6c22d3](https://github.com/verdaccio/verdaccio/commit/f6c22d3ea824d8dbafc62e0c4967f3f6d1f46bcf))
-
-## [5.22.0](https://github.com/verdaccio/verdaccio/compare/v5.21.2...v5.22.0) (2023-03-05)
-
-
-### Features
-
-* improved config and token signature ([#3658](https://github.com/verdaccio/verdaccio/issues/3658)) ([e50d4d9](https://github.com/verdaccio/verdaccio/commit/e50d4d92a242cb6290c62e0941cdedeb5f7c74d0))
-
-### [5.21.2](https://github.com/verdaccio/verdaccio/compare/v5.21.1...v5.21.2) (2023-02-25)
-
-
-### Bug Fixes
-
-* avoid setting body for GET requests ([#3643](https://github.com/verdaccio/verdaccio/issues/3643)) ([e4573c7](https://github.com/verdaccio/verdaccio/commit/e4573c7e15b2b99d4f49b5c8bdb8555d70c1f6c3)), closes [#3601](https://github.com/verdaccio/verdaccio/issues/3601) [#3601](https://github.com/verdaccio/verdaccio/issues/3601)
-* update dependencies ([#3649](https://github.com/verdaccio/verdaccio/issues/3649)) ([ed80a25](https://github.com/verdaccio/verdaccio/commit/ed80a25c08bf2971169b8ccfec96e404d019f2b1))
-
-### [5.21.1](https://github.com/verdaccio/verdaccio/compare/v5.21.0...v5.21.1) (2023-02-14)
-
-
-### Bug Fixes
-
-* restore @verdaccio/ui-theme version ([4105fec](https://github.com/verdaccio/verdaccio/commit/4105fecf4cc6d7d1435377bb078f7fd3d8bad228))
-
-## [5.21.0](https://github.com/verdaccio/verdaccio/compare/v5.20.1...v5.21.0) (2023-02-14)
-
-
-### Features
-
-* refactor render middleware and audit plugin ([#3602](https://github.com/verdaccio/verdaccio/issues/3602)) ([f9f269e](https://github.com/verdaccio/verdaccio/commit/f9f269ee04ce45e7985fe61a56d0013ff943896a))
-* replace middleware and logger core ([#3586](https://github.com/verdaccio/verdaccio/issues/3586)) ([bf9ed26](https://github.com/verdaccio/verdaccio/commit/bf9ed26d90d14cc7aafd04a5ff2ecde431931b98))
-
-### [5.20.1](https://github.com/verdaccio/verdaccio/compare/v5.20.0...v5.20.1) (2023-01-29)
-
-
-### Bug Fixes
-
-* pushed wrong types library and broken build ([45d7c95](https://github.com/verdaccio/verdaccio/commit/45d7c95a085450713543d1008d8e661f4a296bf1))
-
-## [5.20.0](https://github.com/verdaccio/verdaccio/compare/v5.19.1...v5.20.0) (2023-01-29)
-
-
-### Features
-
-* refactor test and use verdaccio 6 core modules ([#3569](https://github.com/verdaccio/verdaccio/issues/3569)) ([bae430f](https://github.com/verdaccio/verdaccio/commit/bae430fe24c9bb63dcf7b7b9e5f9f0dbf3f42669))
-
-
-### Bug Fixes
-
-* update dependencies ([#3567](https://github.com/verdaccio/verdaccio/issues/3567)) ([d151922](https://github.com/verdaccio/verdaccio/commit/d1519228a353644308ac9061d909b480042ec559))
-* update docker base to 18.13.0 ([#3579](https://github.com/verdaccio/verdaccio/issues/3579)) ([3320b4d](https://github.com/verdaccio/verdaccio/commit/3320b4dfe2bb5657cbf66f8f2134d12dfc6ab7b9))
-
-### [5.19.1](https://github.com/verdaccio/verdaccio/compare/v5.19.0...v5.19.1) (2023-01-07)
-
-
-### Bug Fixes
-
-* include ts types and systemd into the published package ([#3556](https://github.com/verdaccio/verdaccio/issues/3556)) ([a774e29](https://github.com/verdaccio/verdaccio/commit/a774e2971528aaa59155f271595588d4c945840d))
-
-## [5.19.0](https://github.com/verdaccio/verdaccio/compare/v5.18.0...v5.19.0) (2022-12-25)
-
-
-### Features
-
-* **security:**  update dependencies ([#3540](https://github.com/verdaccio/verdaccio/issues/3540)) ([99a39d5](https://github.com/verdaccio/verdaccio/commit/99a39d55a20c4c2da872e4c609de1fdeffe00717))
-
-
-### Bug Fixes
-
-* update core dependencies ([#3519](https://github.com/verdaccio/verdaccio/issues/3519)) ([9353b3e](https://github.com/verdaccio/verdaccio/commit/9353b3ebf084edf697407958aa91b3a47a4f925f))
-
-## [5.18.0](https://github.com/verdaccio/verdaccio/compare/v5.17.0...v5.18.0) (2022-11-23)
-
-
-### Features
-
-* export module types  ([#3508](https://github.com/verdaccio/verdaccio/issues/3508)) ([0a0b772](https://github.com/verdaccio/verdaccio/commit/0a0b772f524d146867a999ef09fce52eb4bf4188))
-
-
-### Bug Fixes
-
-* add hasInstallScript calculation ([#3509](https://github.com/verdaccio/verdaccio/issues/3509)) ([0b49566](https://github.com/verdaccio/verdaccio/commit/0b495661763a12d6c3539ed30d5dc1269348571d))
-
-## [5.17.0](https://github.com/verdaccio/verdaccio/compare/v5.16.3...v5.17.0) (2022-11-19)
-
-
-### Features
-
-* highlight readme source code ([#3506](https://github.com/verdaccio/verdaccio/issues/3506)) ([8715a5c](https://github.com/verdaccio/verdaccio/commit/8715a5cfa2cc6af65e64f034c72a4c02bf24d8f7))
-
-
-### Bug Fixes
-
-* **sec:** update base image to v18.12.1-alpine ([#3489](https://github.com/verdaccio/verdaccio/issues/3489)) ([07144c9](https://github.com/verdaccio/verdaccio/commit/07144c9886035945e6c0d0dbb1f310794efa4298))
-
-### [5.16.3](https://github.com/verdaccio/verdaccio/compare/v5.16.2...v5.16.3) (2022-11-08)
-
-
-### Bug Fixes
-
-* remove dry run ([32ecdfb](https://github.com/verdaccio/verdaccio/commit/32ecdfb301442dbab3c50ff3c805c59b9a32f6a2))
-
-### [5.16.2](https://github.com/verdaccio/verdaccio/compare/v5.16.1...v5.16.2) (2022-11-08)
-
-
-### Bug Fixes
-
-* release package ([1f477bd](https://github.com/verdaccio/verdaccio/commit/1f477bd6e882eee883422bc54db4e9dcc990f88a))
-
-### [5.16.1](https://github.com/verdaccio/verdaccio/compare/v5.16.0...v5.16.1) (2022-11-08)
-
-
-### Bug Fixes
-
-* missing files on release ([61e0136](https://github.com/verdaccio/verdaccio/commit/61e01368f4170d3cf33e1ed4997f002fd8317368))
-
-## [5.16.0](https://github.com/verdaccio/verdaccio/compare/v5.15.4...v5.16.0) (2022-11-08)
-
-
-### Features
-
-* docker image refactor a new internal binary run  ([#3475](https://github.com/verdaccio/verdaccio/issues/3475)) ([ebaaf3f](https://github.com/verdaccio/verdaccio/commit/ebaaf3f6811c11f5407482628df40198d97c4b83))
-* update to docker base image to node v18.12.0 ([#3469](https://github.com/verdaccio/verdaccio/issues/3469)) ([644938c](https://github.com/verdaccio/verdaccio/commit/644938c0f31dd375af6023362ea9596de1dfa3c5))
-
-
-### Bug Fixes
-
-* **deps:** update dependency body-parser to v1.20.1 ([#3438](https://github.com/verdaccio/verdaccio/issues/3438)) ([b3b44f6](https://github.com/verdaccio/verdaccio/commit/b3b44f6317cf7e47689e336bfa6e2c8c8e3d1a93))
-* **deps:** update dependency dayjs to v1.11.6 ([#3459](https://github.com/verdaccio/verdaccio/issues/3459)) ([106e00a](https://github.com/verdaccio/verdaccio/commit/106e00a751ff7f89b660861e5cdd95811a8069a3))
-* **deps:** update dependency express to v4.18.2 ([#3435](https://github.com/verdaccio/verdaccio/issues/3435)) ([128ab21](https://github.com/verdaccio/verdaccio/commit/128ab21a8ae6a83a8650acc1021a460339b0ba74))
-* **deps:** update dependency marked to v4.1.1 ([#3439](https://github.com/verdaccio/verdaccio/issues/3439)) ([1a1572f](https://github.com/verdaccio/verdaccio/commit/1a1572ff9e8eeffb35f2beac2bb24a760b6326bc))
-* update core deps ([#3485](https://github.com/verdaccio/verdaccio/issues/3485)) ([7a000bc](https://github.com/verdaccio/verdaccio/commit/7a000bccdb2af156936a7118cb8b64c51a27015e))
-
-### [5.15.4](https://github.com/verdaccio/verdaccio/compare/v5.15.3...v5.15.4) (2022-09-29)
-
-
-### Bug Fixes
-
-* docker base image upgraded 14.20.1 ([#3405](https://github.com/verdaccio/verdaccio/issues/3405)) ([1d6b763](https://github.com/verdaccio/verdaccio/commit/1d6b7632d72107043465429f4c0fab716fe07f0e))
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.48 ([#3404](https://github.com/verdaccio/verdaccio/issues/3404)) ([be5c9f9](https://github.com/verdaccio/verdaccio/commit/be5c9f93ed47a2a3b3489ab5672c0085860cc37b))
-
-### [5.15.3](https://github.com/verdaccio/verdaccio/compare/v5.15.2...v5.15.3) (2022-09-07)
-
-
-### Bug Fixes
-
-* remove stringify with space responses ([#3364](https://github.com/verdaccio/verdaccio/issues/3364)) ([90e7cfd](https://github.com/verdaccio/verdaccio/commit/90e7cfd1edcd7e7111ff742e001e454c54bc6efd))
-
-### [5.15.2](https://github.com/verdaccio/verdaccio/compare/v5.15.1...v5.15.2) (2022-09-05)
-
-
-### Bug Fixes
-
-* get header by quality priority value ([#3359](https://github.com/verdaccio/verdaccio/issues/3359)) ([cdb80aa](https://github.com/verdaccio/verdaccio/commit/cdb80aac20b98855638ac9c8eeca700076b2c519))
-
-### [5.15.1](https://github.com/verdaccio/verdaccio/compare/v5.15.0...v5.15.1) (2022-09-04)
-
-
-### Bug Fixes
-
-* add missing fields to abbreviated metadata ([#3347](https://github.com/verdaccio/verdaccio/issues/3347)) ([317177a](https://github.com/verdaccio/verdaccio/commit/317177a937c1c4d7e47317eff0039c8bcb28d602))
-
-## [5.15.0](https://github.com/verdaccio/verdaccio/compare/v5.14.0...v5.15.0) (2022-09-03)
-
-
-### Features
-
-* implement abbreviated manifest ([#3343](https://github.com/verdaccio/verdaccio/issues/3343)) ([966139f](https://github.com/verdaccio/verdaccio/commit/966139ffd832dcaa9f8ebc29da8b583dbbfc729d))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.26 ([#3313](https://github.com/verdaccio/verdaccio/issues/3313)) ([80755f2](https://github.com/verdaccio/verdaccio/commit/80755f21c9a8733073787a5c915c7c64077213f3))
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.28 ([#3335](https://github.com/verdaccio/verdaccio/issues/3335)) ([b1ec0da](https://github.com/verdaccio/verdaccio/commit/b1ec0daecae6ea1532ac020bdda7fc6fbc60606f))
-* **deps:** update dependency dayjs to v1.11.5 ([#3300](https://github.com/verdaccio/verdaccio/issues/3300)) ([6a2b2fa](https://github.com/verdaccio/verdaccio/commit/6a2b2fa36a45bbb5b59f197cba5163e5963e8e31))
-* **deps:** update dependency lru-cache to v7.14.0 ([#3345](https://github.com/verdaccio/verdaccio/issues/3345)) ([628616c](https://github.com/verdaccio/verdaccio/commit/628616ce323577d295d981cfe449da9359b162e4))
-* **deps:** update dependency marked to v4.0.19 (5.x) ([#3328](https://github.com/verdaccio/verdaccio/issues/3328)) ([b80794a](https://github.com/verdaccio/verdaccio/commit/b80794a46f1c1a0aaf41a58fad6af427c87bb0f0))
-* **deps:** update dependency marked to v4.1.0 ([#3346](https://github.com/verdaccio/verdaccio/issues/3346)) ([354f9ee](https://github.com/verdaccio/verdaccio/commit/354f9ee16ceff7f479799f63834da84635d0e6a9))
-
-## [5.14.0](https://github.com/verdaccio/verdaccio/compare/v5.13.3...v5.14.0) (2022-07-29)
-
-
-### Features
-
-* allow express 'trust proxy' to be set for ip resolution behind proxies and load-balancers ([#3274](https://github.com/verdaccio/verdaccio/issues/3274)) ([0bc26e3](https://github.com/verdaccio/verdaccio/commit/0bc26e395a9fa348da52793526e3f13e614900ab))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/readme to v10.4.1 ([#3267](https://github.com/verdaccio/verdaccio/issues/3267)) ([080bd45](https://github.com/verdaccio/verdaccio/commit/080bd4578f27481a0681914e1e77e7e85cd4bbe6))
-* **deps:** update dependency lru-cache to v7.13.1 ([#3268](https://github.com/verdaccio/verdaccio/issues/3268)) ([d995cc5](https://github.com/verdaccio/verdaccio/commit/d995cc516e012295dae56aa6a62b97d60c2f4da6))
-
-### [5.13.3](https://github.com/verdaccio/verdaccio/compare/v5.13.2...v5.13.3) (2022-07-13)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/readme to v10.4.0 ([#3265](https://github.com/verdaccio/verdaccio/issues/3265)) ([531f468](https://github.com/verdaccio/verdaccio/commit/531f4685abe37e5d7487f665c9d480e0d085df5f))
-* **deps:** update dependency kleur to v4.1.5 ([#3263](https://github.com/verdaccio/verdaccio/issues/3263)) ([cc1c2a5](https://github.com/verdaccio/verdaccio/commit/cc1c2a5e50ca7e0e6bade2f8f18ec31c35b3fb53))
-* **deps:** update dependency lru-cache to v7.13.0 ([#3266](https://github.com/verdaccio/verdaccio/issues/3266)) ([0a611c0](https://github.com/verdaccio/verdaccio/commit/0a611c0b7df404c6ea66e104eb9ec80ffd7c49f3))
-* **deps:** update dependency marked to v4.0.18 ([#3264](https://github.com/verdaccio/verdaccio/issues/3264)) ([b3f964d](https://github.com/verdaccio/verdaccio/commit/b3f964d93aa15334b685c9b66fe44912c1aa5447))
-
-### [5.13.2](https://github.com/verdaccio/verdaccio/compare/v5.13.1...v5.13.2) (2022-07-12)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.25 ([#3258](https://github.com/verdaccio/verdaccio/issues/3258)) ([af9cc6d](https://github.com/verdaccio/verdaccio/commit/af9cc6d4f993d07e396a0391f3a964b0c7d36268))
-* update nodejs to 14.20.0 to fix CVE-2022-32212 ([#3262](https://github.com/verdaccio/verdaccio/issues/3262)) ([5f83dc2](https://github.com/verdaccio/verdaccio/commit/5f83dc294e763d578b5d9f95cfee00e44fa6fd6e))
-
-### [5.13.1](https://github.com/verdaccio/verdaccio/compare/v5.13.0...v5.13.1) (2022-06-23)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/local-storage to v10.3.1 ([#3245](https://github.com/verdaccio/verdaccio/issues/3245)) ([991cf10](https://github.com/verdaccio/verdaccio/commit/991cf1083de7c5a4fe0694a995e888ad47290c1e))
-* **deps:** update dependency verdaccio-htpasswd to v10.5.0 ([#3242](https://github.com/verdaccio/verdaccio/issues/3242)) ([884e05b](https://github.com/verdaccio/verdaccio/commit/884e05b13ef4161ea0619ed4c78396c2f934c113))
-
-## [5.13.0](https://github.com/verdaccio/verdaccio/compare/v5.12.0...v5.13.0) (2022-06-17)
-
-
-### Features
-
-* allow other password hashing algorithms ([#3229](https://github.com/verdaccio/verdaccio/issues/3229)) ([87fbc0f](https://github.com/verdaccio/verdaccio/commit/87fbc0fb7c0dbddbd6c53726e12f69cf02368127))
-
-## [5.12.0](https://github.com/verdaccio/verdaccio/compare/v5.11.0...v5.12.0) (2022-06-14)
-
-
-### Features
-
-* add scope support loading plugins ([#3227](https://github.com/verdaccio/verdaccio/issues/3227)) ([5c50ec9](https://github.com/verdaccio/verdaccio/commit/5c50ec9a2ced21c06ce690bb45af2019a514149d))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/local-storage to v10.3.0 ([#3223](https://github.com/verdaccio/verdaccio/issues/3223)) ([2b8ac7a](https://github.com/verdaccio/verdaccio/commit/2b8ac7a1aca0c898edad89ea8e3dbb5c33ee8134))
-* **deps:** update dependency async to v3.2.4 ([#3224](https://github.com/verdaccio/verdaccio/issues/3224)) ([c486af2](https://github.com/verdaccio/verdaccio/commit/c486af23eaa583f4c5042f51769f363731bd6f84))
-* **deps:** update dependency dayjs to v1.11.3 ([#3225](https://github.com/verdaccio/verdaccio/issues/3225)) ([325e536](https://github.com/verdaccio/verdaccio/commit/325e536f0323f6c1b17de594afe1fce5d6368624))
-* **deps:** update dependency lru-cache to v7.10.1 ([#3182](https://github.com/verdaccio/verdaccio/issues/3182)) ([7bc60ff](https://github.com/verdaccio/verdaccio/commit/7bc60ffca8109adbdea2462370b7c553129dcdcb))
-* **deps:** update dependency marked to v4.0.17 ([#3226](https://github.com/verdaccio/verdaccio/issues/3226)) ([9d9c086](https://github.com/verdaccio/verdaccio/commit/9d9c086ba36fca787eb97fe70cf6c7eea9128c3c))
-* **deps:** update dependency minimatch to v5.1.0 ([#3183](https://github.com/verdaccio/verdaccio/issues/3183)) ([e5dbd9b](https://github.com/verdaccio/verdaccio/commit/e5dbd9bbd1306ef5856717eb440ba8694c6e81e4))
-* **deps:** update dependency verdaccio-htpasswd to v10.3.1 ([#3220](https://github.com/verdaccio/verdaccio/issues/3220)) ([25a2825](https://github.com/verdaccio/verdaccio/commit/25a2825f8b98d8563ad850e354941fb65a4024af))
-
-## [5.11.0](https://github.com/verdaccio/verdaccio/compare/v5.10.3...v5.11.0) (2022-06-02)
-
-
-### Features
-
-* run server init as promise ([#3210](https://github.com/verdaccio/verdaccio/issues/3210)) ([42194c7](https://github.com/verdaccio/verdaccio/commit/42194c7302dea42d30ef4ef2d17f1af97887d582))
-
-### [5.10.3](https://github.com/verdaccio/verdaccio/compare/v5.10.2...v5.10.3) (2022-05-30)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/readme to v10.3.4 ([#3197](https://github.com/verdaccio/verdaccio/issues/3197)) ([2443900](https://github.com/verdaccio/verdaccio/commit/2443900329176ff856e4790f089e15897c612a56))
-* **deps:** update dependency marked to v4.0.16 ([#3187](https://github.com/verdaccio/verdaccio/issues/3187)) ([a17378d](https://github.com/verdaccio/verdaccio/commit/a17378d252d90c79cd2bd17ece131c7870a5a25b))
-* **deps:** update dependency verdaccio-audit to v10.2.2 ([#3201](https://github.com/verdaccio/verdaccio/issues/3201)) ([9e743f4](https://github.com/verdaccio/verdaccio/commit/9e743f493ef19c1c8b734c48498fe3d01f91fb0e))
-
-### [5.10.2](https://github.com/verdaccio/verdaccio/compare/v5.10.1...v5.10.2) (2022-05-07)
-
-
-### Bug Fixes
-
-* **deps:** update dependency dayjs to v1.11.2 ([#3159](https://github.com/verdaccio/verdaccio/issues/3159)) ([cd39a42](https://github.com/verdaccio/verdaccio/commit/cd39a429b61dad097e69782ce5f6201380353256))
-* **deps:** update dependency express to v4.18.1 ([#3160](https://github.com/verdaccio/verdaccio/issues/3160)) ([5fffeac](https://github.com/verdaccio/verdaccio/commit/5fffeacda98837730ecba3a7a5fc7534b469238f))
-* **deps:** update dependency lru-cache to v7.9.0 ([#3161](https://github.com/verdaccio/verdaccio/issues/3161)) ([f16a1ea](https://github.com/verdaccio/verdaccio/commit/f16a1ea68d911f69be73fecc794d47ae07593b15))
-* remove lru deprecation warning ([#3158](https://github.com/verdaccio/verdaccio/issues/3158)) ([adfbefc](https://github.com/verdaccio/verdaccio/commit/adfbefc59eb9a3e39b67bf0dcec1fc068338770f))
-* **deps:** update dependency marked to v4.0.15 ([#3153](https://github.com/verdaccio/verdaccio/issues/3153)) ([61249a4](https://github.com/verdaccio/verdaccio/commit/61249a4edd1c84527d7d2c19be75c62d1b073cef))
-
-### [5.10.1](https://github.com/verdaccio/verdaccio/compare/v5.10.0...v5.10.1) (2022-05-05)
-
-
-### Bug Fixes
-
-* duplicated groups on use jwt tokens ([#3151](https://github.com/verdaccio/verdaccio/issues/3151)) ([51803c3](https://github.com/verdaccio/verdaccio/commit/51803c34776ca1e868399ede4f17a087c9a39bc5))
-
-## [5.10.0](https://github.com/verdaccio/verdaccio/compare/v5.9.0...v5.10.0) (2022-04-26)
-
-
-### Features
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.24 (5.x) ([#3130](https://github.com/verdaccio/verdaccio/issues/3130)) ([da01a14](https://github.com/verdaccio/verdaccio/commit/da01a14e70de722aab0c99bb81997886fae35727))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/local-storage to v10.2.1 ([#3118](https://github.com/verdaccio/verdaccio/issues/3118)) ([0f9d6ec](https://github.com/verdaccio/verdaccio/commit/0f9d6eca34476505df95e67acd2f77fbce3a1c96))
-* **deps:** update dependency @verdaccio/readme to v10.3.3 ([#3119](https://github.com/verdaccio/verdaccio/issues/3119)) ([78b9c8b](https://github.com/verdaccio/verdaccio/commit/78b9c8b33ee1c1894d654b69b8c88631c5139cc9))
-* **deps:** update dependency body-parser to v1.20.0 ([#3123](https://github.com/verdaccio/verdaccio/issues/3123)) ([954886d](https://github.com/verdaccio/verdaccio/commit/954886d2db32088ea246dd3b5748c25ac56c30b0))
-* **deps:** update dependency dayjs to v1.11.1 ([#3131](https://github.com/verdaccio/verdaccio/issues/3131)) ([27035f9](https://github.com/verdaccio/verdaccio/commit/27035f9403261b342d9d3a3826e6b92c45de1954))
-* **deps:** update dependency lru-cache to v7 ([#3124](https://github.com/verdaccio/verdaccio/issues/3124)) ([7ceaa17](https://github.com/verdaccio/verdaccio/commit/7ceaa1799c80a6cde23255affbfe076f6e44cb9d))
-* **deps:** update dependency marked to v4.0.14 ([#3120](https://github.com/verdaccio/verdaccio/issues/3120)) ([8a60050](https://github.com/verdaccio/verdaccio/commit/8a60050b8b4594aae0d3c942b23aaf33f857ebcf))
-* **deps:** update dependency semver to v7.3.7 ([#3121](https://github.com/verdaccio/verdaccio/issues/3121)) ([157d5c5](https://github.com/verdaccio/verdaccio/commit/157d5c5ce415d81500bdc71435ccf30b19631aef))
-* **deps:** update dependency verdaccio-audit to v10.2.1 ([#3122](https://github.com/verdaccio/verdaccio/issues/3122)) ([decd7f1](https://github.com/verdaccio/verdaccio/commit/decd7f1e5cfc48bbf159f1ac42ecaa7861e6a5f9))
-
-## [5.9.0](https://github.com/verdaccio/verdaccio/compare/v5.8.0...v5.9.0) (2022-04-12)
-
-
-### Features
-
-* **web:** add a config item to web，let the developer can select whether enable the html cache ([#3110](https://github.com/verdaccio/verdaccio/issues/3110)) ([b30ba81](https://github.com/verdaccio/verdaccio/commit/b30ba81b86d3fa11a18bdb32a7adf162f16794e0))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.23 ([#3106](https://github.com/verdaccio/verdaccio/issues/3106)) ([b963f7d](https://github.com/verdaccio/verdaccio/commit/b963f7db2a2273983c0d5b4792a84601be732823))
-* **deps:** update dependency body-parser to v1.19.2 ([#3087](https://github.com/verdaccio/verdaccio/issues/3087)) ([8cee85f](https://github.com/verdaccio/verdaccio/commit/8cee85f811effe5ba95458f18381beddaa2850dc))
-* **deps:** update dependency dayjs to v1.11.0 ([#3094](https://github.com/verdaccio/verdaccio/issues/3094)) ([4cc1877](https://github.com/verdaccio/verdaccio/commit/4cc18773b73e387ef362de6438965ca198114bcb))
-
-## [5.8.0](https://github.com/verdaccio/verdaccio/compare/v5.7.1...v5.8.0) (2022-03-12)
-
-
-### Features
-
-* update ui with new modal banner ([#3062](https://github.com/verdaccio/verdaccio/issues/3062)) ([2ad085a](https://github.com/verdaccio/verdaccio/commit/2ad085a8e2adf3c19b3b2c7172b50f1a9cd6c9df))
-
-### [5.7.1](https://github.com/verdaccio/verdaccio/compare/v5.7.0...v5.7.1) (2022-03-08)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.21 ([#3050](https://github.com/verdaccio/verdaccio/issues/3050)) ([ace754d](https://github.com/verdaccio/verdaccio/commit/ace754ddffb20ba4c465cfec409291d5d4f51142))
-* missing colors on terminal ([#3049](https://github.com/verdaccio/verdaccio/issues/3049)) ([0f51a6c](https://github.com/verdaccio/verdaccio/commit/0f51a6ced5ee453b1cb6d7b375960d4b21ea4834))
-* **deps:** update dependency dayjs to v1.10.8 ([#3036](https://github.com/verdaccio/verdaccio/issues/3036)) ([1221ffd](https://github.com/verdaccio/verdaccio/commit/1221ffd512fb678aee75cbe5f877670c32e1a056))
-* **deps:** update dependency express to v4.17.3 ([#3039](https://github.com/verdaccio/verdaccio/issues/3039)) ([21c66f6](https://github.com/verdaccio/verdaccio/commit/21c66f65c3eae4bc0048056258376300785e87ff))
-* **deps:** update dependency minimatch to v5 ([#3035](https://github.com/verdaccio/verdaccio/issues/3035)) ([2ef97d4](https://github.com/verdaccio/verdaccio/commit/2ef97d48470ee30bef59274472c14b14ba9cb29a))
-* **deps:** update dependency verdaccio-htpasswd to v10.3.0 ([#3038](https://github.com/verdaccio/verdaccio/issues/3038)) ([24830e0](https://github.com/verdaccio/verdaccio/commit/24830e06e8dd7c00f783177a2048be0524ef42aa))
-
-## [5.7.0](https://github.com/verdaccio/verdaccio/compare/v5.6.2...v5.7.0) (2022-03-04)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.20 ([#3028](https://github.com/verdaccio/verdaccio/issues/3028)) ([87e5e74](https://github.com/verdaccio/verdaccio/commit/87e5e74ea472bb107bb0d0c549531cbe4ed626a4))
-
-### [5.6.2](https://github.com/verdaccio/verdaccio/compare/v5.6.1...v5.6.2) (2022-02-26)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.18 ([#3019](https://github.com/verdaccio/verdaccio/issues/3019)) ([7cff3f7](https://github.com/verdaccio/verdaccio/commit/7cff3f7693626aab4543d9c0ae0236416c8c2c9b))
-* **deps:** update dependency pino to v6.14.0 ([#3018](https://github.com/verdaccio/verdaccio/issues/3018)) ([08b72b4](https://github.com/verdaccio/verdaccio/commit/08b72b46638587041d42040875ff92f4c4409548))
-
-### [5.6.1](https://github.com/verdaccio/verdaccio/compare/v5.6.0...v5.6.1) (2022-02-26)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.17 ([#3014](https://github.com/verdaccio/verdaccio/issues/3014)) ([f57508d](https://github.com/verdaccio/verdaccio/commit/f57508d6f3cdcea731ddb75e71f867e846b8d0dd))
-
-## [5.6.0](https://github.com/verdaccio/verdaccio/compare/v5.5.2...v5.6.0) (2022-02-15)
-
-
-### Features
-
-* new environment variable (storage path)  ([#2993](https://github.com/verdaccio/verdaccio/issues/2993)) ([681dc82](https://github.com/verdaccio/verdaccio/commit/681dc821aab9f031b959c802f172f06dc6672864)), closes [PR#2199](https://github.com/verdaccio/PR/issues/2199) [PR#2199](https://github.com/verdaccio/PR/issues/2199) [PR#2199](https://github.com/verdaccio/PR/issues/2199)
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/commons-api to v10.2.0 ([#2986](https://github.com/verdaccio/verdaccio/issues/2986)) ([63fc4d1](https://github.com/verdaccio/verdaccio/commit/63fc4d1baf836ad3f6a52db0cc20ec4df34e7e4a))
-* **deps:** update dependency @verdaccio/local-storage to v10.2.0 ([#2987](https://github.com/verdaccio/verdaccio/issues/2987)) ([1db0a2e](https://github.com/verdaccio/verdaccio/commit/1db0a2ebf5137d6f5c1d82d4fc1437c4b6f060d9))
-* **deps:** update dependency @verdaccio/readme to v10.3.2 ([#2984](https://github.com/verdaccio/verdaccio/issues/2984)) ([fee3ac6](https://github.com/verdaccio/verdaccio/commit/fee3ac670a8fd0aa9446022f502c64fd07629eba))
-* **deps:** update dependency @verdaccio/streams to v10.2.0 ([#2995](https://github.com/verdaccio/verdaccio/issues/2995)) ([60fea02](https://github.com/verdaccio/verdaccio/commit/60fea02ad15cb84d07ed1072e3c8a83208026200))
-* **deps:** update dependency marked to v4.0.12 ([#2976](https://github.com/verdaccio/verdaccio/issues/2976)) ([2cd4a3b](https://github.com/verdaccio/verdaccio/commit/2cd4a3bb073cdf03fc39b5e90263da1a669c6748))
-* **deps:** update dependency verdaccio-audit to v10.2.0 ([#2998](https://github.com/verdaccio/verdaccio/issues/2998)) ([57c4ce5](https://github.com/verdaccio/verdaccio/commit/57c4ce5a19b6591b1a441879fdfcc2efa44acfc3))
-* **deps:** update dependency verdaccio-htpasswd to v10.2.0 ([#2999](https://github.com/verdaccio/verdaccio/issues/2999)) ([25b2212](https://github.com/verdaccio/verdaccio/commit/25b22128b8e966812cefd9b680db63f6df5aab8f))
-
-### [5.5.2](https://github.com/verdaccio/verdaccio/compare/v5.5.1...v5.5.2) (2022-01-27)
-
-
-### Bug Fixes
-
-* re-opening log files using SIGUSR2 ([#2966](https://github.com/verdaccio/verdaccio/issues/2966)) ([b964c0d](https://github.com/verdaccio/verdaccio/commit/b964c0d4881cb998cb3e58f25b93cfa4326bdc28))
-
-### [5.5.1](https://github.com/verdaccio/verdaccio/compare/v5.5.0...v5.5.1) (2022-01-24)
-
-
-### Bug Fixes
-
-* remove engines restriction from ui-theme dependency ([de7713e](https://github.com/verdaccio/verdaccio/commit/de7713ecc1390ff44899ae13737d934bb9bbb964))
-* **deps:** update dependency marked to v4 ([#2956](https://github.com/verdaccio/verdaccio/issues/2956)) ([5009797](https://github.com/verdaccio/verdaccio/commit/50097976ed965e6f28d3900859b73e52a1553ff0))
-* **deps:** update dependency mime to v3 ([#2957](https://github.com/verdaccio/verdaccio/issues/2957)) ([ac4392a](https://github.com/verdaccio/verdaccio/commit/ac4392a22135f5f4654b0e6fa6d0039a649ee899))
-
-## [5.5.0](https://github.com/verdaccio/verdaccio/compare/v5.4.0...v5.5.0) (2022-01-22)
-
-
-### Features
-
-* add new options to the web disable login and pkg managers ([#2947](https://github.com/verdaccio/verdaccio/issues/2947)) ([1a7b1ee](https://github.com/verdaccio/verdaccio/commit/1a7b1ee8ad79c0a164f8bae7160b55919c18c0f1))
-* upgrade [@verdaccio-ui-theme](https://github.com/verdaccio-ui-theme)  ([d36b8b1](https://github.com/verdaccio/verdaccio/commit/d36b8b1e00ed4180424af160dcf0d53697d8a905))
-* use backward compatible UI from v6 on v5 ([#2912](https://github.com/verdaccio/verdaccio/issues/2912)) ([b79266d](https://github.com/verdaccio/verdaccio/commit/b79266d54e7310ed879e80e0beda95ebbeb2470c))
-
-
-### Bug Fixes
-
-* **deps:** update all non-major linting dependencies (5.x) ([#2885](https://github.com/verdaccio/verdaccio/issues/2885)) ([23d0bd7](https://github.com/verdaccio/verdaccio/commit/23d0bd7056333bd87bf232c93f25f6f6e853816f))
-* **deps:** update dependency @verdaccio/local-storage to v10.1.1 ([#2932](https://github.com/verdaccio/verdaccio/issues/2932)) ([8c7e39e](https://github.com/verdaccio/verdaccio/commit/8c7e39e8f3547fc59cfabcf6a58276894f8c4e9d))
-* **deps:** update dependency @verdaccio/readme to v10.2.1 ([#2933](https://github.com/verdaccio/verdaccio/issues/2933)) ([8a75f8c](https://github.com/verdaccio/verdaccio/commit/8a75f8cc360813a04e3b6c553ca5db4e213c7dd8))
-* **deps:** update dependency async to v3.2.3 ([#2934](https://github.com/verdaccio/verdaccio/issues/2934)) ([e2eb6ce](https://github.com/verdaccio/verdaccio/commit/e2eb6ce27feb4097fe9940db46ad67ce99b35547))
-* **deps:** update dependency fast-safe-stringify to v2.1.1 ([#2891](https://github.com/verdaccio/verdaccio/issues/2891)) ([bd738ec](https://github.com/verdaccio/verdaccio/commit/bd738ecf6026d70c249aa8a00a32f8e95fe80e8d))
-* **deps:** update dependency verdaccio-audit to v10.1.1 ([#2935](https://github.com/verdaccio/verdaccio/issues/2935)) ([3a9d773](https://github.com/verdaccio/verdaccio/commit/3a9d77341596904e0b5f637b4e81fe4037f65d8a))
-* update babel and core dependencies ([#2887](https://github.com/verdaccio/verdaccio/issues/2887)) ([ec98159](https://github.com/verdaccio/verdaccio/commit/ec98159c3c5e3e890e749a3d8fd555b4c5c0be63))
-* update docker to v14.18.2 ([#2888](https://github.com/verdaccio/verdaccio/issues/2888)) ([22cfea0](https://github.com/verdaccio/verdaccio/commit/22cfea09070a060437fe01a74e9bd12b2cf834d9))
-* **deps:** update dependency pino to v6.13.4 ([#2829](https://github.com/verdaccio/verdaccio/issues/2829)) ([1ec77e7](https://github.com/verdaccio/verdaccio/commit/1ec77e760570658b6b4b5f44c927c6e52ceadd46))
-
-## [5.4.0](https://github.com/verdaccio/verdaccio/compare/v5.3.2...v5.4.0) (2021-12-24)
-
-
-### Features
-
-* add cache-control header to endpoints ([#2791](https://github.com/verdaccio/verdaccio/issues/2791)) ([fd3ad1e](https://github.com/verdaccio/verdaccio/commit/fd3ad1e546f5293e862d767f23b3714e6dd5dc8c))
-* add rate limit to user api endpoints ([#2800](https://github.com/verdaccio/verdaccio/issues/2800)) ([#2799](https://github.com/verdaccio/verdaccio/issues/2799)) ([f64e403](https://github.com/verdaccio/verdaccio/commit/f64e403f0a1d710a0d866ca2db480199c83a3609))
-* add rate limit to web endpoints ([#2799](https://github.com/verdaccio/verdaccio/issues/2799)) ([c91d6be](https://github.com/verdaccio/verdaccio/commit/c91d6beb8bde1c5f275d7f570209cf723dce47c5))
-* allow override user rate limit and user agent ([#2803](https://github.com/verdaccio/verdaccio/issues/2803)) ([5b1264c](https://github.com/verdaccio/verdaccio/commit/5b1264c733ea249efc38e963f0e99fb093d61406))
-* jwt default time new set ([#2787](https://github.com/verdaccio/verdaccio/issues/2787)) ([1c17d09](https://github.com/verdaccio/verdaccio/commit/1c17d0986ea551b427994f8392a9d8ef29ba88e9))
-* user agent is the client by default ([#2793](https://github.com/verdaccio/verdaccio/issues/2793)) ([e5d79ce](https://github.com/verdaccio/verdaccio/commit/e5d79ce8f00a18f0c0646b761f22dc608b5baf87))
-
-
-### Bug Fixes
-
-* **deps:** update dependency @verdaccio/commons-api to v10.1.0 ([#2789](https://github.com/verdaccio/verdaccio/issues/2789)) ([c5c0ef8](https://github.com/verdaccio/verdaccio/commit/c5c0ef8750abeb50d933c639a2041d25a889820b))
-* **deps:** update dependency body-parser to v1.19.1 ([#2788](https://github.com/verdaccio/verdaccio/issues/2788)) ([46e583f](https://github.com/verdaccio/verdaccio/commit/46e583f683520b3a69dbd14ed43146492c0e80be))
-
-### [5.3.2](https://github.com/verdaccio/verdaccio/compare/v5.3.1...v5.3.2) (2021-12-16)
-
-
-### Bug Fixes
-
-* publish with deprecated field ([#2771](https://github.com/verdaccio/verdaccio/issues/2771)) ([b5ac3c0](https://github.com/verdaccio/verdaccio/commit/b5ac3c0f287b8d9ae9121a47d6ac9d27e2bd4ce6)), closes [#2766](https://github.com/verdaccio/verdaccio/issues/2766)
-
-### [5.3.1](https://github.com/verdaccio/verdaccio/compare/v5.3.0...v5.3.1) (2021-12-11)
-
-
-### Bug Fixes
-
-* conflict core-js dependency ([#2754](https://github.com/verdaccio/verdaccio/issues/2754)) ([29d4551](https://github.com/verdaccio/verdaccio/commit/29d4551e5bfc066a5ff7109786a73ec8e782a65f))
-
-## [5.3.0](https://github.com/verdaccio/verdaccio/compare/v5.2.2...v5.3.0) (2021-12-08)
-
-
-### Bug Fixes
-
-* markdown anchor links in package readme.md broken [#2712](https://github.com/verdaccio/verdaccio/issues/2712) ([820c9d5](https://github.com/verdaccio/verdaccio/commit/820c9d5db2fe7e99cab3c75c431b8df7dfd096d0))
-* update pnpm and bum up core deps ([#2716](https://github.com/verdaccio/verdaccio/issues/2716)) ([60cd25c](https://github.com/verdaccio/verdaccio/commit/60cd25ce4fe107f7d25780447289b6fb0e21d4b6))
-* **deps:** update dependency @verdaccio/commons-api to v10.0.2 ([#2706](https://github.com/verdaccio/verdaccio/issues/2706)) ([73d565f](https://github.com/verdaccio/verdaccio/commit/73d565f5f558b7746f538d8fbbb15ea24dcedb23))
-* **deps:** update dependency @verdaccio/readme to v10.0.1 ([#2708](https://github.com/verdaccio/verdaccio/issues/2708)) ([41cadcc](https://github.com/verdaccio/verdaccio/commit/41cadccaef358bb11f4b2f015b0885f32dffa91a))
-* **deps:** update dependency @verdaccio/streams to v10.0.1 ([#2709](https://github.com/verdaccio/verdaccio/issues/2709)) ([74d7d02](https://github.com/verdaccio/verdaccio/commit/74d7d02c396185f76767f234592eb14f497d7929))
-* **deps:** update dependency http-errors to v1.8.1 ([#2705](https://github.com/verdaccio/verdaccio/issues/2705)) ([eee19a5](https://github.com/verdaccio/verdaccio/commit/eee19a5f791dd93f4ee078243ed310fa88aa5ae7))
-* **deps:** update dependency verdaccio-audit to v10.0.3 ([#2710](https://github.com/verdaccio/verdaccio/issues/2710)) ([8c074e8](https://github.com/verdaccio/verdaccio/commit/8c074e8f24e61e9c399bf4f2e6dbaa0d5d5da9fd))
-* **deps:** update dependency verdaccio-htpasswd to v10.0.1 ([#2711](https://github.com/verdaccio/verdaccio/issues/2711)) ([8e28848](https://github.com/verdaccio/verdaccio/commit/8e2884836b4d8a659ca1cec80794c7e30ef6c208))
-
-### [5.2.2](https://github.com/verdaccio/verdaccio/compare/v5.2.1...v5.2.2) (2021-11-08)
-
-
-### Bug Fixes
-
-* update python dependency on docker image ([#2644](https://github.com/verdaccio/verdaccio/issues/2644)) ([0eab3e1](https://github.com/verdaccio/verdaccio/commit/0eab3e1746e4479bc9baad0e74e10cb23f197f0e))
-
-### [5.2.1](https://github.com/verdaccio/verdaccio/compare/v5.2.0...v5.2.1) (2021-11-08)
-
-
-### Bug Fixes
-
-* **deps:** update dependency async to v3.2.2 ([#2633](https://github.com/verdaccio/verdaccio/issues/2633)) ([da5d7e9](https://github.com/verdaccio/verdaccio/commit/da5d7e96cbb05e0244347c39ae160e5008f85b8f))
-* **deps:** update dependency mime to v2.6.0 ([#2634](https://github.com/verdaccio/verdaccio/issues/2634)) ([089796c](https://github.com/verdaccio/verdaccio/commit/089796ca471af45def091736be5fcad54141f4e7))
-* **deps:** update dependency validator to v13.7.0 ([#2635](https://github.com/verdaccio/verdaccio/issues/2635)) ([ef2fbff](https://github.com/verdaccio/verdaccio/commit/ef2fbff7558a5417d13a44e32f2bdf90df7d480e))
-
-## [5.2.0](https://github.com/verdaccio/verdaccio/compare/v5.1.6...v5.2.0) (2021-10-24)
-
-
-### Features
-
-* upgrade node docker to 14.18.1 ([#2579](https://github.com/verdaccio/verdaccio/issues/2579)) ([247a317](https://github.com/verdaccio/verdaccio/commit/247a317ca025c3e52ffa5a7ca3f45e586714c70c))
-
-
-### Bug Fixes
-
-* **deps:** update dependency clipanion to v3.1.0 ([#2561](https://github.com/verdaccio/verdaccio/issues/2561)) ([6a78ae0](https://github.com/verdaccio/verdaccio/commit/6a78ae0045968715f158b55d17bae71612540800))
-* **deps:** update dependency dayjs to v1.10.7 ([#2565](https://github.com/verdaccio/verdaccio/issues/2565)) ([69091d1](https://github.com/verdaccio/verdaccio/commit/69091d15fbc7e1b479e02c47769237f2792926c8))
-* **deps:** update dependency pino to v6.13.3 ([#2562](https://github.com/verdaccio/verdaccio/issues/2562)) ([384b3e2](https://github.com/verdaccio/verdaccio/commit/384b3e2ce560cd513f2a20bf62f98a3f3051dccf))
-
-### [5.1.6](https://github.com/verdaccio/verdaccio/compare/v5.1.5...v5.1.6) (2021-09-21)
-
-
-### Bug Fixes
-
-* update dependencies security update ([#2453](https://github.com/verdaccio/verdaccio/issues/2453)) ([9d7ddd9](https://github.com/verdaccio/verdaccio/commit/9d7ddd9ecd4b69a0d0cb63eb72489ec7118c9d4f))
-
-### [5.1.5](https://github.com/verdaccio/verdaccio/compare/v5.1.4...v5.1.5) (2021-09-17)
-
-
-### Bug Fixes
-
-* add finish language to ui ([#2443](https://github.com/verdaccio/verdaccio/issues/2443)) ([360bec9](https://github.com/verdaccio/verdaccio/commit/360bec9b5315c0bc1c93ca36e1a1d8f808f0746c))
-
-### [5.1.4](https://github.com/verdaccio/verdaccio/compare/v5.1.3...v5.1.4) (2021-09-07)
-
-
-### Bug Fixes
-
-* npm7 audit fix and bulk endpoint ([#2426](https://github.com/verdaccio/verdaccio/issues/2426)) ([2c59091](https://github.com/verdaccio/verdaccio/commit/2c590917b10672da102b2352f6ff9c78f073763a))
-
-### [5.1.3](https://github.com/verdaccio/verdaccio/compare/v5.1.2...v5.1.3) (2021-08-20)
-
-
-### Bug Fixes
-
-* plugin allow_publish (pkg) got a undefined version ([#2315](https://github.com/verdaccio/verdaccio/issues/2315)) ([ecfc4c3](https://github.com/verdaccio/verdaccio/commit/ecfc4c33048a6f2cb1cef179fe9b0a11da389d26))
-* update docker and core dependencies ([#2375](https://github.com/verdaccio/verdaccio/issues/2375)) ([2e995f5](https://github.com/verdaccio/verdaccio/commit/2e995f5981c1a5eca6f43b14e52f06564acf6d8e))
-* update docker base image to v14.17.5 ([d63dcc0](https://github.com/verdaccio/verdaccio/commit/d63dcc02facddd8b6da2a32da067a6acf239e25d))
-
-### [5.1.2](https://github.com/verdaccio/verdaccio/compare/v5.1.1...v5.1.2) (2021-07-14)
-
-
-### Bug Fixes
-
-* remove token experiment flag ([#2332](https://github.com/verdaccio/verdaccio/issues/2332)) ([2924054](https://github.com/verdaccio/verdaccio/commit/29240544b16381c4eaaa04f80f09c89fc443fc6d))
-* update dependencies ([#2291](https://github.com/verdaccio/verdaccio/issues/2291)) ([b421ed8](https://github.com/verdaccio/verdaccio/commit/b421ed87c49535d14e8ed3d332300af58ad0b575))
-* update dependencies ([#2303](https://github.com/verdaccio/verdaccio/issues/2303)) ([4fe8ddf](https://github.com/verdaccio/verdaccio/commit/4fe8ddf7c705b27c362d96389dcade2534f323b4))
-* update dependencies ([#2333](https://github.com/verdaccio/verdaccio/issues/2333)) ([7180338](https://github.com/verdaccio/verdaccio/commit/7180338c447845bb494f0b34fe7e1a481fb5298d))
-* update docker base image node 14.17.1 ([#2314](https://github.com/verdaccio/verdaccio/issues/2314)) ([b8f711a](https://github.com/verdaccio/verdaccio/commit/b8f711afabc60b69cfaf9aef4fd4831680e17f13))
-* update docker base image node 14.17.3 ([2bc5908](https://github.com/verdaccio/verdaccio/commit/2bc590895c27e15e4f9cc0577fdc3a1308e97dd6))
-
-### [5.1.1](https://github.com/verdaccio/verdaccio/compare/v5.1.0...v5.1.1) (2021-06-12)
-
-
-### Bug Fixes
-
-* add logger fatal if fails on startup ([#2288](https://github.com/verdaccio/verdaccio/issues/2288)) ([558dd3f](https://github.com/verdaccio/verdaccio/commit/558dd3f3c631b58231b239c1b38a44b5174f9228)), closes [#2287](https://github.com/verdaccio/verdaccio/issues/2287)
-* improve get headers from request [#2190](https://github.com/verdaccio/verdaccio/issues/2190) ([#2271](https://github.com/verdaccio/verdaccio/issues/2271)) ([38ca095](https://github.com/verdaccio/verdaccio/commit/38ca095fb041c768c1ea85f4d922f808c124777c))
-
-## [5.1.0](https://github.com/verdaccio/verdaccio/compare/v5.0.4...v5.1.0) (2021-05-24)
-
-
-### Features
-
-* implement search v1 endpoint ([#2256](https://github.com/verdaccio/verdaccio/issues/2256)) ([251bd95](https://github.com/verdaccio/verdaccio/commit/251bd9537340e06e143fa1fec7739aacc265f318))
-* tarball url redirect ([#1688](https://github.com/verdaccio/verdaccio/issues/1688)) ([78d04cf](https://github.com/verdaccio/verdaccio/commit/78d04cf9f8b3071fe0f33b387cb08e01bfcf2d87))
-* update Node.js docker image 14.17.0 ([#2247](https://github.com/verdaccio/verdaccio/issues/2247)) ([4ed7286](https://github.com/verdaccio/verdaccio/commit/4ed7286bcb9b9fe296992e66c9323ac13d0abf50))
-
-
-### Bug Fixes
-
-* restore using local path web logo ([#2270](https://github.com/verdaccio/verdaccio/issues/2270)) ([8434cc5](https://github.com/verdaccio/verdaccio/commit/8434cc550f1687e63a8095189b845544e24028ab))
-* update core dependencies ([#2269](https://github.com/verdaccio/verdaccio/issues/2269)) ([1e4c900](https://github.com/verdaccio/verdaccio/commit/1e4c900dcb77700ef52faebe2d01ac4f70f45e42))
-
-### [5.0.4](https://github.com/verdaccio/verdaccio/compare/v5.0.3...v5.0.4) (2021-04-28)
-
-
-### Bug Fixes
-
-* scoped query support ([#2208](https://github.com/verdaccio/verdaccio/issues/2208)) ([01c5d2c](https://github.com/verdaccio/verdaccio/commit/01c5d2ca2735d52727e4bcde9e8bad639d8594c9))
-
-### [5.0.3](https://github.com/verdaccio/verdaccio/compare/v5.0.2...v5.0.3) (2021-04-27)
-
-
-### Bug Fixes
-
-* update @verdaccio/ui-theme ([#2207](https://github.com/verdaccio/verdaccio/issues/2207)) ([ced47d5](https://github.com/verdaccio/verdaccio/commit/ced47d56fcb577b88a2ee6914d9b738b157fd08d))
-
-### [5.0.2](https://github.com/verdaccio/verdaccio/compare/v5.0.1...v5.0.2) (2021-04-27)
-
-
-### Bug Fixes
-
-* incorrect sanity check for theme plugin ([#2205](https://github.com/verdaccio/verdaccio/issues/2205)) ([d8b62cf](https://github.com/verdaccio/verdaccio/commit/d8b62cff530b1be207278a319f1989d45f5815df))
-
-### [5.0.1](https://github.com/verdaccio/verdaccio/compare/v5.0.0...v5.0.1) (2021-04-10)
-
-
-### Bug Fixes
-
-* logo and favicon configuration ([#2180](https://github.com/verdaccio/verdaccio/issues/2180)) ([782dd1c](https://github.com/verdaccio/verdaccio/commit/782dd1ca93a1bd910b14c9e79910480fc6f86d36))
-
 ## [5.0.0](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.7...v5.0.0) (2021-04-09)
 
 

CONTRIBUTING.md

@@ -1,13 +1,345 @@
-# Contributing to Verdaccio
+# Contributing
 
-Full text for contributing can be read [here](https://verdaccio.org/community/contributing).
+> Any change matters, whatever the size, just do it.
 
-## Especifics for the branch 6.x
+We are happy that you are willing to contribute. For that reason, we
+have prepared these guidelines for you:
 
-The 6.x uses `yarn berry` with Plug and Play enabled, thus some advices are required for helping contributing:
+**Table of Contents**
 
-### Debugging Jest
+- [Contributing](#contributing)
+  - [How Do I Contribute?](#how-do-i-contribute)
+  - [Development Setup](#development-setup)
+    - [Building the project](#building-the-project)
+    - [Running test](#running-test)
+    - [Running and debugging](#running-and-debugging)
+    - [Debugging compiled code](#debugging-compiled-code)
+  - [Reporting Bugs](#reporting-bugs)
+    - [Read the documentation](#read-the-documentation)
+    - [What's is not considered a bug?](#whats-is-not-considered-a-bug)
+    - [Issue Search](#issue-search)
+    - [Chat](#chat)
+  - [Request Features](#request-features)
+  - [Contributing Guidelines](#contributing-guidelines)
+    - [Submitting a Pull Request](#submitting-a-pull-request)
+    - [Make Changes and Commit](#make-changes-and-commit)
+      - [Caveats](#caveats)
+      - [Before Commit](#before-commit)
+      - [Commit Guidelines](#commit-guidelines)
+    - [Adding a changeset](#adding-a-changeset)
+    - [Update Tests](#update-tests)
+  - [Develop Plugins](#develop-plugins)
+
+## How Do I Contribute?
+
+There are different ways to contribute, each comes with a different levels
+of tasks, such as:
+
+- Report a bug.
+- Request a feature you think would be great for verdaccio.
+- Fix bugs.
+- Test and triage reported bugs by others.
+- Work on requested/approved features.
+- Improve the codebase (lint, naming, comments, test descriptions, etc...)
+
+Verdaccio has several areas of involvement, which might fit you better, eg:
+
+- **Core**: The [core](https://github.com/verdaccio/verdaccio) is the main repository, built with **Node.js**.
+- **Website**: we uses **Gatsby.js** for the **website** and if you are familiar with this technology, you might become the official webmaster.
+- **User Interface**: The [user Interface](https://github.com/verdaccio/ui) is based in **react** and **material-ui** and looking for front-end contributors.
+- **Kubernetes and Helm**: Ts the official repository for the [**Helm chart**](https://github.com/verdaccio/charts).
+
+> There are other areas to contribute, like documentation, translation which are not hosted on this repo but check the last section of this notes for further information.
+
+## Development Setup
+
+Verdaccio uses [_pnpm_](https://pnpm.js.org/) as package manager for development in this repository. Please install the latest one:
+
+```
+npm i -g pnpm
+```
+
+First step is installing all dependencies:
+
+```
+pnpm install
+```
+
+### Building the project
+
+To build the project run
+
+```
+pnpm build
+```
+
+### Running test
+
+```
+pnpm test
+```
+
+Verdaccio is a mono repository, for running an specific test or package go the specific package eg:
+
+```
+cd packages/store
+pnpm test
+```
+
+or an specific test in that package
+
+```
+pnpm test test/merge.dist.tags.spec.ts
+```
+
+or a single test unit
+
+```
+pnpm test test/merge.dist.tags.spec.ts -- -t 'simple'
+```
+
+The coverage is enabled by default, to speed up test running
+
+```
+pnpm test test/merge.dist.tags.spec.ts -- -t 'simple' --coverage=false
+```
+
+To increase debug output, we use `debug`, to enable it in your test just add
+
+```
+DEBUG=verdaccio* pnpm test
+```
+
+More details in the debug section
+
+### Running and debugging
+
+We uses [`debug`](https://www.npmjs.com/package/debug) for debug outcome. Each package has it owns namespace.
+
+### Debugging compiled code
+
+Currently you can only run in debug mode pre-compiled packages, to enable debug while running add the `verdaccio` namespace using the `DEBUG` environment variable, like this:
+
+```
+DEBUG=verdaccio:* node packages/verdaccio/debug/bootstrap.js
+```
+
+On this way can be reviewed every package, but if you need to filter out and display more specific output, increase the name space filter.
+
+```
+DEBUG=verdaccio:plugin:* node packages/verdaccio/debug/bootstrap.js
+```
+
+The debug code is intended to analyze what is happening under the hood and none of the output is gathered with the logger module.
+
+## Reporting Bugs
+
+**Bugs are considered features that are not working as described in documentation.**
+
+If you've found a bug in Verdaccio **that isn't a security risk**, please file
+a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
+
+> **NOTE: Verdaccio still does not support all npm commands. Some were not
+> considered important and others have not been requested yet.**
+
+### Read the documentation
+
+Check whether you are using the software in the way is documented [documentation](http://www.verdaccio.org/docs/en/installation.html).
+
+### What's is not considered a bug?
+
+- _Third party integrations_: proxies integrations, external plugins.
+- _Package managers_: If a package manager does not support a specific command or cannot be reproduced with another package manager.
+- _Features clearly flagged as not supported_.
+- _Node.js issues installation in any platform_: If you cannot install the global package ( this is considered external issue)
+- Any ticket which has the flagged as [external issue](https://github.com/verdaccio/verdaccio/labels/external-issue).
+
+If you intent to report a **security** issue, please follow our [Security policy guidelines](https://github.com/verdaccio/verdaccio/security/policy).
+
+### Issue Search
+
+Before consider report a bug, please follow this steps before:
+
+- Search if has already been reported via the issue search.
+- Look for the **question** label: we have labelled questions for easy follow-up as [questions](https://github.com/verdaccio/verdaccio/labels/question).
+
+In case any of those match with your search, up-vote it (using GitHub reactions) or add additional helpful details to the existing issue to show that it's affecting multiple people.
+
+### Chat
+
+Questions can be asked via [Discord](http://chat.verdaccio.org/)
+
+**Please use the `#help` channel.**
+
+## Request Features
+
+New feature requests are welcome. Analyse whether the idea fits within scope of
+the project. Then, detail your request, ensuring context and use case is provided.
+
+**Please provide:**
+
+- A detailed description the advantages of your request
+- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_](https://github.com/yarnpkg/yarn) or [_yarn berry_](https://github.com/yarnpkg/berry).
+- A potential implementation or design
+- Whatever else you have in your mind 🤓
+
+## Contributing Guidelines
+
+This is the most exciting part, when you became a Verdaccio contributor 🙌🏼, to ensure a fast code review and merge, please follow the next guidelines:
+
+> Any contribution gives you the right to be part of this organization as _collaborator_.
+
+### Submitting a Pull Request
+
+The following are the steps you should follow when creating a pull request.
+Subsequent pull requests only need to follow step 3 and beyond.
+
+1. Fork the repository on GitHub
+2. Clone the forked repository to your machine
+3. Make your changes and commit them to your local repository
+4. Rebase and push your commits to your GitHub remote fork/repository
+5. Issue a Pull Request to the official repository
+6. Your Pull Request is reviewed by a committer and merged into the repository
+
+**NOTE**: While there are other ways to accomplish the steps using other tools,
+the examples here will assume most actions will be performed via `git` on
+command line.
+
+For more information on maintaining a fork, please see the GitHub Help article
+titled [Fork a Repo](https://help.github.com/articles/fork-a-repo/), and
+information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing).
+
+### Make Changes and Commit
+
+#### Caveats
+
+Feel free to commit as much times you want in your branch, but keep on mind on this repository we `git squash` on merge by default, any other way is forbidden since we intent to have a clean git history.
+
+#### Before Commit
+
+Before committing, **you must ensure there are no linting errors and
+all tests pass.**
+
+To do this, run these commands before create the PR:
 
 ```bash
-yarn node --inspect-brk --expose-gc $(yarn bin jest) test --runInBand --silent --logHeapUsage test/unit/modules/api/publish.spec.ts
+pnpm lint
+pnpm format
+pnpm build
+pnpm test
 ```
+
+> note: eslint and formatting are running separately, keep code formatting before push.
+
+All good? perfect, then you should create the pull request.
+
+#### Commit Guidelines
+
+For example:
+
+- `feat: A new feature`
+- `fix: A bug fix`
+
+A commit of the type feat introduces a new feature to the codebase
+(this correlates with MINOR in semantic versioning).
+
+e.g.:
+
+```
+feat: xxxxxxxxxx
+```
+
+A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
+
+e.g.:
+
+```
+fix: xxxxxxxxxxx
+```
+
+Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
+and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
+
+All commits message are going to be validated when they are created using husky hooks.
+
+> Please, try to provide one single commit to help a clean and easy merge process.
+
+### Adding a changeset
+
+We use [changesets](https://github.com/atlassian/changesets) in order to generate a detailed Changelog as possible.
+
+Add a changeset with your Pull Request is essential if you want your contribution get merged (unless is a change that does not affect library functionality, eg: typo, docs, readme, add additional test or linting code). To create a changeset please run:
+
+```
+pnpm changeset
+```
+
+Then select the packages you want to include in your changeset navigating through them and press the spacebar to check it, on finish press enter to move to the next step.
+
+```
+🦋  Which packages would you like to include? …
+✔ changed packages
+ changed packages
+  ✔ @verdaccio/api
+  ✔ @verdaccio/auth
+  ✔ @verdaccio/cli
+  ✔ @verdaccio/config
+  ✔ @verdaccio/commons-api
+```
+
+The next question would be if you want a _major bump_, this is not the usual scenario, most likely would be a patch, in that case press enter 2 times (to skip minor)
+
+```
+🦋  Which packages should have a major bump? …
+✔ all packages
+  ✔ @verdaccio/config@5.0.0-alpha.0
+```
+
+Once the desired bump you need, the CLI will ask for a summary, here you have fully freedom what to include.
+
+```
+🦋  Which packages would you like to include? · @verdaccio/config
+🦋  Which packages should have a major bump? · No items were selected
+🦋  Which packages should have a minor bump? · No items were selected
+🦋  The following packages will be patch bumped:
+🦋  @verdaccio/config@5.0.0-alpha.0
+🦋  Please enter a summary for this change (this will be in the changelogs). Submit empty line to open external editor
+🦋  Summary ›
+```
+
+The last step is confirm your changeset or abort the operation.
+
+```
+🦋  Is this your desired changeset? (Y/n) · true
+🦋  Changeset added! - you can now commit it
+🦋
+🦋  If you want to modify or expand on the changeset summary, you can find it here
+🦋  info /Users/user/verdaccio.clone/.changeset/light-scissors-smell.md
+```
+
+Once the changeset is added (all will have an unique name) you can freely edit using markdown, adding additional information, code snippets or what you consider is relevant.
+
+All that information will be part of the **changelog**, be concise but informative. It is considered a good option to add your nickname and GitHub link to your profile.
+
+**PRs that do not follow the commit message guidelines will not be merged.**
+
+### Update Tests
+
+**Any change in source code must include test updates**.
+
+If you need help with how testing works, please [refer to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
+
+**If you are introducing new features, you MUST include new tests. PRs for
+features without tests will not be merged.**
+
+## Develop Plugins
+
+Plugins are add-ons that extend the functionality of the application.
+
+If you want to develop your own plugin:
+
+1. Check whether there is a legacy Sinopia plugin for the feature that you need
+   via [npmjs](https://www.npmjs.com/search?q=sinopia)
+2. Keep in mind the [life-cycle to load a plugin](https://verdaccio.org/docs/en/dev-plugins)
+3. You are free to host your plugin in your repository
+4. Provide a detailed description of your plugin to help users understand how to use it.

CONTRIBUTORS.md

@@ -1,5 +1,4 @@
 <!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
-<!-- prettier-ignore-start -->
 <!-- markdownlint-disable -->
 <table>
   <tr>
@@ -37,5 +36,4 @@
 </table>
 
 <!-- markdownlint-enable -->
-<!-- prettier-ignore-end -->
 <!-- ALL-CONTRIBUTORS-LIST:END -->

Dockerfile

@@ -1,37 +1,25 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:22.13.1-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder
 
-ENV NODE_ENV=production \
-    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org  \
-    HUSKY_SKIP_INSTALL=1 \
-    CI=true \
-    HUSKY_DEBUG=1
+ENV NODE_ENV=development \
+    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
 
-RUN apk add --force-overwrite && \
-    apk --no-cache add openssl ca-certificates wget && \
-    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python3 && \
+RUN apk --no-cache add openssl ca-certificates wget && \
+    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
     wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
-    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.35-r0/glibc-2.35-r0.apk && \
-    apk add --force-overwrite glibc-2.35-r0.apk
+    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
+    apk add glibc-2.25-r0.apk
 
 WORKDIR /opt/verdaccio-build
 COPY . .
 
-## build the project and create a tarball of the project for later
-## global installation
-RUN yarn config set npmRegistryServer $VERDACCIO_BUILD_REGISTRY && \
-    yarn config set enableProgressBars true && \
-    yarn config set enableScripts false && \
-    yarn install --immutable && \
-    yarn build
-    
-## pack the project
-RUN yarn pack --out verdaccio.tgz \
-    && mkdir -p /opt/tarball \
-    && mv /opt/verdaccio-build/verdaccio.tgz /opt/tarball
-## clean up and reduce bundle size
-RUN rm -Rf /opt/verdaccio-build
+RUN npm -g i pnpm@latest && \
+    pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
+    pnpm recursive install --frozen-lockfile --ignore-scripts && \
+    pnpm run build
+# FIXME: need to remove devDependencies from the build
+# RUN pnpm install --prod --ignore-scripts
 
-FROM node:22.13.1-alpine
+FROM node:14.16.1-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \
@@ -42,63 +30,28 @@ ENV VERDACCIO_APPDIR=/opt/verdaccio \
 ENV PATH=$VERDACCIO_APPDIR/docker-bin:$PATH \
     HOME=$VERDACCIO_APPDIR
 
-# yarn version included in [`node:alpine` Docker image](https://github.com/nodejs/docker-node/blob/b3d8cc15338c545a4328286b2df806b511e2b31b/22/alpine3.21/Dockerfile#L81)
-ENV YARN_VERSION=1.22.22
-
 WORKDIR $VERDACCIO_APPDIR
 
-# https://github.com/Yelp/dumb-init
 RUN apk --no-cache add openssl dumb-init
 
 RUN mkdir -p /verdaccio/storage /verdaccio/plugins /verdaccio/conf
 
-COPY --from=builder /opt/tarball .
+COPY --from=builder /opt/verdaccio-build .
 
-USER root
-# install verdaccio as a global package so is fully handled by npm
-# ensure none dependency is being missing and is prod by default
-RUN npm install -g $VERDACCIO_APPDIR/verdaccio.tgz \
-    # copy default config file
-    && cp /usr/local/lib/node_modules/verdaccio/node_modules/@verdaccio/config/build/conf/docker.yaml /verdaccio/conf/config.yaml \
-    ## clean up cache
-    && npm cache clean --force \
-    && rm -Rf .npm/ \
-    && rm $VERDACCIO_APPDIR/verdaccio.tgz \
-    # yarn is not need it after this step
-    # Also remove the symlinks added in the [`node:alpine` Docker image](https://github.com/nodejs/docker-node/blob/b3d8cc15338c545a4328286b2df806b511e2b31b/22/alpine3.21/Dockerfile#L99-L100).
-    && rm -Rf /opt/yarn-v$YARN_VERSION/ /usr/local/bin/yarn /usr/local/bin/yarnpkg
+RUN ls packages/config/src/conf
+ADD packages/config/src/conf/docker.yaml /verdaccio/conf/config.yaml
 
-ADD docker-bin $VERDACCIO_APPDIR/docker-bin
-
-# Create a non-root system user for running Verdaccio securely
-# - Uses custom UID from $VERDACCIO_USER_UID
-# - Sets home directory to $VERDACCIO_APPDIR
-# - Assigns a shell of /sbin/nologin to prevent login access
 RUN adduser -u $VERDACCIO_USER_UID -S -D -h $VERDACCIO_APPDIR -g "$VERDACCIO_USER_NAME user" -s /sbin/nologin $VERDACCIO_USER_NAME && \
-    # Ensure Verdaccio's CLI entry points and custom docker binaries are executable    
-    chmod -R +x /usr/local/lib/node_modules/verdaccio/bin/verdaccio $VERDACCIO_APPDIR/docker-bin && \
-    # Give ownership of critical runtime folders to the Verdaccio user
-    chown -R $VERDACCIO_USER_UID:root /verdaccio/storage /verdaccio/conf && \
-    # Allow group access to config and storage so other containers (e.g., volumes or init containers) can read/write if needed
-    chmod -R g=u /verdaccio/storage /verdaccio/conf /etc/passwd
+    chmod -R +x $VERDACCIO_APPDIR/packages/verdaccio/bin $VERDACCIO_APPDIR/docker-bin && \
+    chown -R $VERDACCIO_USER_UID:root /verdaccio/storage && \
+    chmod -R g=u /verdaccio/storage /etc/passwd
 
-# Switch to the non-root Verdaccio user by UID for improved security
-# This ensures all following operations (including `CMD`) run as an unprivileged user    
 USER $VERDACCIO_USER_UID
 
-# Expose Verdaccio's listening port (default: 4873) to the host
-# This does not publish the port — that's handled at runtime with `-p` or `--publish`
 EXPOSE $VERDACCIO_PORT
 
-# Declare the storage directory as a Docker volume
-# This allows data (packages, logs, etc.) to persist outside the container lifecycle
 VOLUME /verdaccio/storage
 
-# Set the entrypoint script
-# - Used to adjust UID/GID dynamically in runtime (e.g. OpenShift)
-# - Keeps CMD intact and allows passing custom commands
 ENTRYPOINT ["uid_entrypoint"]
 
-# Default command to start Verdaccio using the custom config
-# - Uses environment variables for protocol and port binding
-CMD verdaccio --config /verdaccio/conf/config.yaml --listen $VERDACCIO_PROTOCOL://0.0.0.0:$VERDACCIO_PORT
+CMD $VERDACCIO_APPDIR/packages/verdaccio/bin/verdaccio --config /verdaccio/conf/config.yaml --listen $VERDACCIO_PROTOCOL://0.0.0.0:$VERDACCIO_PORT

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023 Verdaccio contributors
+Copyright (c) 2021 Verdaccio contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -2,7 +2,9 @@
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version 6
+# Version 6 (Development branch)
+
+> Looking for Verdaccio 5? Check branch `5.x`.
 
 [Verdaccio](https://verdaccio.org/) is a simple, **zero-config-required local private npm registry**.
 No need for an entire database just to get started! Verdaccio comes out of the box with
@@ -16,72 +18,30 @@ Google Cloud Storage** or create your own plugin.
 [![verdaccio (downloads)](https://img.shields.io/npm/dy/verdaccio.svg)](https://www.npmjs.com/package/verdaccio)
 [![docker pulls](https://img.shields.io/docker/pulls/verdaccio/verdaccio.svg?maxAge=43200)](https://verdaccio.org/docs/en/docker.html)
 [![backers](https://opencollective.com/verdaccio/tiers/backer/badge.svg?label=Backer&color=brightgreen)](https://opencollective.com/verdaccio)
+[![stackshare](https://img.shields.io/badge/Follow%20on-StackShare-blue.svg?logo=stackshare&style=flat)](https://stackshare.io/verdaccio)
 
-[![discord](https://img.shields.io/discord/388674437219745793.svg)](https://discord.gg/7qWJxBf)
+[![discord](https://img.shields.io/discord/388674437219745793.svg)](http://chat.verdaccio.org/)
 [![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
 
+[![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
-[![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
 ## Install
 
 Install with npm:
 
 ```bash
-npm install --global verdaccio
+npm install --global verdaccio@6-next --registry https://registry.verdaccio.org/
 ```
 
-**Node.js v18 or higher is required for Verdaccio**
-
-> It's recommended using Node.js 20 (or latest LTS)
-
-or pull [Docker official image](https://verdaccio.org/docs/docker)
-
-```bash
-docker pull verdaccio/verdaccio
-```
-
-and run
-
-```bash
-docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio
-```
-
-or with _helm_ [official chart](https://github.com/verdaccio/charts).
-
-```bash
-helm repo add verdaccio https://charts.verdaccio.org
-helm repo update
-helm install verdaccio/verdaccio
-```
-
-## Programmatic API
-
-Verdaccio can be used as a module for launch a server programmatically, [you can find more info at the website](https://verdaccio.org/docs/verdaccio-programmatically#using-the-module-api).
-
-```
- import {runServer} from 'verdaccio';
- 
- const app = await runServer(); // default configuration
- const app = await runServer('./config/config.yaml');
- const app = await runServer({ configuration });
- app.listen(4873, (event) => {
-   // do something
- });
-```
-
-## Plugins
-
-You can develop your own [plugins](https://verdaccio.org/docs/plugins) with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin). Installing [Yeoman](https://yeoman.io/) is required.
-
-Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.
+> Published on a temporary registry while setup is ready to publish on npmjs
 
 ## Donations
 
-Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development and maintenance.
+Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider making a donation - **your logo might end up in this readme.** 😉
 
-You can donate at **[Open Collective](https://opencollective.com/verdaccio)** 💵👍🏻 starting from _$1/month_ or just one single contribution.
+**[Donate](https://github.com/sponsors/verdaccio)** 💵👍🏻 starting from _$1/month_ or just one single contribution.
 
 ## What does Verdaccio do for me?
 
@@ -105,21 +65,21 @@ If you want to use a modified version of some 3rd-party package (for example, yo
 ### E2E Testing
 
 Verdaccio has proved to be a lightweight registry that can be
-booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **babel.js**, **angular-cli** or **docusaurus**. You can read more in [here](https://verdaccio.org/docs/e2e).
-
-Furthermore, here few examples how to start:
-
-- [e2e-ci-example-gh-actions](https://github.com/juanpicado/e2e-ci-example-gh-actions)
-- [verdaccio-end-to-end-tests](https://github.com/juanpicado/verdaccio-end-to-end-tests)
-- [verdaccio-fork](https://github.com/juanpicado/verdaccio-fork)
+booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **alfresco** or **eclipse theia**. You can read more in dedicated article to E2E in our blog.
 
 ## Talks
 
-- [**NodeTLV 20222** - Deep dive into Verdaccio, a lightweight Node.js registry - **Juan Picado**](https://portal.gitnation.org/contents/five-ways-of-taking-advantage-of-verdaccio-your-private-and-proxy-nodejs-registry)
-- [Five Ways of Taking Advantage of Verdaccio, Your Private and Proxy Node.js Registry **Node Congress 2022** - **Juan Picado**](https://portal.gitnation.org/contents/five-ways-of-taking-advantage-of-verdaccio-your-private-and-proxy-nodejs-registry)
-- [Using Docker and Verdaccio to make Integration Testing Easy - **Docker All Hands #4 December - 2021** - **Juan Picado**](https://www.youtube.com/watch?v=zRI0skF1f8I)
+### **Node.js Dependency Confusion Attacks**.
 
-[View more in the YouTube channel](https://www.youtube.com/channel/UC5i20v6o7lSjXzAHOvatt0w).
+[![verdaccio Node.js Dependency Confusion Attacks](https://cdn.verdaccio.dev/readme/devseccon.png)](https://www.youtube.com/watch?v=qTRADSp3Hpo)
+
+You might want to check out as well our previous talks:
+
+- [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado\***](https://www.youtube.com/watch?v=oVCjDWeehAQ)
+- [ViennaJS Meetup - Introduction to Verdaccio by **Priscila Olivera** and **Juan Picado**](https://www.youtube.com/watch?v=hDIFKzmoCa)
+- [Open Source? trivago - Verdaccio (**Ayush** and **Juan Picado**) January 2020](https://www.youtube.com/watch?v=A5CWxJC9xzc)
+- [GitNation Open Source Stage - How we have built a Node.js Registry with React - **Juan Picado** December 2019](https://www.youtube.com/watch?v=gpjC8Qp9B9A)
+- [Verdaccio - A lightweight Private Proxy Registry built in Node.js | **Juan Picado** at The Destro Dev Show](https://www.youtube.com/watch?reload=9&v=P_hxy7W-IL4&ab_channel=TheDestroDevShow)
 
 ## Get Started
 
@@ -173,15 +133,11 @@ Below are the most commonly needed information,
 every aspect of Docker and verdaccio is [documented separately](https://www.verdaccio.org/docs/en/docker.html)
 
 ```
-docker pull verdaccio/verdaccio
+docker pull verdaccio/verdaccio:nightly-master
 ```
 
 Available as [tags](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
 
-```
-docker pull verdaccio/verdaccio:6.x-next
-```
-
 ### Running verdaccio using Docker
 
 To run the docker container:
@@ -198,27 +154,27 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 ### Basic features
 
-- Installing packages (`npm install`, `npm upgrade`, etc.) - **supported**
-- Publishing packages (`npm publish`) - **supported**
+- Installing packages (npm install, npm upgrade, etc.) - **supported**
+- Publishing packages (npm publish) - **supported**
 
 ### Advanced package control
 
-- Unpublishing packages (`npm unpublish`) - **supported**
-- Tagging (`npm tag`) - **supported**
-- Deprecation (`npm deprecate`) - **supported**
+- Unpublishing packages (npm unpublish) - **supported**
+- Tagging (npm tag) - **supported**
+- Deprecation (npm deprecate) - **supported**
 
 ### User management
 
-- Registering new users (`npm adduser {newuser}`) - **supported**
-- Change password (`npm profile set password`) - **supported**
-- Transferring ownership (`npm owner add {user} {pkg}`) - not supported, _PR-welcome_
-- Token (`npm token`) - **supported** (under flag)
+- Registering new users (npm adduser {newuser}) - **supported**
+- Change password (npm profile set password) - **supported**
+- Transferring ownership (npm owner add {user} {pkg}) - not supported, _PR-welcome_
+- Token (npm token) - **supported**
 
 ### Miscellany
 
-- Search (`npm search`) - **supported** (cli (`/-/all` and `v1`) / browser)
-- Ping (`npm ping`) - **supported**
-- Starring (`npm star`, `npm unstar`, `npm stars`) - **supported**
+- Searching (npm search) - **supported** (cli / browser)
+- Ping (npm ping) - **supported**
+- Starring (npm star, npm unstar, npm stars) - **supported**
 
 ### Security
 
@@ -228,17 +184,53 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 If you want to report a security vulnerability, please follow the steps which we have defined for you in our [security policy](https://github.com/verdaccio/verdaccio/security/policy).
 
-## Contributors
+## Core Team
 
-| [Juan Picado](https://github.com/juanpicado)                                  | [Ayush Sharma](https://github.com/ayusharma)                            | [Sergio Hg](https://github.com/sergiohgz)                                |
-| ----------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------------------------ |
-| ![jotadeveloper](https://avatars3.githubusercontent.com/u/558752?s=80&v=4)    | ![ayusharma](https://avatars2.githubusercontent.com/u/6918450?s=80&v=4) | ![sergiohgz](https://avatars2.githubusercontent.com/u/14012309?s=80&v=4) |
-| [@jotadeveloper](https://fosstodon.org/@jotadeveloper)                        | [@ayusharma\_](https://twitter.com/ayusharma_)                          | [@sergiohgz](https://twitter.com/sergiohgz)                              |
-| [Priscila Oliveria](https://github.com/priscilawebdev)                        | [Daniel Ruf](https://github.com/DanielRuf)                              |
-| ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=80&v=4) | ![DanielRuf](https://avatars3.githubusercontent.com/u/827205?s=80&v=4)  |
-| [@priscilawebdev](https://twitter.com/priscilawebdev)                         | [@DanielRufde](https://twitter.com/DanielRufde)                         |
+| [Juan Picado](https://github.com/juanpicado)                                   | [Ayush Sharma](https://github.com/ayusharma)                             | [Sergio Hg](https://github.com/sergiohgz)                                 |
+| ------------------------------------------------------------------------------ | ------------------------------------------------------------------------ | ------------------------------------------------------------------------- |
+| ![jotadeveloper](https://avatars3.githubusercontent.com/u/558752?s=120&v=4)    | ![ayusharma](https://avatars2.githubusercontent.com/u/6918450?s=120&v=4) | ![sergiohgz](https://avatars2.githubusercontent.com/u/14012309?s=120&v=4) |
+| [@jotadeveloper](https://twitter.com/jotadeveloper)                            | [@ayusharma\_](https://twitter.com/ayusharma_)                           | [@sergiohgz](https://twitter.com/sergiohgz)                               |
+| [Priscila Oliveria](https://github.com/priscilawebdev)                         | [Daniel Ruf](https://github.com/DanielRuf)                               |
+| ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=120&v=4) | ![DanielRuf](https://avatars3.githubusercontent.com/u/827205?s=120&v=4)  |
+| [@priscilawebdev](https://twitter.com/priscilawebdev)                          | [@DanielRufde](https://twitter.com/DanielRufde)                          |
 
-[See the full list of contributors is at the website.](https://verdaccio.org/contributors)
+You can find and chat with then over Discord, click [here](http://chat.verdaccio.org) or follow them at _Twitter_.
+
+## Who is using Verdaccio?
+
+- [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#customizing-e2e-registry-configuration) _(+86.2k ⭐️)_
+- [Gatsby](https://github.com/gatsbyjs/gatsby) _(+49.2k ⭐️)_
+- [Babel.js](https://github.com/babel/babel) _(+38.5k ⭐️)_
+- [Vue CLI](https://github.com/vuejs/vue-cli) _(+27.4k ⭐️)_
+- [Angular CLI](https://github.com/angular/angular-cli) _(+24.3k ⭐️)_
+- [Uppy](https://github.com/transloadit/uppy) _(+23.8k ⭐️)_
+- [bit](https://github.com/teambit/bit) _(+13k ⭐️)_
+- [Aurelia Framework](https://github.com/aurelia/framework) _(+11.6k ⭐️)_
+- [pnpm](https://github.com/pnpm/pnpm) _(+10.1k ⭐️)_
+- [ethereum/web3.js](https://github.com/ethereum/web3.js) _(+9.8k ⭐️)_
+- [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
+- [webiny-js](https://github.com/webiny/webiny-js) _(+4.3k ⭐️)_
+- [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
+- [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
+- [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
+- [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)
+
+🤓 Don't be shy, you also can be in [the list](https://github.com/verdaccio/website/blob/master/docs/who-is-using.md).
+
+## Open Collective Sponsors
+
+Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/verdaccio#sponsor)]
+
+[![sponsor](https://opencollective.com/verdaccio/sponsor/0/avatar.svg)](https://opencollective.com/verdaccio/sponsor/0/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/1/avatar.svg)](https://opencollective.com/verdaccio/sponsor/1/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/2/avatar.svg)](https://opencollective.com/verdaccio/sponsor/2/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/3/avatar.svg)](https://opencollective.com/verdaccio/sponsor/3/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/4/avatar.svg)](https://opencollective.com/verdaccio/sponsor/4/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/5/avatar.svg)](https://opencollective.com/verdaccio/sponsor/5/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/6/avatar.svg)](https://opencollective.com/verdaccio/sponsor/6/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/7/avatar.svg)](https://opencollective.com/verdaccio/sponsor/7/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/8/avatar.svg)](https://opencollective.com/verdaccio/sponsor/8/website)
+[![sponsor](https://opencollective.com/verdaccio/sponsor/9/avatar.svg)](https://opencollective.com/verdaccio/sponsor/9/website)
 
 ## Open Collective Backers
 
@@ -248,16 +240,13 @@ Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com
 
 ## Special Thanks
 
-Thanks to the following companies to help us to achieve our goals providing free open source licenses. Every company provides enough resources to move this project forward.
+Thanks to the following companies to help us to achieve our goals providing free open source licenses.
 
-| Company      | Logo                                                                                                                            | License                                                                           |
-| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
-| JetBrains    | [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)                                                     | JetBrains provides licenses for products for active maintainers, renewable yearly |
-| Crowdin      | [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)                                                              | Crowdin provides platform for translations                                        |
-| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                        | BrowserStack provides plan to run End to End testing for the UI                   |
-| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                      | Netlify provides pro plan for website deployment                                  |
-| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                     | Algolia provides search services for the website                                  |
-| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application) | Docker offers unlimited pulls and unlimited egress to any and all users           |
+[![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)
+[![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)
+[![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)
+
+Verdaccio also is part of to the [Docker Open Source Program](https://www.docker.com/blog/expanded-support-for-open-source-software-projects/).
 
 ## Contributors
 
@@ -270,10 +259,10 @@ This project exists thanks to all the people who contribute. [[Contribute](CONTR
 If you have any issue you can try the following options, do no desist to ask or check our issues database, perhaps someone has asked already what you are looking for.
 
 - [Blog](https://verdaccio.org/blog/)
-- [Donations](https://opencollective.com/verdaccio)
+- [Donations](https://github.com/sponsors/verdaccio)
 - [Reporting an issue](https://github.com/verdaccio/verdaccio/issues/new/choose)
 - [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
-- [Chat](https://discord.gg/7qWJxBf)
+- [Chat](http://chat.verdaccio.org/)
 - [Logos](https://verdaccio.org/docs/en/logo)
 - [Docker Examples](https://github.com/verdaccio/verdaccio/tree/master/docker-examples)
 - [FAQ](https://github.com/verdaccio/verdaccio/discussions/categories/q-a)

SECURITY.md

@@ -1,5 +1,77 @@
 # Security Policy
 
-For the latest version of the security policy, please refer to the official page:
+## Supported versions
 
-[Verdaccio Security Policy](https://github.com/verdaccio/verdaccio/blob/master/SECURITY.md)
+The following table describes the versions of this project that are currently supported with security updates:
+
+| Version   | Supported                                |
+| --------- | ---------------------------------------- |
+| 2.x       | :x:                                      |
+| 3.x       | :x:                                      |
+| 4.x       | :white_check_mark: (until 1st July 2021) |
+| 5.x       | :white_check_mark:                       |
+| 6.x alpha | :x:                                      |
+
+## Responsible disclosure security policy
+
+A responsible disclosure policy helps protect users of the project from publicly disclosed security vulnerabilities without a fix by employing a process where vulnerabilities are first triaged in a private manner, and only publicly disclosed after a reasonable time period that allows patching the vulnerability and provides an upgrade path for users.
+
+When contacting us directly via email, we will do our best efforts to respond in a reasonable time to resolve the issue. When contacting a security program their disclosure policy will provide details on timeframe, processes and paid bounties.
+
+We kindly ask you to refrain from malicious acts that put our users, the project, or any of the project’s team members at risk.
+
+## Reporting a security issue
+
+> Please do not use the provided email address to report issues which are not related to security vulnerabilities
+
+At Verdaccio, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present.
+
+If you discover a security vulnerability, please use one of the following means of communications to report it to us:
+
+- Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
+
+Note that time-frame and processes are subject to each program’s own policy.
+
+- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
+
+Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
+
+## PGP key
+
+The following is this project’s PGP key which should be used to encrypt any sensitive information shared on unsecured medium such as e-mails:
+
+```
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: OpenPGP.js v4.5.1
+Comment: https://openpgpjs.org
+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+=QWXs
+-----END PGP PUBLIC KEY BLOCK-----
+```