chore: update versions (6-next) (#2456)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -1,245 +0,0 @@
-{
-  "projectName": "verdaccio",
-  "projectOwner": "verdaccio",
-  "repoType": "github",
-  "repoHost": "https://github.com",
-  "commitConvention": "none",
-  "files": [
-    "CONTRIBUTORS.md"
-  ],
-  "contributors": [
-    {
-      "login": "juanpicado",
-      "name": "Juan Picado",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
-      "profile": "https://www.linkedin.com/in/jotadeveloper/",
-      "contributions": [
-        "doc",
-        "code",
-        "infra",
-        "eventOrganizing",
-        "blog",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "sergiohgz",
-      "name": "Sergio Herrera",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
-      "profile": "https://github.com/sergiohgz",
-      "contributions": [
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "DanielRuf",
-      "name": "Daniel Ruf",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
-      "profile": "https://daniel-ruf.de/",
-      "contributions": [
-        "security",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "priscilawebdev",
-      "name": "Priscila Oliveira",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
-      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
-      "contributions": [
-        "design",
-        "code",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "ayusharma",
-      "name": "Ayush Sharma",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
-      "profile": "http://ayusharma.github.io/",
-      "contributions": [
-        "infra",
-        "code",
-        "design"
-      ]
-    },
-    {
-      "login": "trentearl",
-      "name": "Trent Earl",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
-      "profile": "https://github.com/trentearl",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jmwilkinson",
-      "name": "jmwilkinson",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
-      "profile": "https://github.com/jmwilkinson",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "bufferoverflow",
-      "name": "Roger Meier",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
-      "profile": "https://github.com/bufferoverflow",
-      "contributions": [
-        "plugin"
-      ]
-    },
-    {
-      "login": "jamesgeorge007",
-      "name": "James George",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
-      "profile": "https://ghuser.io/jamesgeorge007",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "AvailCat",
-      "name": "AvailCat",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
-      "profile": "https://github.com/AvailCat",
-      "contributions": [
-        "code",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "lgaitan",
-      "name": "Lucius Gaitán",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
-      "profile": "https://www.luciusgaitan.com/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ramonornela",
-      "name": "Ramon Henrique Ornelas",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
-      "profile": "https://github.com/ramonornela",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "UnitedMarsupials-zz",
-      "name": "UnitedMarsupials-zz",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
-      "profile": "https://people.freebsd.org/~mi/resume/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ryan-codingintrigue",
-      "name": "Ryan Graham",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
-      "profile": "http://www.codingintrigue.co.uk/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "coolsp",
-      "name": "coolsp",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
-      "profile": "https://github.com/coolsp",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ashishsurana",
-      "name": "Ashish Surana",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
-      "profile": "http://ashishsurana.in/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "buffaybu",
-      "name": "Wang Yifei",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
-      "profile": "https://github.com/buffaybu",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "lirantal",
-      "name": "Liran Tal",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
-      "profile": "https://twitter.com/liran_tal",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "brenordr",
-      "name": "Breno Rodrigues",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
-      "profile": "https://github.com/brenordr",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jachstet-sea",
-      "name": "jachstet-sea",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
-      "profile": "https://github.com/jachstet-sea",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "Vrtak-CZ",
-      "name": "Patrik Votoček",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
-      "profile": "https://patrik.votocek.cz/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "monkeywithacupcake",
-      "name": "jess",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
-      "profile": "https://github.com/monkeywithacupcake",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "toolsofraj",
-      "name": "toolsofraj",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
-      "profile": "https://github.com/toolsofraj",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ddhp",
-      "name": "Jian-Chen Chen (jesse)",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
-      "profile": "https://github.com/ddhp",
-      "contributions": [
-        "translation",
-        "code"
-      ]
-    }
-  ],
-  "skipCi": true,
-  "contributorsPerLine": 7
-}

.babelrc

@@ -7,7 +7,7 @@
         "version": 3, "proposals": true
       },
       "targets": {
-        "node": 12
+        "node": 14
       }
     }
   ],

.changeset/afraid-mice-obey.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/types': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/web': minor
+---
+
+allow disable login on ui and endpoints
+
+To be able disable the login, set `login: false`, anything else would enable login. This flag will disable access via UI and web endpoints.
+
+```yml
+web:
+  title: verdaccio
+  login: false
+```

.changeset/calm-pants-impress.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-aws-s3-storage': patch
+---
+
+Fix the prefix used to delete from s3 when unpublishing packages

.changeset/dry-planes-tap.md

@@ -0,0 +1,59 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/commons-api': major
+'@verdaccio/core': major
+'@verdaccio/local-storage': major
+'@verdaccio/fastify-migration': major
+'@verdaccio/streams': major
+'@verdaccio/types': major
+'@verdaccio/hooks': major
+'verdaccio-audit': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/proxy': major
+'@verdaccio/server': major
+'@verdaccio/store': major
+'@verdaccio/eslint-config': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+refactor: search v1 endpoint and local-database
+
+- refactor search `api v1` endpoint, improve performance
+- remove usage of `async` dependency https://github.com/verdaccio/verdaccio/issues/1225
+- refactor method storage class
+- create new module `core` to reduce the ammount of modules with utilities
+- use `undici` instead `node-fetch`
+- use `fastify` instead `express` for functional test
+
+### Breaking changes
+
+- plugin storage API changes
+- remove old search endpoint (return 404)
+- filter local private packages at plugin level
+
+The storage api changes for methods `get`, `add`, `remove` as promise base. The `search` methods also changes and recieves a `query` object that contains all query params from the client.
+
+```ts
+export interface IPluginStorage<T> extends IPlugin {
+  add(name: string): Promise<void>;
+  remove(name: string): Promise<void>;
+  get(): Promise<any>;
+  init(): Promise<void>;
+  getSecret(): Promise<string>;
+  setSecret(secret: string): Promise<any>;
+  getPackageStorage(packageInfo: string): IPackageStorage;
+  search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
+  saveToken(token: Token): Promise<any>;
+  deleteToken(user: string, tokenKey: string): Promise<any>;
+  readTokens(filter: TokenFilter): Promise<Token[]>;
+}
+```

.changeset/eleven-spoons-matter.md

@@ -0,0 +1,39 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/core': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
+'@verdaccio/readme': major
+'@verdaccio/fastify-migration': major
+'@verdaccio/streams': major
+'@verdaccio/tarball': major
+'@verdaccio/types': major
+'@verdaccio/url': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/middleware': major
+'@verdaccio/mock': major
+'@verdaccio/node-api': major
+'@verdaccio/active-directory': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/server': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/store': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+Remove Node 12 support
+
+- We need move to the new `undici` and does not support Node.js 12

.changeset/few-mangos-grow.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-theme': minor
+---
+
+upgrade to react@17 and other dependencies

.changeset/fuzzy-onions-draw.md

@@ -0,0 +1,10 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/fastify-migration': minor
+'@verdaccio/hooks': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/proxy': minor
+'@verdaccio/store': minor
+---
+
+abort search request support for proxy

.changeset/gentle-parrots-lay.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/e2e-ui': minor
+---
+
+Some verdaccio modules depend on 'mkdirp' library which provides recursive directory creation functionality.
+NodeJS can do this out of the box since v.10.12. The last commit in 'mkdirp' was made in early 2016, and it's mid 2021 now.
+Time to stick with a built-in library solution!
+
+- All 'mkdirp' calls are replaced with appropriate 'fs' calls.

.changeset/gold-vans-tease.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/utils': patch
+---
+
+Fixed the validation of the name when searching for a tarball that have scoped package name

.changeset/healthy-bikes-behave.md

@@ -0,0 +1,21 @@
+---
+'@verdaccio/cli': patch
+'@verdaccio/types': patch
+'@verdaccio/node-api': patch
+'@verdaccio/server': patch
+---
+
+fix: restore logger on init
+
+Enable logger after parse configuration and log the very first step on startup phase.
+
+```bash
+ warn --- experiments are enabled, it is recommended do not use experiments in production comment out this section to disable it
+ info --- support for experiment [token]  is disabled
+ info --- support for experiment [search]  is disabled
+(node:50831) Warning: config.logs is deprecated, rename configuration to "config.log"
+(Use `node --trace-warnings ...` to show where the warning was created)
+ info --- http address http://localhost:4873/
+ info --- version: 6.0.0-6-next.11
+ info --- server started
+```

.changeset/heavy-ravens-lay.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/cli': minor
+'@verdaccio/fastify-migration': minor
+---
+
+[Fastify] Add ping endpoint

.changeset/little-stingrays-rule.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-audit': patch
+---
+
+fix: several issues which caused the audit to fail (#2335)

.changeset/olive-candles-speak.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-theme': minor
+---
+
+feat: integrate rematch for ui state storage

.changeset/perfect-candles-clap.md

@@ -0,0 +1,35 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/fastify-migration': minor
+'@verdaccio/tarball': minor
+'@verdaccio/types': minor
+'@verdaccio/url': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/middleware': minor
+'@verdaccio/mock': minor
+'@verdaccio/node-api': minor
+'@verdaccio/active-directory': minor
+'verdaccio-auth-memory': minor
+'verdaccio-aws-s3-storage': minor
+'verdaccio-google-cloud': minor
+'verdaccio-memory': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/cli-standalone': minor
+'@verdaccio/store': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+'@verdaccio/e2e-ui': minor
+---
+
+refactor: remove @verdaccio/commons-api in favor @verdaccio/core and remove duplications

.changeset/perfect-emus-clean.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/cli': major
+---
+
+feat: node 14 as minimum for running cli

.changeset/pre.json

@@ -6,7 +6,6 @@
     "@verdaccio/auth": "6.0.0-alpha.0",
     "@verdaccio/cli": "6.0.0-alpha.0",
     "@verdaccio/config": "6.0.0-alpha.0",
-    "@verdaccio/commons-api": "11.0.0-alpha.0",
     "@verdaccio/file-locking": "11.0.0-alpha.0",
     "verdaccio-htpasswd": "11.0.0-alpha.0",
     "@verdaccio/local-storage": "11.0.0-alpha.0",
@@ -33,37 +32,59 @@
     "verdaccio-aws-s3-storage": "11.0.0-alpha.0",
     "verdaccio-google-cloud": "11.0.0-alpha.0",
     "verdaccio-memory": "11.0.0-alpha.0",
-    "@verdaccio/website": "0.0.1",
     "@verdaccio/ui-theme": "6.0.0-alpha.1",
     "@verdaccio/e2e-cli": "1.0.0",
     "@verdaccio/e2e-ui": "1.0.0",
     "@verdaccio/cli-standalone": "6.0.0-alpha.3",
-    "@verdaccio/cli-ui": "6.0.0-alpha.3",
     "@verdaccio/tarball": "11.0.0-alpha.3",
-    "@verdaccio/url": "11.0.0-alpha.3"
+    "@verdaccio/url": "11.0.0-alpha.3",
+    "@verdaccio/fastify-migration": "6.0.0-6-next.9",
+    "@verdaccio/eslint-config": "1.0.0",
+    "@verdaccio/benchmark": "1.0.0",
+    "@verdaccio/website": "5.1.3",
+    "@verdaccio/core": "6.0.0-next.0",
+    "@verdaccio/helper": "1.0.0"
   },
   "changesets": [
+    "afraid-mice-obey",
     "big-lobsters-sin",
+    "calm-pants-impress",
+    "dry-planes-tap",
+    "eleven-spoons-matter",
     "few-cooks-destroy",
+    "few-mangos-grow",
     "fifty-jars-rest",
+    "fuzzy-onions-draw",
+    "gentle-parrots-lay",
     "gentle-trains-switch",
+    "gold-vans-tease",
+    "healthy-bikes-behave",
     "healthy-poets-compare",
+    "heavy-ravens-lay",
     "hip-hounds-destroy",
     "late-adults-love",
     "late-parents-act",
+    "little-stingrays-rule",
     "many-vans-care",
     "modern-spies-tell",
     "neat-toes-report",
+    "olive-candles-speak",
+    "perfect-candles-clap",
+    "perfect-emus-clean",
     "perfect-kangaroos-agree",
     "plenty-news-remember",
     "plenty-spiders-melt",
     "plenty-tables-refuse",
     "pretty-hounds-tap",
+    "proud-jeans-walk",
+    "red-chefs-float",
+    "shaggy-carrots-unite",
     "shiny-chefs-heal",
     "smart-apricots-kneel",
     "spicy-frogs-press",
     "tender-bags-call",
     "three-pots-sit",
-    "two-dolls-check"
+    "two-dolls-check",
+    "wild-jokes-beam"
   ]
 }

.changeset/proud-jeans-walk.md

@@ -0,0 +1,10 @@
+---
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/fastify-migration': patch
+'@verdaccio/hooks': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+---
+
+Added core-js missing from dependencies though referenced in .js sources

.changeset/red-chefs-float.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/web': patch
+---
+
+Fix the search by exact name of the package
+
+Full package name queries was not finding anithing. It was happening
+becouse of stemmer of [lunr.js](https://lunrjs.com/).
+
+To fix this, the stemmer of [lunr.js](https://lunrjs.com/) was removed from search pipeline.

.changeset/shaggy-carrots-unite.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/logger': patch
+---
+
+do not show deprecation warning on default logger config

.changeset/wild-jokes-beam.md

@@ -0,0 +1,32 @@
+---
+'@verdaccio/types': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/web': minor
+---
+
+web: allow ui hide package managers on sidebar
+
+If there is a package manager of preference over others, you can define the package managers to be displayed on the detail page and sidebar, just define in the `config.yaml` and web section the list of package managers to be displayed.
+
+```
+web:
+  title: Verdaccio
+  sort_packages: asc
+  primary_color: #cccccc
+  pkgManagers:
+    - pnpm
+    - yarn
+    # - npm
+```
+
+To disable all package managers, just define empty:
+
+```
+web:
+  title: Verdaccio
+  sort_packages: asc
+  primary_color: #cccccc
+  pkgManagers:
+```
+
+and the section would be hidden.

.eslintignore

@@ -4,9 +4,10 @@
 **/types/custom.d.ts
 build/
 coverage/
-flow-typed/
 node_modules/
 static/
 website/
 wiki/
 dist/
+docs/
+test/functional/store/*

.eslintrc

@@ -1,102 +0,0 @@
-{
-  "extends": [
-    "eslint:recommended",
-    "google",
-    "plugin:react/recommended",
-    "plugin:jest/recommended",
-    "plugin:@typescript-eslint/eslint-recommended",
-    "plugin:@typescript-eslint/recommended",
-    "plugin:import/typescript",
-    "plugin:jsx-a11y/recommended",
-    "prettier"
-  ],
-  "plugins": ["import", "jest", "jsx-a11y", "react-hooks"],
-  "env": {
-    "es6": true,
-    "node": true,
-    "jest": true
-  },
-  "globals": {
-    "__APP_VERSION__": true
-  },
-  "parserOptions": {
-    "allowImportExportEverywhere": true,
-    "sourceType": "module",
-    "ecmaVersion": 11,
-    "ecmaFeatures": {
-      "impliedStrict": true,
-      "jsx": true
-    }
-  },
-  "settings": {
-    "import/resolver": {
-      "node": {
-        "extensions": [".js", ".jsx", ".ts", ".tsx"]
-      }
-    }
-  },
-  "parser": "@typescript-eslint/parser",
-  "rules": {
-    "curly": ["error", "all"],
-    "react/prop-types": 0,
-    "jest/no-export": 0,
-    "jest/no-test-callback": 0,
-    "jest/expect-expect": 0,
-    "jest/no-try-expect": 0,
-    "jest/no-done-callback": "off",
-    "jest/no-conditional-expect": "off",
-    "keyword-spacing": "off",
-    "no-tabs": "off",
-    "no-useless-escape": "off",
-    "padded-blocks": "off",
-    "require-jsdoc": "off",
-    "valid-jsdoc": "off",
-    "import/order": ["error"],
-    "eol-last": "error",
-    "no-irregular-whitespace": "error",
-    "no-mixed-spaces-and-tabs": ["error", "smart-tabs"],
-    "no-trailing-spaces": "error",
-    "camelcase": "off",
-    "guard-for-in": "error",
-    "new-cap": "error",
-    "max-len": ["error", 100],
-    "no-console": ["error", { "allow": ["warn"] }],
-    "no-constant-condition": "error",
-    "no-debugger": "error",
-    "no-empty": "error",
-    "no-fallthrough": "error",
-    "no-invalid-this": "error",
-    "no-new-require": "error",
-    "no-undef": "error",
-    "no-unreachable": "error",
-    "no-var": "error",
-    "one-var": "error",
-    "prefer-rest-params": "error",
-    "prefer-spread": "error",
-    "handle-callback-err": 0,
-    "prefer-const": 0,
-    "@typescript-eslint/camelcase": 0,
-    "@typescript-eslint/ban-ts-ignore": 0,
-    "@typescript-eslint/no-var-requires": 0,
-    "@typescript-eslint/no-inferrable-types": 0,
-    "@typescript-eslint/no-empty-function": 0,
-    "@typescript-eslint/no-this-alias": 0,
-    "@typescript-eslint/no-use-before-define": 0,
-    "@typescript-eslint/array-type": ["error"],
-    "@typescript-eslint/no-explicit-any": 0,
-    "@typescript-eslint/indent": 0,
-    "@typescript-eslint/ban-ts-comment": 0,
-    "@typescript-eslint/ban-types": 0,
-    "@typescript-eslint/explicit-module-boundary-types": 0,
-
-    // rules to fix
-    "no-unused-vars": ["warn", { "vars": "all", "args": "none" }],
-    "jest/no-identical-title": ["warn"],
-    "prefer-promise-reject-errors": ["warn"],
-    "jest/no-disabled-tests": ["warn"],
-    "jest/no-commented-out-tests": ["warn"],
-    "@typescript-eslint/prefer-optional-chain": ["warn"],
-    "@typescript-eslint/explicit-member-accessibility": ["warn"],
-    "@typescript-eslint/no-unused-vars": ["warn"]
-  }
-}

.eslintrc.js

@@ -0,0 +1,3 @@
+module.exports = {
+  extends: ['@verdaccio/eslint-config'],
+};

.github/ISSUE_TEMPLATE/bug_report.md

@@ -6,6 +6,25 @@ title: ''
 assignees: ''
 ---
 
+<!-- PLEASE READ THIS:  
+ - If you are not sure is a bug, OPEN a DISCUSSION, if is a legitimate bug, is easy to create a bug from a discussion.
+ - Empty reports won't be considered and eventually be closed by a bot.
+ - Include debugging notes will help to fix it faster, HOW TO: https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio 
+ - If you remove this template, ticket will be closed immediately.
+ - No English perfect is required, use public translators if is need it, we will do our best to help you.
+ - Extra bonus: The most complete this report is delivered, the faster you will get a response.
+ - Extra bonus: include screenshots, logs (remove sensitive data).
+ - If you are willing to fix it, there is a checkbox at the bottom.
+-->
+
+**Your Environment**
+  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
+ * **verdaccio version**: 5.x.x
+ * **node version** [12.x.x, 14.x.x]:
+ * **package manager**: [npm@7, pnpm@6, yarn@2]
+ * **os**: [mac, windows@10, linux]
+ * **platform**: [npm, docker, helm, other]
+
 **Describe the bug**
 
 <!-- A clear and concise description of what the bug is. -->
@@ -23,7 +42,7 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots**
+**Screenshots, server logs, package manager log**
 
 <!-- If applicable, add screenshots to help explain your problem.  -->
 
@@ -38,10 +57,14 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 **Debugging output**
 
 - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
-- `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+- `$ DEBUG=verdaccio* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
 - `$ npm -ddd` prints:
 - `$ npm config get registry` prints:
 
+**Contribute to Verdaccio**
+
+- [ ] I'm willing to fix this bug 🥇 
+
 <!--
 
 IMPORTANT: please do not attach external files, all content should be visible from any device.

.github/ISSUE_TEMPLATE/config.yml

@@ -7,7 +7,7 @@ contact_links:
     url: https://github.com/verdaccio/verdaccio/security/policy
     about: I want to report a security vulnerability
   - name: Chat 🏘
-    url: http://chat.verdaccio.org
+    url: https://discord.gg/7qWJxBf
     about: For a quick question you should do it through our community chat
   - name: User Interface Report 👩🏼‍🎨👨🏼‍🎨
     url: https://github.com/verdaccio/ui/issues/new/choose

.github/ISSUE_TEMPLATE/feature.md

@@ -7,14 +7,18 @@ assignees: ''
 ---
 
 <!--
+IMPORTANT: If you don't have an action plan, please consider create a DISCUSSION (idea) instead for an open a feature request issue.
+
+https://github.com/verdaccio/verdaccio/discussions/new
 
 Verdaccio is a project addressed for voluntaries, if you appreciate this project consider to donate.
+1$/5$ or custom amount single contribution
+
+or monthly
 1$/month - minimal contribution
 5$/month - nice contribution
-500$ - help to promote this project, marketing, stickers.
-2000$/year - sponsor status, your company logo will be in our readme, meetups talks and your request will have high priority
 
-https://opencollective.com/verdaccio
+https://github.com/sponsors/verdaccio
 
 As reminder, the Open Source must be sustainable.
 -->

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 15
+daysUntilStale: 365
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 10
+daysUntilClose: 500
 # Issues with these labels will never be considered stale
 exemptLabels:
   - dev: high priority
@@ -17,7 +17,7 @@ markComment: >
 
   This issue has gone quiet 😶.
 
-   We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
+   We get a lot of issues, so we currently close issues after 180 days of inactivity. It’s been at least 90c days since the last update here.
    If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
    As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
 

.github/workflows/benchmark.yml

@@ -0,0 +1,171 @@
+---
+name: ci - benchmark
+
+on:
+  workflow_dispatch:
+  schedule:
+    # 3 times day
+    # collecting enough data to draw some graphics
+    - cron: '0 1 * * *'
+  # push:
+  #   branches:
+  #     - master
+jobs:
+  prepare: 
+    name: Prepare build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14.x
+      - name: install pnpm
+        run: sudo npm i pnpm@6.6.1 -g
+      - name: set store
+        run: | 
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store     
+      - name: setup pnpm config registry
+        run: pnpm config set registry https://registry.verdaccio.org
+      - name: install dependencies
+        run: pnpm install
+      - name: Cache .pnpm-store
+        uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-              
+      - name: build
+        run: pnpm build
+      - name: tar packages
+        run: |      
+          tar -czvf ${{ github.workspace }}/pkg.tar.gz -C ${{ github.workspace }}/packages .
+      - uses: actions/upload-artifact@v2
+        with:
+          name: verdaccio-artifact
+          path: pkg.tar.gz
+  benchmark-autocannon:
+    needs: prepare
+    strategy:
+      fail-fast: false
+      matrix:
+        benchmark:
+          - info
+          - tarball
+        verdaccioVersion:
+          # - local
+          - 3.13.1
+          - 4.12.2
+          - 5.1.3
+          - 6.0.0-6-next.24
+    name: Benchmark autocannon
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14.x
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages          
+      - name: install pnpm
+        # require fixed version
+        run: sudo npm i pnpm@6.6.1 -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}   
+      - name: install dependencies
+        run: pnpm install    
+      - name: start registry
+        run: ./scripts/benchmark-prepare.sh ${{matrix.verdaccioVersion}}        
+      - name: benchmark        
+        run: pnpm benchmark:api -- -v ${{matrix.verdaccioVersion}} -f ${{matrix.benchmark}}       
+        shell: bash
+        env:
+          DEBUG: metrics*
+      - uses: actions/upload-artifact@v2
+        with:
+          name: verdaccio-metrics-api
+          path: ./api-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json  
+          if-no-files-found: error
+          retention-days: 10 
+      - name: submit metrics
+        run: pnpm benchmark:submit
+        env:
+          DEBUG: metrics
+          METRICS_SOURCE: autocannon
+          METRICS_URL: ${{ secrets.METRICS_URL }}
+          METRICS_TOKEN: ${{ secrets.METRICS_TOKEN }}
+          METRICS_BENCHMARK: ${{matrix.benchmark}}
+          METRICS_VERSION: ${{matrix.verdaccioVersion}}
+          METRICS_COMMIT_HASH: ${{ github.sha }}
+          METRICS_FILE_NAME: 'api-results'   
+  benchmark:
+    needs: prepare
+    strategy:
+      fail-fast: false
+      matrix:
+        benchmark:
+          - info
+          - tarball
+        verdaccioVersion:
+          # future 6.x (wip)
+          # - local (master branch)
+          # old versions to compare same test along previous releases
+          - 3.13.1
+          - 4.12.2
+          - 5.1.3
+          - 6.0.0-6-next.24
+    name: Benchmark hyperfine
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 14.x
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages          
+      - name: install pnpm
+        # require fixed version
+        run: sudo npm i pnpm@6.6.1 -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}   
+      - name: install dependencies
+        run: pnpm install
+      - name: install hyperfine
+        run: |
+          wget https://github.com/sharkdp/hyperfine/releases/download/v1.11.0/hyperfine_1.11.0_amd64.deb
+          sudo dpkg -i hyperfine_1.11.0_amd64.deb
+      - name: start registry
+        run: ./scripts/benchmark-prepare.sh ${{matrix.verdaccioVersion}}
+      - name: benchmark        
+        run: ./scripts/benchmark-run.sh ${{matrix.benchmark}}
+        # https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#using-a-specific-shell
+        shell: bash
+      - name: rename
+        run: mv ./hyper-results.json ./hyper-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json
+      - uses: actions/upload-artifact@v2
+        with:
+          name: verdaccio-metrics
+          path: ./hyper-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json  
+          if-no-files-found: error
+          retention-days: 10 
+      - name: submit metrics
+        run: pnpm benchmark:submit
+        env:
+          DEBUG: metrics
+          METRICS_SOURCE: hyperfine
+          METRICS_URL: ${{ secrets.METRICS_URL }}
+          METRICS_TOKEN: ${{ secrets.METRICS_TOKEN }}
+          METRICS_BENCHMARK: ${{matrix.benchmark}}
+          METRICS_VERSION: ${{matrix.verdaccioVersion}}
+          METRICS_COMMIT_HASH: ${{ github.sha }}

.github/workflows/changesets.yml

@@ -28,25 +28,30 @@ jobs:
         uses: actions/setup-node@v2
         with:
           node-version: 14
-          registry-url: 'https://registry.verdaccio.org'
+          registry-url: 'https://registry.npmjs.org'
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
       - name: setup pnpm config
         run: pnpm config set store-dir $PNPM_CACHE_FOLDER
       - name: setup pnpm config registry
-        run: pnpm config set registry https://registry.verdaccio.org
+        run: pnpm config set registry https://registry.npmjs.org
 
       - name: install dependencies
         run: pnpm install
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
-
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+      - name: crowdin download
+        env:
+          CROWDIN_VERDACCIO_PROJECT_ID: ${{ secrets.CROWDIN_VERDACCIO_PROJECT_ID }}
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download       
       - name: build
         run: pnpm build
 
@@ -59,5 +64,6 @@ jobs:
           publish: pnpm ci:publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NPM_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NPM_CONFIG_REGISTRY: https://registry.npmjs.org

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
       with:
         node-version: 14 
     - name: Install pnpm
-      run: npm i pnpm@latest -g
+      run: npm i pnpm@6.10.3 -g
     - name: set store
       run: | 
         mkdir ~/.pnpm-store
@@ -54,7 +54,7 @@ jobs:
         with:
           node-version: 16
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
@@ -74,7 +74,7 @@ jobs:
         with:
           node-version: 16
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
@@ -83,6 +83,7 @@ jobs:
         run: pnpm recursive install --frozen-lockfile --ignore-scripts
       - name: Lint
         run: pnpm format:check
+
   build:
     runs-on: ubuntu-latest
     name: build
@@ -94,15 +95,22 @@ jobs:
         with:
           node-version: 16
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
       - name: Install
-        ## we run scripts due gatsby needs it
-        ## when website is excluded we can add --ignore-scripts
         run: pnpm recursive install --frozen-lockfile --ignore-scripts
+      - name: crowdin download
+        env:
+          CROWDIN_VERDACCIO_PROJECT_ID: ${{ secrets.CROWDIN_VERDACCIO_PROJECT_ID }}
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download
+        ## this step is optional, translations are not mandatory for PR
+        ## secrets keys are not available on forks, the failure here is guaranteed
+        continue-on-error: true  
       - name: build
         run: pnpm build
       - name: tar packages
@@ -118,7 +126,8 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [12, 14]
+        ## Node 16 breaks UI test, jest issue
+        node_version: [14]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
@@ -133,7 +142,7 @@ jobs:
       - name: untar packages
         run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
@@ -157,7 +166,7 @@ jobs:
       - name: untar packages
         run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
@@ -167,8 +176,8 @@ jobs:
         run: pnpm recursive install --frozen-lockfile 
       - name: Test UI
         run: pnpm test:e2e:ui
-        env:
-          DEBUG: verdaccio:e2e*       
+        # env:
+        #  DEBUG: verdaccio:e2e*       
   ci-e2e-cli:
     needs: build
     runs-on: ubuntu-latest
@@ -184,7 +193,7 @@ jobs:
       - name: untar packages
         run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
       - uses: actions/cache@v2
         with:
           path: ~/.pnpm-store
@@ -194,27 +203,8 @@ jobs:
         run: pnpm recursive install --frozen-lockfile
       - name: Test CLI
         run: pnpm test:e2e:cli
-  website:
-    needs: [format, lint]
-    runs-on: ubuntu-latest
-    name: website build node 14
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 14     
-      - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
-      - name: Install
-        run: pnpm recursive install --frozen-lockfile
-      - name: Build website
-        run: |
-          cd website
-          pnpm build:website                    
+        # env:
+        #   DEBUG: verdaccio* 
   test-windows:
     needs: [format, lint]
     runs-on: windows-latest
@@ -226,7 +216,7 @@ jobs:
         with:
           node-version: 14
       - name: Install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@6.10.3 -g
        # pnpm cache is not working for windows (we need a solution)
       - uses: actions/cache@v2
         with:
@@ -238,3 +228,35 @@ jobs:
         run: pnpm build
       - name: Test
         run: pnpm test
+  sync-translations:
+    needs: [ci-e2e-cli, ci-e2e-ui, test-windows, test]
+    runs-on: ubuntu-latest
+    name: synchronize translations
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - uses: actions/setup-node@v1
+        with:
+          node-version: 14
+      - uses: actions/download-artifact@v2
+        with:
+          name: verdaccio-artifact
+      - name: untar packages
+        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
+      - name: Install pnpm
+        run: npm i pnpm@6.10.3 -g
+      - uses: actions/cache@v2
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
+      - name: Install
+        ## we need scripts, pupetter downloads aditional content
+        run: pnpm recursive install --frozen-lockfile
+      - name: generate website translations
+        run: pnpm write-translations --filter ...@verdaccio/website       
+      - name: sync
+        env:
+          CROWDIN_VERDACCIO_PROJECT_ID: ${{ secrets.CROWDIN_VERDACCIO_PROJECT_ID }}
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:sync              

.github/workflows/website.yml

@@ -0,0 +1,148 @@
+name: Verdaccio Website CI
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+    paths:
+      - 'website/**'
+      - 'package.json'
+      - './.github/workflows/website.yml'
+  push:
+    branches:
+      - 'master'
+    paths:
+      - 'website/**'
+      - 'package.json'
+      - './.github/workflows/website.yml'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: Use Node 14
+        uses: actions/setup-node@v2
+        with:
+          node-version: 14
+
+      - name: Cache pnpm modules
+        uses: actions/cache@v2
+        env:
+          cache-name: cache-pnpm-modules
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+
+      - uses: pnpm/action-setup@v2.0.1
+        with:
+          version: 6.10.2
+          run_install: |
+            - recursive: true
+              args: [--frozen-lockfile]
+
+      - name: Lint And Pretty
+        run: |
+          pnpm eslint:check --filter ...@verdaccio/website
+          pnpm prettier:check --filter ...@verdaccio/website
+
+      - name: Cache Docusaurus Build
+        uses: actions/cache@v2
+        with:
+          path: website/node_modules/.cache/webpack
+          key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: cache/webpack-${{github.ref}}
+
+      # Will deploy to production on:
+        # 1st: When a push occurs on master branch
+        # 2nd: When we force the worflow dispatch through the UI
+      - name: Build Production
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        env:
+          CROWDIN_VERDACCIO_PROJECT_ID: ${{ secrets.CROWDIN_VERDACCIO_PROJECT_ID }}
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm netlify:build:production --filter ...@verdaccio/website
+
+      - name: 🔥 Deploy Production Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        uses: semoal/action-netlify-deploy@master
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      # Will deploy to Preview URL, only when a pull request is open with changes on the website
+      - name: Build Deployment Preview
+        if: github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.event.label.name == 'trigger-preview'
+        env:
+          CONTEXT: deploy-preview
+        run: pnpm netlify:build:deployPreview --filter ...@verdaccio/website
+
+      - name: 🤖 Deploy Preview Netlify
+        if: github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.event.label.name == 'trigger-preview'
+        uses: semoal/action-netlify-deploy@master
+        id: netlify_preview
+        with:
+          draft: true
+          comment-on-pull-request: true
+          github-deployment-is-production: false
+          github-deployment-is-transient: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      - name: Audit preview URL with Lighthouse
+        if: github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.event.label.name == 'trigger-preview'
+        id: lighthouse_audit
+        uses: treosh/lighthouse-ci-action@v3
+        with:
+          urls: |
+            ${{ steps.netlify_preview.outputs.preview-url }}
+          uploadArtifacts: true
+          temporaryPublicStorage: true
+
+      - name: Format lighthouse score
+        if: github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.event.label.name == 'trigger-preview'
+        id: format_lighthouse_score
+        uses: actions/github-script@v3
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            const result = ${{ steps.lighthouse_audit.outputs.manifest }}[0].summary
+            const links = ${{ steps.lighthouse_audit.outputs.links }}
+            const formatResult = (res) => Math.round((res * 100))
+            Object.keys(result).forEach(key => result[key] = formatResult(result[key]))
+            const score = res => res >= 90 ? '🟢' : res >= 50 ? '🟠' : '🔴'
+            const comment = [
+                `⚡️ [Lighthouse report](${Object.values(links)[0]}) for the changes in this PR:`,
+                '| Category | Score |',
+                '| --- | --- |',
+                `| ${score(result.performance)} Performance | ${result.performance} |`,
+                `| ${score(result.accessibility)} Accessibility | ${result.accessibility} |`,
+                `| ${score(result['best-practices'])} Best practices | ${result['best-practices']} |`,
+                `| ${score(result.seo)} SEO | ${result.seo} |`,
+                ' ',
+                `*Lighthouse ran on [${Object.keys(links)[0]}](${Object.keys(links)[0]})*`
+            ].join('\n')
+             core.setOutput("comment", comment);
+
+      - name: Add comment to PR
+        if: github.event_name == 'pull_request' && github.ref != 'refs/heads/master' && github.event.label.name == 'trigger-preview'
+        id: comment_to_pr
+        uses: marocchino/sticky-pull-request-comment@v1
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          number: ${{ github.event.issue.number }}
+          header: lighthouse
+          message: |
+            ${{ steps.format_lighthouse_score.outputs.comment }}

.gitignore

@@ -2,22 +2,17 @@
 verdaccio-*.tgz
 .DS_Store
 build/
+dist/
 .eslintcache
-./dist
-
-### Test
+node_modules
 
+### database
 .verdaccio-db.json
 .sinopia-db.json
 
-###
+### test
 test-storage*
 .verdaccio_test_env
-node_modules
-package-lock.json
-yarn-error.log
-yarn.lock
-
 
 # docker examples
 docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
@@ -36,12 +31,22 @@ tsconfig.tsbuildinfo
 
 ## bundle files
 packages/standalone/dist/
+
 ## ui
 packages/plugins/ui-theme/static
+/packages/plugins/ui-theme/src/i18n/download_translations/
+!/packages/plugins/ui-theme/src/i18n/crowdin/ui.json
 
-# website
-website/public
-website/.cache
 
 # CI Pnpm cache
 .pnpm-store/
+
+# benchmark
+api-results.json
+hyper-results.json
+hyper-results*.json
+api-results*.json
+
+#docs 
+./api
+packages/core/core/docs

.husky/pre-commit

@@ -0,0 +1,5 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+#./node_modules/.bin/lint-staged
+npm run husky:pre-commit

.netlify/netlify-plugin-pnpm/index.js

@@ -0,0 +1,10 @@
+module.exports = {
+  onPreBuild: async ({ utils: { build, run } }) => {
+    try {
+      await run.command("npm install -g pnpm")
+      await run.command("pnpm install --ignore-scripts --frozen-lockfile")
+    } catch (error) {
+      return build.failBuild(error)
+    }
+  }
+}

.netlify/netlify-plugin-pnpm/manifest.yml

@@ -0,0 +1,2 @@
+name: netlify-plugin-pnpm
+inputs: []

.npmignore

@@ -1,4 +1,3 @@
-
 ## npm
 npm-debug.log
 yarn-error.log
@@ -23,7 +22,6 @@ docs/
 wiki/
 
 ## flow
-flow-typed/
 types/
 
 # jest

.npmrc

@@ -1,5 +1,5 @@
 always-auth = true
 recursive-install = true
 registry = https://registry.verdaccio.org
-loglevel=warn
+loglevel=info
 fetch-retries="10"

.nvmrc

@@ -1 +1 @@
-14
+16

.prettierignore

@@ -6,10 +6,10 @@
 **/pnpm-lock.yaml
 **/verdaccio-corrupted.db.json
 **/wrong.package.json
-/website/.cache/
-/website/crowdin/
-/website/public/
-/website/src/dictionaries/
+crowdin.yaml
+/docs/website
+/website/*
+/website/translated_docs/
 CHANGELOG.md
 CONTRIBUTORS.md
 node_modules/
@@ -17,9 +17,17 @@ node_modules/
 **/static/*.js
 **/build/*.js
 packages/core/local-storage/_storage/**
+packages/partials/storage_default_storage/
 packages/standalone/dist/bundle.js
 docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
 docker-examples/
 build/
 .vscode/
-.github/
+.github/
+.netlify/
+packages/**/docs/**
+packages/mock/mock-store/**
+api/**
+packages/core/local-storage/tests/__fixtures__/test-storage/
+packages/plugins/ui-theme/static/
+.verdaccio-db.json

.project

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>verdaccio-dev</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+	</buildSpec>
+	<natures>
+	</natures>
+	<filteredResources>
+		<filter>
+			<id>1630305579538</id>
+			<name></name>
+			<type>26</type>
+			<matcher>
+				<id>org.eclipse.ui.ide.multiFilter</id>
+				<arguments>1.0-name-matches-true-false-node_modules</arguments>
+			</matcher>
+		</filter>
+	</filteredResources>
+</projectDescription>

.vscode/launch.json

@@ -4,6 +4,16 @@
   // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
   "version": "0.2.0",
   "configurations": [
+
+  {
+    "name": "Attach",
+    "port": 9229,
+    "request": "attach",
+    "skipFiles": [
+      "<node_internals>/**"
+    ],
+    "type": "pwa-node"
+  },
     {
       "name": "Verdaccio Debug",
       "port": 9229,

CONTRIBUTING.md

@@ -2,8 +2,8 @@
 
 > Any change matters, whatever the size, just do it.
 
-We are happy that you are willing to contribute. For that reason, we
-have prepared these guidelines for you:
+We're happy that you're considering contributing! To help, we've prepared these
+guidelines for you:
 
 **Table of Contents**
 
@@ -19,6 +19,7 @@ have prepared these guidelines for you:
     - [What's is not considered a bug?](#whats-is-not-considered-a-bug)
     - [Issue Search](#issue-search)
     - [Chat](#chat)
+  - [Translations](#translations)
   - [Request Features](#request-features)
   - [Contributing Guidelines](#contributing-guidelines)
     - [Submitting a Pull Request](#submitting-a-pull-request)
@@ -32,34 +33,47 @@ have prepared these guidelines for you:
 
 ## How Do I Contribute?
 
-There are different ways to contribute, each comes with a different levels
-of tasks, such as:
+There are many ways to contribute:
 
-- Report a bug.
-- Request a feature you think would be great for verdaccio.
-- Fix bugs.
-- Test and triage reported bugs by others.
-- Work on requested/approved features.
-- Improve the codebase (lint, naming, comments, test descriptions, etc...)
+- Report a bug
+- Request a feature you think would be great for Verdaccio
+- Fix bugs
+- Test and triage bugs reported by others
+- Work on requested/approved features
+- Improve the codebase (linting, naming, comments, test descriptions, etc...)
 
-Verdaccio has several areas of involvement, which might fit you better, eg:
+The Verdaccio project is split into several areas:
 
 - **Core**: The [core](https://github.com/verdaccio/verdaccio) is the main repository, built with **Node.js**.
-- **Website**: we uses **Gatsby.js** for the **website** and if you are familiar with this technology, you might become the official webmaster.
+- **Website**: we use [**Docusaurus**](https://docusaurus.io/) for the **website** and if you are familiar with this technology, you might become the official webmaster.
 - **User Interface**: The [user Interface](https://github.com/verdaccio/ui) is based in **react** and **material-ui** and looking for front-end contributors.
 - **Kubernetes and Helm**: Ts the official repository for the [**Helm chart**](https://github.com/verdaccio/charts).
 
-> There are other areas to contribute, like documentation, translation which are not hosted on this repo but check the last section of this notes for further information.
+> There are other areas to contribute, like documentation, translation which are
+> not hosted on this repo but check the last section of this notes for further
+> information.
 
 ## Development Setup
 
-Verdaccio uses [_pnpm_](https://pnpm.js.org/) as package manager for development in this repository. Please install the latest one:
+Verdaccio uses [pnpm](https://pnpm.io) as the package manager for development in this repository.
+
+If you are using pnpm for the first time the [pnpm configuration documentation](https://pnpm.io/configuring) may be useful to avoid any potential problems with the following steps.
+
+**Note**: pnpm uses npm's configuration formats so check that your global `.npmrc` file does not inadvertently disable package locks. In other words, your `.npmrc` file **should not** contain
+
+```
+package-lock=false
+```
+
+This setting would cause the `pnpm install` command to install incorrect versions of package dependencies and the subsequent `pnpm build` step would likely fail.
+
+To begin your development setup, please install the latest version of pnpm globally:
 
 ```
 npm i -g pnpm
 ```
 
-First step is installing all dependencies:
+With pnpm installed, the first step is installing all dependencies:
 
 ```
 pnpm install
@@ -79,62 +93,69 @@ pnpm build
 pnpm test
 ```
 
-Verdaccio is a mono repository, for running an specific test or package go the specific package eg:
+Verdaccio is a mono repository. To run the tests for for a specific package:
 
 ```
 cd packages/store
 pnpm test
 ```
 
-or an specific test in that package
+or an specific test in that package:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts
 ```
 
-or a single test unit
+or a single test unit:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple'
 ```
 
-The coverage is enabled by default, to speed up test running
+Coverage reporting is enabled by default, but you can turn it off to speed up
+test runs:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple' --coverage=false
 ```
 
-To increase debug output, we use `debug`, to enable it in your test just add
+You can enable increased [`debug`](https://www.npmjs.com/package/debug) output:
 
 ```
-DEBUG=verdaccio* pnpm test
+DEBUG=verdaccio:* pnpm test
 ```
 
 More details in the debug section
 
 ### Running and debugging
 
-We uses [`debug`](https://www.npmjs.com/package/debug) for debug outcome. Each package has it owns namespace.
+We use [`debug`](https://www.npmjs.com/package/debug) to add helpful debugging
+output to the code. Each package has it owns namespace.
 
-### Debugging compiled code
+#### Debugging compiled code
 
-Currently you can only run in debug mode pre-compiled packages, to enable debug while running add the `verdaccio` namespace using the `DEBUG` environment variable, like this:
+Currently you can only run pre-compiled packages in debug mode. To enable debug
+while running add the `verdaccio` namespace using the `DEBUG` environment
+variable, like this:
 
 ```
 DEBUG=verdaccio:* node packages/verdaccio/debug/bootstrap.js
 ```
 
-On this way can be reviewed every package, but if you need to filter out and display more specific output, increase the name space filter.
+You can filter this output to just the packages you're interested in using
+namespaces:
 
 ```
 DEBUG=verdaccio:plugin:* node packages/verdaccio/debug/bootstrap.js
 ```
 
-The debug code is intended to analyze what is happening under the hood and none of the output is gathered with the logger module.
+The debug code is intended to analyze what is happening under the hood and none
+of the output is sent to the logger module.
 
 ## Reporting Bugs
 
-**Bugs are considered features that are not working as described in documentation.**
+**Bugs are considered features that are not working as described in
+documentation.**
 
 If you've found a bug in Verdaccio **that isn't a security risk**, please file
 a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
@@ -142,52 +163,77 @@ a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
 > **NOTE: Verdaccio still does not support all npm commands. Some were not
 > considered important and others have not been requested yet.**
 
-### Read the documentation
-
-Check whether you are using the software in the way is documented [documentation](http://www.verdaccio.org/docs/en/installation.html).
-
 ### What's is not considered a bug?
 
-- _Third party integrations_: proxies integrations, external plugins.
-- _Package managers_: If a package manager does not support a specific command or cannot be reproduced with another package manager.
-- _Features clearly flagged as not supported_.
-- _Node.js issues installation in any platform_: If you cannot install the global package ( this is considered external issue)
-- Any ticket which has the flagged as [external issue](https://github.com/verdaccio/verdaccio/labels/external-issue).
+- _Third party integrations_: proxies integrations, external plugins
+- _Package managers_: If a package manager does not support a specific command
+  or cannot be reproduced with another package manager
+- _Features clearly flagged as not supported_
+- _Node.js issues installation in any platform_: If you cannot install the
+  global package (this is considered external issue)
+- Any ticket which has beed flagged as an [external issue
+  ](https://github.com/verdaccio/verdaccio/labels/external-issue)
 
-If you intent to report a **security** issue, please follow our [Security policy guidelines](https://github.com/verdaccio/verdaccio/security/policy).
+If you intend to report a **security** issue, please follow our [Security policy
+guidelines](https://github.com/verdaccio/verdaccio/security/policy).
 
 ### Issue Search
 
-Before consider report a bug, please follow this steps before:
+Before reporting a bug please:
 
-- Search if has already been reported via the issue search.
-- Look for the **question** label: we have labelled questions for easy follow-up as [questions](https://github.com/verdaccio/verdaccio/labels/question).
+- Search for existing issues to see if it has already been reported
+- Look for the **question** label: we have labelled questions for easy follow-up
+  as [questions](https://github.com/verdaccio/verdaccio/labels/question)
 
-In case any of those match with your search, up-vote it (using GitHub reactions) or add additional helpful details to the existing issue to show that it's affecting multiple people.
+In case any of those match with your search, up-vote it (using GitHub reactions)
+or add additional helpful details to the existing issue to show that it's
+affecting multiple people.
 
 ### Chat
 
-Questions can be asked via [Discord](http://chat.verdaccio.org/)
+Questions can be asked via [Discord](https://discord.gg/7qWJxBf)
 
 **Please use the `#help` channel.**
 
+## Translations
+
+All translations are provided by the `crowdin` platform:
+[https://translate.verdaccio.org/](https://translate.verdaccio.org/)
+
+If you want to contribute by adding translations, create an account (GitHub could be used as fast alternative), in the platform you can contribute to two areas, the website or improve User Interface translations.
+
+If a language is not listed, ask for it in the [Discord](https://discord.gg/7qWJxBf) channel #contribute channel.
+
+For adding a new **language** on the UI follow these steps:
+
+1. Ensure the **language** has been enabled, must be visible in the `crowdin` platform.
+2. Find in the explorer the file `en.US.json` in the path `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` and complete the translations, **not need to find approval on this**.
+3. Into the project, add a new field into `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` file, in the section `lng`, the new language, eg: `{ lng: {korean:"Korean"}}`. (This file is English based, once the PR has been merged, this string will be available in crowdin for translate to the targeted language).
+4. Add the language, [flag icon](https://www.npmjs.com/package/country-flag-icons), and the menu key fort he new language eg: `menuKey: 'lng.korean'` to the file `packages/plugins/ui-theme/src/i18n/enabledLanguages.ts`.
+5. For local testing, read `packages/plugins/ui-theme/src/i18n/ABOUT_TRANSLATIONS.md`.
+6. Add a `changeset` file, see more info below.
+
 ## Request Features
 
 New feature requests are welcome. Analyse whether the idea fits within scope of
-the project. Then, detail your request, ensuring context and use case is provided.
+the project. Adding in context and the use-case will really help!
 
 **Please provide:**
 
 - A detailed description the advantages of your request
-- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_](https://github.com/yarnpkg/yarn) or [_yarn berry_](https://github.com/yarnpkg/berry).
+- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_
+  ](https://github.com/yarnpkg/yarn) or [_yarn berry_
+  ](https://github.com/yarnpkg/berry).
 - A potential implementation or design
-- Whatever else you have in your mind 🤓
+- Whatever else is on your mind! 🤓
 
 ## Contributing Guidelines
 
-This is the most exciting part, when you became a Verdaccio contributor 🙌🏼, to ensure a fast code review and merge, please follow the next guidelines:
+It's very exciting to become a Verdaccio contributor 🙌🏼. To ensure a fast code
+review and merge, please follow the next guidelines:
 
-> Any contribution gives you the right to be part of this organization as _collaborator_.
+> Any contribution gives you the right to be part of this organization as
+> _collaborator_.
 
 ### Submitting a Pull Request
 
@@ -213,14 +259,14 @@ information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing)
 
 #### Caveats
 
-Feel free to commit as much times you want in your branch, but keep on mind on this repository we `git squash` on merge by default, any other way is forbidden since we intent to have a clean git history.
+Feel free to commit as much times you want in your branch, but keep on mind on
+this repository we `git squash` on merge by default, as we like to maintain a
+clean git history.
 
 #### Before Commit
 
 Before committing, **you must ensure there are no linting errors and
-all tests pass.**
-
-To do this, run these commands before create the PR:
+all tests pass.** To do this, run these commands before create the PR:
 
 ```bash
 pnpm lint
@@ -229,9 +275,10 @@ pnpm build
 pnpm test
 ```
 
-> note: eslint and formatting are running separately, keep code formatting before push.
+> note: eslint and formatting are run separately, keep code formatting
+> before push.
 
-All good? perfect, then you should create the pull request.
+All good? Perfect! You should create the pull request.
 
 #### Commit Guidelines
 
@@ -240,8 +287,8 @@ For example:
 - `feat: A new feature`
 - `fix: A bug fix`
 
-A commit of the type feat introduces a new feature to the codebase
-(this correlates with MINOR in semantic versioning).
+A commit of the type feat introduces a new feature to the codebase (this
+correlates with MINOR in semantic versioning).
 
 e.g.:
 
@@ -249,7 +296,8 @@ e.g.:
 feat: xxxxxxxxxx
 ```
 
-A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
+A commit of the type fix patches a bug in your codebase (this correlates with
+PATCH in semantic versioning).
 
 e.g.:
 
@@ -257,24 +305,31 @@ e.g.:
 fix: xxxxxxxxxxx
 ```
 
-Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
-and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
+Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:` and
+`chore:` are valid but have no effect on versioning: **please use them!**
 
-All commits message are going to be validated when they are created using husky hooks.
+All commits message are going to be validated when they are created using
+_husky_ hooks.
 
-> Please, try to provide one single commit to help a clean and easy merge process.
+> Please try to provide one single commit to help a clean and easy merge process
 
 ### Adding a changeset
 
-We use [changesets](https://github.com/atlassian/changesets) in order to generate a detailed Changelog as possible.
+We use [changesets](https://github.com/atlassian/changesets) in order to
+generate a detailed Changelog as possible.
 
-Add a changeset with your Pull Request is essential if you want your contribution get merged. To create a changeset please run:
+Adding a changeset with your Pull Request is essential if you want your
+contribution to get merged (unless is a change that does not affect library
+functionality, eg: typo, docs, readme, add additional test or linting code). To
+create a changeset please run:
 
 ```
 pnpm changeset
 ```
 
-Then select the packages you want to include in your changeset navigating through them and press the spacebar to check it, on finish press enter to move to the next step.
+Then select the packages you want to include in your changeset navigating
+through them and press the spacebar to check it, on finish press enter to move
+to the next step.
 
 ```
 🦋  Which packages would you like to include? …
@@ -287,7 +342,9 @@ Then select the packages you want to include in your changeset navigating throug
   ✔ @verdaccio/commons-api
 ```
 
-The next question would be if you want a _major bump_, this is not the usual scenario, most likely would be a patch, in that case press enter 2 times (to skip minor)
+The next question would be if you want a _major bump_. This is not the usual
+scenario, most likely you want a patch, and in that case press enter 2 times
+(to skip minor)
 
 ```
 🦋  Which packages should have a major bump? …
@@ -295,7 +352,8 @@ The next question would be if you want a _major bump_, this is not the usual sce
   ✔ @verdaccio/config@5.0.0-alpha.0
 ```
 
-Once the desired bump you need, the CLI will ask for a summary, here you have fully freedom what to include.
+Once you have the desired bump you need, the CLI will ask for a summary. Here
+you have full freedom on what to include:
 
 ```
 🦋  Which packages would you like to include? · @verdaccio/config
@@ -307,7 +365,7 @@ Once the desired bump you need, the CLI will ask for a summary, here you have fu
 🦋  Summary ›
 ```
 
-The last step is confirm your changeset or abort the operation.
+The last step is to confirm your changeset or abort the operation:
 
 ```
 🦋  Is this your desired changeset? (Y/n) · true
@@ -317,9 +375,13 @@ The last step is confirm your changeset or abort the operation.
 🦋  info /Users/user/verdaccio.clone/.changeset/light-scissors-smell.md
 ```
 
-Once the changeset is added (all will have an unique name) you can freely edit using markdown, adding additional information, code snippets or what you consider is relevant.
+Once the changeset is added (all will have an unique name) you can freely edit
+using markdown, adding additional information, code snippets or whatever else
+you consider to be relevant.
 
-All that information will be part of the **changelog**, be concise but informative. It is considered a good option to add your nickname and GitHub link to your profile.
+All that information will be part of the **changelog**. Be concise but
+informative! It's recommended to add your nickname and GitHub link to your
+profile.
 
 **PRs that do not follow the commit message guidelines will not be merged.**
 
@@ -327,7 +389,8 @@ All that information will be part of the **changelog**, be concise but informati
 
 **Any change in source code must include test updates**.
 
-If you need help with how testing works, please [refer to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
+If you need help with how testing works, please [refer to the following guide
+](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
 
 **If you are introducing new features, you MUST include new tests. PRs for
 features without tests will not be merged.**
@@ -340,6 +403,8 @@ If you want to develop your own plugin:
 
 1. Check whether there is a legacy Sinopia plugin for the feature that you need
    via [npmjs](https://www.npmjs.com/search?q=sinopia)
-2. Keep in mind the [life-cycle to load a plugin](https://verdaccio.org/docs/en/dev-plugins)
+2. Keep in mind the [life-cycle to load a plugin
+   ](https://verdaccio.org/docs/en/dev-plugins)
 3. You are free to host your plugin in your repository
-4. Provide a detailed description of your plugin to help users understand how to use it.
+4. Provide a detailed description of your plugin to help users understand how to
+   use it

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.18.1-alpine as builder
 
 ENV NODE_ENV=development \
     VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
@@ -12,14 +12,14 @@ RUN apk --no-cache add openssl ca-certificates wget && \
 WORKDIR /opt/verdaccio-build
 COPY . .
 
-RUN npm -g i pnpm@latest && \
+RUN npm -g i pnpm@6.10.3 && \
     pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
     pnpm recursive install --frozen-lockfile --ignore-scripts && \
     pnpm run build
 # FIXME: need to remove devDependencies from the build
 # RUN pnpm install --prod --ignore-scripts
 
-FROM node:14.16.1-alpine
+FROM node:14.18.1-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

README.md

@@ -29,13 +29,19 @@ Google Cloud Storage** or create your own plugin.
 
 ## Install
 
+> Latest Node.js v14
+
 Install with npm:
 
 ```bash
-npm install --global verdaccio@6-next --https://registry.verdaccio.org/
+npm install --global verdaccio@6-next
 ```
 
-> Published on a temporary registry while setup is ready to publish on npmjs
+or
+
+```bash
+docker pull verdaccio/verdaccio:nightly-master
+```
 
 ## Donations
 
@@ -69,12 +75,14 @@ booted in a couple of seconds, fast enough for any CI. Many open source projects
 
 ## Talks
 
-### **Node.js Dependency Confusion Attacks**.
+### **Testing the integrity of your React components by publishing in a private registry - React Finland 2021**.
 
-[![verdaccio Node.js Dependency Confusion Attacks](https://cdn.verdaccio.dev/readme/devseccon.png)](https://www.youtube.com/watch?v=qTRADSp3Hpo)
+[![beerjscrb](https://cdn.verdaccio.dev/readme/react-finland-2021-jpicado.jpeg)](https://www.youtube.com/watch?v=bRKZbrlQqLY&t=16s&ab_channel=ReactFinland)
 
 You might want to check out as well our previous talks:
 
+- [BeerJS Cba Meetup No. 53 May 2021 - **Juan Picado**](https://www.youtube.com/watch?v=6SyjqBmS49Y&ab_channel=BeerJSCba)
+- [Node.js Dependency Confusion Attacks - April 2021 - **Juan Picado\***](https://www.youtube.com/watch?v=qTRADSp3Hpo)
 - [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado\***](https://www.youtube.com/watch?v=oVCjDWeehAQ)
 - [ViennaJS Meetup - Introduction to Verdaccio by **Priscila Olivera** and **Juan Picado**](https://www.youtube.com/watch?v=hDIFKzmoCa)
 - [Open Source? trivago - Verdaccio (**Ayush** and **Juan Picado**) January 2020](https://www.youtube.com/watch?v=A5CWxJC9xzc)
@@ -184,7 +192,20 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 If you want to report a security vulnerability, please follow the steps which we have defined for you in our [security policy](https://github.com/verdaccio/verdaccio/security/policy).
 
-## Core Team
+## Special Thanks
+
+Thanks to the following companies to help us to achieve our goals providing free open source licenses. Every company provides enough resources to move this project forward.
+
+| Company      | Logo                                                                                                                            | License                                                                           |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
+| JetBrains    | [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)                                                     | JetBrains provides licenses for products for active maintainers, renewable yearly |
+| Crowdin      | [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)                                                              | Crowdin provides platform for translations                                        |
+| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                        | BrowserStack provides plan to run End to End testing for the UI                   |
+| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                      | Netlify provides pro plan for website deployment                                  |
+| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                     | Algolia provides search services for the website                                  |
+| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application) | Docker offers unlimited pulls and unlimited egress to any and all users           |
+
+## Maintainers
 
 | [Juan Picado](https://github.com/juanpicado)                                   | [Ayush Sharma](https://github.com/ayusharma)                             | [Sergio Hg](https://github.com/sergiohgz)                                 |
 | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------ | ------------------------------------------------------------------------- |
@@ -238,16 +259,6 @@ Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com
 
 [![backers](https://opencollective.com/verdaccio/backers.svg?width=890)](https://opencollective.com/verdaccio#backers)
 
-## Special Thanks
-
-Thanks to the following companies to help us to achieve our goals providing free open source licenses.
-
-[![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)
-[![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)
-[![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)
-
-Verdaccio also is part of to the [Docker Open Source Program](https://www.docker.com/blog/expanded-support-for-open-source-software-projects/).
-
 ## Contributors
 
 This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
@@ -262,7 +273,7 @@ If you have any issue you can try the following options, do no desist to ask or
 - [Donations](https://github.com/sponsors/verdaccio)
 - [Reporting an issue](https://github.com/verdaccio/verdaccio/issues/new/choose)
 - [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
-- [Chat](http://chat.verdaccio.org/)
+- [Chat](https://discord.gg/7qWJxBf)
 - [Logos](https://verdaccio.org/docs/en/logo)
 - [Docker Examples](https://github.com/verdaccio/verdaccio/tree/master/docker-examples)
 - [FAQ](https://github.com/verdaccio/verdaccio/discussions/categories/q-a)

SECURITY.md

@@ -4,11 +4,13 @@
 
 The following table describes the versions of this project that are currently supported with security updates:
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 2.x     | :x:                |
-| 3.x     | :x:                |
-| 4.x     | :white_check_mark: |
+| Version   | Supported          |
+| --------- | ------------------ |
+| 2.x       | :x:                |
+| 3.x       | :x:                |
+| 4.x       | :x:                |
+| 5.x       | :white_check_mark: |
+| 6.x alpha | :x:                |
 
 ## Responsible disclosure security policy
 
@@ -30,7 +32,7 @@ If you discover a security vulnerability, please use one of the following means
 
 Note that time-frame and processes are subject to each program’s own policy.
 
-- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
+- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://cdn.verdaccio.dev/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
 
 Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
 

crowdin.yaml

@@ -0,0 +1,20 @@
+project_id_env: CROWDIN_VERDACCIO_PROJECT_ID
+api_token_env: CROWDIN_VERDACCIO_API_KEY
+
+preserve_hierarchy: true
+
+files:
+  [
+    {
+      source: 'packages/plugins/ui-theme/src/i18n/crowdin/**/*',
+      translation: '/packages/plugins/ui-theme/src/i18n/download_translations/%locale%/**/%original_file_name%',
+    },
+    {
+      source: '/website/i18n/en/**/*',
+      translation: '/website/i18n/%locale%/**/%original_file_name%',
+    },
+    {
+      source: '/website/docs/**/*',
+      translation: '/website/i18n/%locale%/docusaurus-plugin-content-docs/current/**/%original_file_name%',
+    }
+  ]

docker-examples/v4/README.md

@@ -2,23 +2,23 @@
 
 #### Proxies
 
-- [Docker + Apache + Verdaccio](v4/apache-verdaccio/README.md)
-- [Docker + Nginx + Verdaccio](v4/reverse_proxy/nginx/README.md)
-- [Docker + https-portal Example](v4/https-portal-example/README.md)
+- [Docker + Apache + Verdaccio](apache-verdaccio/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
+- [Docker + https-portal Example](https-portal-example/README.md)
 
 #### Plugins
 
-- [Docker + Uplinks Multi Registry](v4/multi-registry-uplink/README.md)
-- [Docker + Local Storage](v4/docker-local-storage-volume/readme.md)
-- [Docker + External Plugins](v4/docker-plugin-external/README.md)
+- [Docker + Uplinks Multi Registry](multi-registry-uplink/README.md)
+- [Docker + Local Storage](docker-local-storage-volume/readme.md)
+- [Docker + External Plugins](docker-plugin-external/README.md)
 
 #### Auth
 
-- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](v4/ldap-verdaccio/readme.md) by **@kopax**
+- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](ldap-verdaccio/readme.md) by **@kopax**
 - [Docker + Gitlab](gitlab-verdaccio/README.md)
 - [Docker + Active Directory](https://github.com/Mateus-Oli/verdaccio-ad-docker)
 
 #### Storage
 
-- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](v4/amazon-s3-docker-example/v4/README.md)
+- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](amazon-s3-docker-example/README.md)
 - [Docker + Minio](https://github.com/barolab/verdaccio-minio/tree/master/example)

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/index.js

@@ -10,7 +10,7 @@ let _localMemory = require('./local-memory');
 let _localMemory2 = _interopRequireDefault(_localMemory);
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : { default: obj };
+  return obj && obj.__esModule ? obj : {default: obj};
 }
 
 exports.LocalMemory = _localMemory2.default;

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/local-memory.js

@@ -9,7 +9,7 @@ let _memoryHandler = require('./memory-handler');
 let _memoryHandler2 = _interopRequireDefault(_memoryHandler);
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : { default: obj };
+  return obj && obj.__esModule ? obj : {default: obj};
 }
 
 const DEFAULT_LIMIT = 1000;
@@ -43,8 +43,8 @@ class LocalMemory {
       cb(null);
     } else {
       this.logger.info(
-        { limit: this.limit },
-        'Storage memory has reached limit of @{limit} packages'
+          {limit: this.limit},
+          'Storage memory has reached limit of @{limit} packages',
       );
       cb(new Error('Storage memory has reached limit of limit packages'));
     }

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/memory-handler.js

@@ -16,7 +16,7 @@ let _memoryFs2 = _interopRequireDefault(_memoryFs);
 let _streams = require('@verdaccio/streams');
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : { default: obj };
+  return obj && obj.__esModule ? obj : {default: obj};
 }
 
 // $FlowFixMe
@@ -111,8 +111,8 @@ class MemoryHandler {
     const uploadStream = new _streams.UploadTarball();
     const temporalName = `/${name}`;
 
-    process.nextTick(function () {
-      fs.exists(temporalName, function (exists) {
+    process.nextTick(function() {
+      fs.exists(temporalName, function(exists) {
         if (exists) {
           return uploadStream.emit('error', fSError(fileExist));
         }
@@ -122,7 +122,7 @@ class MemoryHandler {
 
           uploadStream.pipe(file);
 
-          uploadStream.done = function () {
+          uploadStream.done = function() {
             const onEnd = function onEnd() {
               uploadStream.emit('success');
             };
@@ -130,7 +130,7 @@ class MemoryHandler {
             uploadStream.on('end', onEnd);
           };
 
-          uploadStream.abort = function () {
+          uploadStream.abort = function() {
             uploadStream.emit('error', fSError('transmision aborted', 400));
             file.end();
           };
@@ -150,8 +150,8 @@ class MemoryHandler {
 
     const readTarballStream = new _streams.ReadTarball();
 
-    process.nextTick(function () {
-      fs.exists(pathName, function (exists) {
+    process.nextTick(function() {
+      fs.exists(pathName, function(exists) {
         if (!exists) {
           readTarballStream.emit('error', noPackageFoundError());
         } else {
@@ -164,7 +164,7 @@ class MemoryHandler {
             readTarballStream.emit('error', error);
           });
 
-          readTarballStream.abort = function () {
+          readTarballStream.abort = function() {
             readStream.destroy(fSError('read has been aborted', 400));
           };
         }

docker-examples/v4/reverse_proxy/nginx/relative_path/nginx/Dockerfile

@@ -1,2 +1,2 @@
-FROM nginx:1.14.2-alpine
+FROM nginx:1.21-alpine
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf

docker-examples/v4/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx
+FROM nginx:1
 
 COPY cert.crt /etc/nginx/cert.crt
 COPY cert.key /etc/nginx/cert.key

docker-examples/v4/reverse_proxy/nginx/relative_path/storage/verdaccio/package.json

@@ -55919,7 +55919,6 @@
         "@babel/plugin-transform-async-to-generator": "7.2.0",
         "@babel/plugin-transform-classes": "7.2.2",
         "@babel/plugin-transform-runtime": "7.2.0",
-        "@babel/polyfill": "7.2.3",
         "@babel/preset-env": "7.2.3",
         "@babel/preset-flow": "7.0.0",
         "@babel/preset-react": "7.0.0",

docker-examples/v5/README.md

@@ -2,4 +2,4 @@
 
 > Before run examples, build the local image by running `pnpm docker`. 
 
-- [Docker + Nginx + Verdaccio](v5/reverse_proxy/nginx/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)

docker-examples/v5/reverse_proxy/nginx/relative_path/nginx/Dockerfile

@@ -1,2 +1,2 @@
-FROM nginx:1.14.2-alpine
+FROM nginx:1.21-alpine
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf

docker-examples/v5/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx
+FROM nginx:1
 
 COPY cert.crt /etc/nginx/cert.crt
 COPY cert.key /etc/nginx/cert.key

docker-examples/v5/reverse_proxy/nginx_relative/nginx/Dockerfile

@@ -1,2 +1,2 @@
-FROM nginx:1.14.2-alpine
+FROM nginx:1.21-alpine
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf

docker-examples/v5/reverse_proxy/nginx_relative/nginx_ssl/Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx
+FROM nginx:1
 
 COPY cert.crt /etc/nginx/cert.crt
 COPY cert.key /etc/nginx/cert.key

docs/env.variables.md

@@ -48,3 +48,7 @@ $ VERDACCIO_FORWARDED_PROTO=CloudFront-Forwarded-Proto verdaccio --listen 5000
 #### VERDACCIO_STORAGE_PATH
 
 By default, the storage is taken from config file, but using this variable allows to set it from environment variable.
+
+#### VERDACCIO_STORAGE_NAME
+
+The database name for `@verdaccio/local-storge` is by default `.verdaccio-db.json`, but this can be update by using this variable.

docs/migration-v5-to-v6.md

@@ -0,0 +1,80 @@
+# Migration guide from Verdaccio 5 to Verdaccio 6
+
+Notes regarding breaking changes for next major release.
+
+> This list might growth over the development.
+
+## Breaking changes
+
+### New node-api interface [#2165](https://github.com/verdaccio/verdaccio/pull/2165)
+
+If you are using the node-api, the new structure is Promise based and less arguments.
+
+```js
+import { runServer } from '@verdaccio/node-api';
+// or
+import { runServer } from 'verdaccio';
+const app = await runServer(); // default configuration
+const app = await runServer('./config/config.yaml');
+const app = await runServer({ configuration });
+app.listen(4000, (event) => {
+  // do something
+});
+```
+
+### allow other password hashing algorithms [#1917](https://github.com/verdaccio/verdaccio/pull/1917)
+
+The current implementation of the `htpasswd` module supports multiple hash formats on verify, but only `crypt` on sign in.
+`crypt` is an insecure old format, so to improve the security of the new `verdaccio` release we introduce the support of multiple hash algorithms on sign in step.
+
+#### New hashing algorithms
+
+The new possible hash algorithms to use are `bcrypt`, `md5`, `sha1`. `bcrypt` is chosen as a default, because of its customizable complexity and overall reliability. You can read more about them [here](https://httpd.apache.org/docs/2.4/misc/password_encryptions.html).
+
+Two new properties are added to `auth` section in the configuration file:
+
+- `algorithm` to choose the way you want to hash passwords.
+- `rounds` is used to determine `bcrypt` complexity. So one can improve security according to increasing computational power.
+
+Example of the new `auth` config file section:
+
+```yaml
+auth:
+htpasswd:
+  file: ./htpasswd
+  max_users: 1000
+  # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+  algorithm: bcrypt
+  # Rounds number for "bcrypt", will be ignored for other algorithms.
+  rounds: 10
+```
+
+### Refactor config module, experiments renamed to flags [#1996](https://github.com/verdaccio/verdaccio/pull/1996)
+
+- The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
+
+```js
+flags: token: false;
+search: false;
+```
+
+- The `self_path` property from the config file is being removed in favor of `config_file` full path.
+- Refactor `config` module, better types and utilities
+
+### legacy token signature by removing crypto.createDecipher is deprecated [#1953](https://github.com/verdaccio/verdaccio/pull/1953)
+
+- Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
+- **The new signature invalidates all previous tokens generated by Verdaccio 5 or previous versions**.
+- The secret key must have 32 characters long
+  > Remediation, update `.verdaccio-db.json` secret field with a secret key with 32 characters.
+
+#### New environment variables
+
+Introduce environment variables for legacy tokens.
+
+- `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+- `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
+
+#### @verdaccio/commons-api migration
+
+The package has been removed in favor of `@verdaccio/core` with a similar API, check API documentation for further details.

docs/where-are-docs.md

@@ -1,5 +0,0 @@
-## Where are the docs now?
-
-The documentation was relocated to the following website:
-
-https://github.com/verdaccio/website

netlify.toml

@@ -0,0 +1,19 @@
+[build]
+  command = "pnpm build"
+  publish = "build/"
+
+[build.environment]
+  NPM_FLAGS="--prefix=/dev/null"
+  NODE_VERSION = "14"
+
+[context.production]
+  command = "pnpm netlify:build:production"
+
+[context.deploy-preview]
+  command = "pnpm netlify:build:deployPreview"
+
+[context.branch-deploy]
+  command = "pnpm netlify:build:deployPreview"
+
+[[plugins]]
+package = "../.netlify/netlify-plugin-pnpm"

package.json

@@ -1,4 +1,6 @@
 {
+  "private": true,
+  "name": "verdaccio-dev",
   "author": {
     "name": "Verdaccio Maintainers",
     "email": "verdaccio.npm@gmail.com"
@@ -8,159 +10,138 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "homepage": "https://verdaccio.org",
-  "private": true,
   "funding": {
     "type": "opencollective",
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@babel/cli": "7.13.14",
-    "@babel/core": "7.13.15",
-    "@babel/node": "7.13.13",
-    "@babel/plugin-proposal-class-properties": "7.13.0",
-    "@babel/plugin-proposal-decorators": "7.13.15",
-    "@babel/plugin-proposal-export-namespace-from": "7.12.13",
-    "@babel/plugin-proposal-function-sent": "7.12.13",
-    "@babel/plugin-proposal-json-strings": "7.13.8",
-    "@babel/plugin-proposal-nullish-coalescing-operator": "7.13.8",
-    "@babel/plugin-proposal-numeric-separator": "7.12.13",
-    "@babel/plugin-proposal-object-rest-spread": "7.13.8",
-    "@babel/plugin-proposal-optional-chaining": "7.13.12",
-    "@babel/plugin-proposal-throw-expressions": "7.12.13",
+    "@babel/cli": "7.15.4",
+    "@babel/core": "7.15.5",
+    "@babel/node": "7.15.4",
+    "@babel/plugin-proposal-class-properties": "7.14.5",
+    "@babel/plugin-proposal-decorators": "7.15.4",
+    "@babel/plugin-proposal-export-namespace-from": "7.14.5",
+    "@babel/plugin-proposal-function-sent": "7.14.5",
+    "@babel/plugin-proposal-json-strings": "7.14.5",
+    "@babel/plugin-proposal-nullish-coalescing-operator": "7.14.5",
+    "@babel/plugin-proposal-numeric-separator": "7.14.5",
+    "@babel/plugin-proposal-object-rest-spread": "7.14.7",
+    "@babel/plugin-proposal-optional-chaining": "7.14.5",
+    "@babel/plugin-proposal-throw-expressions": "7.14.5",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
-    "@babel/plugin-transform-async-to-generator": "7.13.0",
-    "@babel/plugin-transform-classes": "7.13.0",
-    "@babel/plugin-transform-runtime": "7.13.15",
-    "@babel/polyfill": "7.12.1",
-    "@babel/preset-env": "7.13.15",
-    "@babel/preset-react": "7.13.13",
-    "@babel/preset-typescript": "7.13.0",
-    "@babel/register": "7.13.14",
-    "@babel/runtime": "7.13.10",
-    "@changesets/changelog-github": "^0.2.8",
-    "@changesets/cli": "^2.15.0",
-    "@changesets/get-dependents-graph": "^1.2.0",
-    "@commitlint/cli": "8.3.5",
-    "@commitlint/config-conventional": "8.2.0",
-    "@octokit/rest": "17.0.0",
-    "@types/async": "3.2.5",
+    "@babel/plugin-transform-async-to-generator": "7.14.5",
+    "@babel/plugin-transform-classes": "7.15.4",
+    "@babel/plugin-transform-runtime": "7.15.0",
+    "@babel/preset-env": "7.15.4",
+    "@babel/preset-react": "7.14.5",
+    "@babel/preset-typescript": "7.15.0",
+    "@babel/register": "7.15.3",
+    "@babel/runtime": "7.15.4",
+    "@changesets/changelog-github": "0.2.8",
+    "@changesets/cli": "2.15.0",
+    "@changesets/get-dependents-graph": "1.2.2",
+    "@crowdin/cli": "3.6.5",
+    "@types/async": "3.2.7",
+    "@types/autocannon": "4.1.1",
     "@types/autosuggest-highlight": "3.1.1",
     "@types/express": "4.17.6",
-    "@types/http-errors": "1.8.0",
-    "@types/jest": "^26.0.20",
-    "@types/js-base64": "3.0.0",
-    "@types/lodash": "4.14.167",
-    "@types/lowdb": "^1.0.9",
-    "@types/mime": "2.0.2",
-    "@types/minimatch": "3.0.3",
-    "@types/node": "^14.14.7",
-    "@types/react": "16.14.2",
-    "@types/react-autosuggest": "10.0.1",
-    "@types/react-dom": "^16.9.10",
-    "@types/react-router-dom": "5.1.6",
-    "@types/react-virtualized": "9.21.10",
-    "@types/request": "2.48.5",
-    "@types/semver": "7.3.4",
-    "@types/supertest": "2.0.10",
-    "@types/testing-library__jest-dom": "^5.9.5",
-    "@types/validator": "^13.1.3",
-    "@types/webpack": "^4.41.26",
-    "@types/webpack-env": "1.16.0",
-    "@typescript-eslint/eslint-plugin": "4.13.0",
-    "@typescript-eslint/parser": "4.13.0",
+    "@types/http-errors": "1.8.1",
+    "@types/jest": "27.0.1",
+    "@types/lodash": "4.14.172",
+    "@types/mime": "2.0.3",
+    "@types/minimatch": "3.0.5",
+    "@types/node": "14.6.0",
+    "@types/request": "2.48.7",
+    "@types/semver": "7.3.8",
+    "@types/supertest": "2.0.11",
+    "@types/testing-library__jest-dom": "5.14.1",
+    "@types/validator": "13.6.3",
+    "@types/webpack": "5.28.0",
+    "@types/webpack-env": "1.16.2",
+    "@typescript-eslint/eslint-plugin": "4.30.0",
+    "@typescript-eslint/parser": "4.30.0",
+    "@verdaccio/benchmark": "workspace:*",
+    "@verdaccio/eslint-config": "workspace:*",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-theme": "workspace:*",
+    "autocannon": "7.4.0",
     "babel-core": "7.0.0-bridge.0",
     "babel-eslint": "10.1.0",
-    "babel-jest": "26.6.3",
+    "babel-jest": "27.1.0",
     "babel-plugin-dynamic-import-node": "2.3.3",
-    "babel-plugin-emotion": "11.0.0",
-    "codecov": "3.8.1",
-    "concurrently": "^5.3.0",
-    "core-js": "^3.10.1",
+    "babel-plugin-emotion": "10.2.2",
+    "codecov": "3.8.3",
+    "concurrently": "6.2.1",
+    "core-js": "3.17.2",
     "cross-env": "7.0.3",
+    "debug": "4.3.2",
     "detect-secrets": "1.0.6",
-    "eslint": "7.19.0",
-    "eslint-config-google": "0.14.0",
-    "eslint-config-prettier": "7.2.0",
-    "eslint-plugin-babel": "5.3.1",
-    "eslint-plugin-import": "2.22.1",
-    "eslint-plugin-jest": "24.1.3",
-    "eslint-plugin-jsx-a11y": "6.4.1",
-    "eslint-plugin-react": "7.22.0",
-    "eslint-plugin-react-hooks": "4.2.0",
-    "eslint-plugin-simple-import-sort": "7.0.0",
-    "eslint-plugin-verdaccio": "9.6.1",
-    "fs-extra": "9.1.0",
-    "get-stdin": "7.0.0",
-    "husky": "2.7.0",
+    "eslint": "7.32.0",
+    "fs-extra": "10.0.0",
+    "husky": "7.0.2",
     "in-publish": "2.0.1",
-    "jest": "26.6.3",
-    "jest-environment-jsdom": "26.6.2",
-    "jest-environment-jsdom-global": "^2.0.4",
-    "jest-environment-node": "26.6.2",
-    "jest-fetch-mock": "3.0.3",
-    "jest-junit": "11.0.1",
-    "kleur": "4.1.4",
-    "lint-staged": "8.2.1",
+    "jest": "27.1.0",
+    "jest-environment-jsdom": "27.1.0",
+    "jest-environment-jsdom-global": "3.0.0",
+    "jest-environment-node": "27.1.0",
+    "jest-junit": "12.2.0",
+    "kleur": "3.0.3",
+    "lint-staged": "11.1.2",
     "nock": "12.0.3",
-    "nodemon": "^2.0.7",
+    "node-fetch": "3.0.0-beta.6-exportfix",
+    "nodemon": "2.0.12",
     "npm-run-all": "4.1.5",
-    "prettier": "2.2.1",
+    "prettier": "2.3.2",
     "rimraf": "3.0.2",
-    "selfsigned": "1.10.8",
-    "supertest": "4.0.2",
-    "ts-node": "^9.1.1",
-    "typescript": "^4.2.4",
-    "update-ts-references": "2.3.0",
-    "verdaccio": "^5.0.1",
+    "selfsigned": "1.10.11",
+    "supertest": "6.1.6",
+    "ts-node": "10.2.1",
+    "typescript": "4.4.2",
+    "update-ts-references": "2.4.0",
+    "verdaccio": "5.1.3",
     "verdaccio-audit": "workspace:*",
     "verdaccio-auth-memory": "workspace:*",
     "verdaccio-htpasswd": "workspace:*",
     "verdaccio-memory": "workspace:*"
   },
   "scripts": {
+    "husky:pre-commit": "lint-staged",
     "clean": "pnpm recursive run clean",
-    "build": "pnpm recursive run build",
+    "build": "pnpm recursive run build --filter=!@verdaccio/website",
     "docker": "docker build -t verdaccio/verdaccio:local . --no-cache",
     "format": "prettier --write \"**/*.{js,jsx,ts,tsx,json,yml,yaml,md}\"",
     "format:check": "prettier --check \"**/*.{js,jsx,ts,tsx,json,yml,yaml,md}\"",
-    "lint": "eslint \"**/*.{js,jsx,ts,tsx}\"",
+    "lint": "eslint  --max-warnings 60 \"**/*.{js,jsx,ts,tsx}\"",
     "test": "pnpm recursive test --filter ./packages",
     "test:e2e:cli": "pnpm test --filter ...@verdaccio/e2e-cli",
     "test:e2e:ui": "pnpm test --filter ...@verdaccio/e2e-ui",
     "start": "concurrently --kill-others \"pnpm _start:server\" \"pnpm _start:web\"",
+    "benchmark:hyper": "verdaccio-benchmark hyper -r ./hyper-results.json",
+    "benchmark:api": "verdaccio-benchmark api",
+    "benchmark:submit": "pnpm ts-node ./scripts/submit-metrics.ts",
     "start:watch": "concurrently --kill-others \"pnpm _build:watch\" \"pnpm _start:server\" \"pnpm _debug:reload\"",
     "_build:watch": "pnpm run --parallel watch --filter ./packages",
-    "_start:server": "node packages/verdaccio/debug/bootstrap.js --listen 8000",
+    "_start:server": "node --inspect packages/verdaccio/debug/bootstrap.js --listen 8000",
     "_start:web": "pnpm start --filter ...@verdaccio/ui-theme",
     "_debug:reload": "nodemon -d 3 packages/verdaccio/debug/bootstrap.js",
     "start:ts": "ts-node packages/verdaccio/src/start.ts -- --listen 8000",
-    "debug": "node --inspect packages/verdaccio/debug/bootstrap.js",
-    "debug:break": "node --inspect-brk packages/verdaccio/debug/bootstrap.js",
-    "website:lint": "cd website && yarn lint",
-    "website:develop": "cd website && yarn develop",
-    "website:build": "cd website && yarn build",
+    "debug": "node --trace-warnings --trace-uncaught --inspect packages/verdaccio/debug/bootstrap.js",
+    "debug:break": "node --trace-warnings --trace-uncaught --inspect-brk packages/verdaccio/debug/bootstrap.js",
     "changeset": "changeset",
     "changeset:check": "changeset status --since-master",
     "ci:version": "run-s ci:version:changeset ci:version:install",
     "ci:version:install": "pnpm install --frozen-lockfile=false",
     "ci:version:changeset": "changeset version",
     "ci:publish": "changeset publish",
-    "ts:ref": "update-ts-references --discardComments"
+    "ts:ref": "update-ts-references --discardComments",
+    "website": "pnpm build --filter ...@verdaccio/website",
+    "crowdin:upload": "crowdin upload sources --auto-update --config ./crowdin.yaml",
+    "crowdin:download": "crowdin download --verbose --config ./crowdin.yaml",
+    "crowdin:sync": "pnpm crowdin:upload && pnpm crowdin:download --verbose",
+    "postinstall": "husky install"
   },
   "license": "MIT",
-  "commitlint": {
-    "extends": [
-      "@commitlint/config-conventional"
-    ]
-  },
-  "husky": {
-    "hooks": {
-      "pre-commit": "lint-staged"
-    }
-  },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,json,yml,yaml,md}": "prettier --write",
     "*.{js,jsx,ts,tsx}": "eslint --cache --fix"

packages/api/CHANGELOG.md

@@ -1,5 +1,136 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.16
+
+### Major Changes
+
+- 794af76c: Remove Node 12 support
+
+  - We need move to the new `undici` and does not support Node.js 12
+
+### Minor Changes
+
+- b702ea36: abort search request support for proxy
+- 154b2ecd: refactor: remove @verdaccio/commons-api in favor @verdaccio/core and remove duplications
+
+### Patch Changes
+
+- Updated dependencies [794af76c]
+- Updated dependencies [b702ea36]
+- Updated dependencies [154b2ecd]
+  - @verdaccio/auth@6.0.0-6-next.13
+  - @verdaccio/config@6.0.0-6-next.9
+  - @verdaccio/core@6.0.0-6-next.2
+  - @verdaccio/tarball@11.0.0-6-next.8
+  - @verdaccio/hooks@6.0.0-6-next.8
+  - @verdaccio/logger@6.0.0-6-next.6
+  - @verdaccio/middleware@6.0.0-6-next.13
+  - @verdaccio/store@6.0.0-6-next.14
+  - @verdaccio/utils@6.0.0-6-next.7
+
+## 6.0.0-6-next.15
+
+### Patch Changes
+
+- Updated dependencies [2c594910]
+  - @verdaccio/logger@6.0.0-6-next.5
+  - @verdaccio/auth@6.0.0-6-next.12
+  - @verdaccio/hooks@6.0.0-6-next.7
+  - @verdaccio/middleware@6.0.0-6-next.12
+  - @verdaccio/store@6.0.0-6-next.13
+
+## 6.0.0-6-next.14
+
+### Major Changes
+
+- 459b6fa7: refactor: search v1 endpoint and local-database
+
+  - refactor search `api v1` endpoint, improve performance
+  - remove usage of `async` dependency https://github.com/verdaccio/verdaccio/issues/1225
+  - refactor method storage class
+  - create new module `core` to reduce the ammount of modules with utilities
+  - use `undici` instead `node-fetch`
+  - use `fastify` instead `express` for functional test
+
+  ### Breaking changes
+
+  - plugin storage API changes
+  - remove old search endpoint (return 404)
+  - filter local private packages at plugin level
+
+  The storage api changes for methods `get`, `add`, `remove` as promise base. The `search` methods also changes and recieves a `query` object that contains all query params from the client.
+
+  ```ts
+  export interface IPluginStorage<T> extends IPlugin {
+    add(name: string): Promise<void>;
+    remove(name: string): Promise<void>;
+    get(): Promise<any>;
+    init(): Promise<void>;
+    getSecret(): Promise<string>;
+    setSecret(secret: string): Promise<any>;
+    getPackageStorage(packageInfo: string): IPackageStorage;
+    search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
+    saveToken(token: Token): Promise<any>;
+    deleteToken(user: string, tokenKey: string): Promise<any>;
+    readTokens(filter: TokenFilter): Promise<Token[]>;
+  }
+  ```
+
+### Patch Changes
+
+- Updated dependencies [459b6fa7]
+  - @verdaccio/auth@6.0.0-6-next.11
+  - @verdaccio/config@6.0.0-6-next.8
+  - @verdaccio/commons-api@11.0.0-6-next.4
+  - @verdaccio/core@6.0.0-6-next.1
+  - @verdaccio/hooks@6.0.0-6-next.6
+  - @verdaccio/store@6.0.0-6-next.12
+  - @verdaccio/utils@6.0.0-6-next.6
+  - @verdaccio/middleware@6.0.0-6-next.11
+  - @verdaccio/tarball@11.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.4
+
+## 6.0.0-6-next.13
+
+### Patch Changes
+
+- Updated dependencies [df0da3d6]
+  - @verdaccio/hooks@6.0.0-6-next.5
+  - @verdaccio/auth@6.0.0-6-next.10
+  - @verdaccio/store@6.0.0-6-next.11
+  - @verdaccio/middleware@6.0.0-6-next.10
+
+## 6.0.0-6-next.12
+
+### Patch Changes
+
+- Updated dependencies [d2c65da9]
+  - @verdaccio/utils@6.0.0-6-next.5
+  - @verdaccio/auth@6.0.0-6-next.9
+  - @verdaccio/config@6.0.0-6-next.7
+  - @verdaccio/tarball@11.0.0-6-next.6
+  - @verdaccio/middleware@6.0.0-6-next.9
+  - @verdaccio/store@6.0.0-6-next.10
+  - @verdaccio/hooks@6.0.0-6-next.4
+
+## 6.0.0-6-next.11
+
+### Patch Changes
+
+- Updated dependencies [5ddfa526]
+  - @verdaccio/store@6.0.0-6-next.9
+
+## 6.0.0-6-next.10
+
+### Patch Changes
+
+- Updated dependencies [1b217fd3]
+  - @verdaccio/config@6.0.0-6-next.6
+  - @verdaccio/auth@6.0.0-6-next.8
+  - @verdaccio/hooks@6.0.0-6-next.4
+  - @verdaccio/store@6.0.0-6-next.8
+  - @verdaccio/middleware@6.0.0-6-next.8
+
 ## 6.0.0-6-next.9
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "6.0.0-6-next.9",
+  "version": "6.0.0-6-next.16",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -25,7 +25,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=10",
+    "node": ">=14",
     "npm": ">=6"
   },
   "scripts": {
@@ -39,28 +39,31 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.7",
-    "@verdaccio/commons-api": "workspace:11.0.0-alpha.3",
-    "@verdaccio/config": "workspace:6.0.0-6-next.5",
-    "@verdaccio/hooks": "workspace:6.0.0-6-next.4",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.4",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.7",
-    "@verdaccio/store": "workspace:6.0.0-6-next.7",
-    "@verdaccio/tarball": "workspace:11.0.0-6-next.5",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.4",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.13",
+    "@verdaccio/config": "workspace:6.0.0-6-next.9",
+    "@verdaccio/core": "workspace:6.0.0-6-next.2",
+    "@verdaccio/hooks": "workspace:6.0.0-6-next.8",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.6",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.13",
+    "@verdaccio/store": "workspace:6.0.0-6-next.14",
+    "@verdaccio/tarball": "workspace:11.0.0-6-next.8",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.7",
+    "abortcontroller-polyfill": "1.7.3",
     "cookies": "0.8.0",
-    "debug": "^4.1.1",
+    "debug": "4.3.2",
     "express": "4.17.1",
-    "lodash": "^4.17.20",
-    "mime": "2.4.4",
-    "semver": "7.3.2"
+    "lodash": "4.17.21",
+    "mime": "2.5.2",
+    "semver": "7.3.5"
   },
   "devDependencies": {
-    "@verdaccio/server": "workspace:6.0.0-6-next.10",
-    "@verdaccio/types": "workspace:11.0.0-6-next.4",
+    "@types/node": "16.9.1",
+    "@verdaccio/server": "workspace:6.0.0-6-next.21",
+    "@verdaccio/types": "workspace:11.0.0-6-next.9",
+    "@verdaccio/helper": "1.0.0",
     "body-parser": "1.19.0",
-    "lodash": "^4.17.20",
-    "supertest": "next"
+    "lodash": "4.17.21",
+    "supertest": "6.1.6"
   },
   "funding": {
     "type": "opencollective",

packages/api/src/dist-tags.ts

@@ -3,13 +3,13 @@ import _ from 'lodash';
 import { Router } from 'express';
 
 import { media, allow } from '@verdaccio/middleware';
-import { API_MESSAGE, HTTP_STATUS, DIST_TAGS, VerdaccioError } from '@verdaccio/commons-api';
+import { constants, VerdaccioError } from '@verdaccio/core';
 import { Package } from '@verdaccio/types';
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { IAuth } from '@verdaccio/auth';
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
-export default function (route: Router, auth: IAuth, storage: IStorageHandler): void {
+export default function (route: Router, auth: IAuth, storage: Storage): void {
   const can = allow(auth);
   const tag_package_version = function (
     req: $RequestExtend,
@@ -26,8 +26,8 @@ export default function (route: Router, auth: IAuth, storage: IStorageHandler):
       if (err) {
         return next(err);
       }
-      res.status(HTTP_STATUS.CREATED);
-      return next({ ok: API_MESSAGE.TAG_ADDED });
+      res.status(constants.HTTP_STATUS.CREATED);
+      return next({ ok: constants.API_MESSAGE.TAG_ADDED });
     });
   };
 
@@ -58,9 +58,9 @@ export default function (route: Router, auth: IAuth, storage: IStorageHandler):
         if (err) {
           return next(err);
         }
-        res.status(HTTP_STATUS.CREATED);
+        res.status(constants.HTTP_STATUS.CREATED);
         return next({
-          ok: API_MESSAGE.TAG_REMOVED,
+          ok: constants.API_MESSAGE.TAG_REMOVED,
         });
       });
     }
@@ -79,7 +79,7 @@ export default function (route: Router, auth: IAuth, storage: IStorageHandler):
             return next(err);
           }
 
-          next(info[DIST_TAGS]);
+          next(info[constants.DIST_TAGS]);
         },
       });
     }
@@ -96,9 +96,9 @@ export default function (route: Router, auth: IAuth, storage: IStorageHandler):
           if (err) {
             return next(err);
           }
-          res.status(HTTP_STATUS.CREATED);
+          res.status(constants.HTTP_STATUS.CREATED);
           return next({
-            ok: API_MESSAGE.TAG_UPDATED,
+            ok: constants.API_MESSAGE.TAG_UPDATED,
           });
         }
       );

packages/api/src/index.ts

@@ -1,6 +1,4 @@
-import _ from 'lodash';
-import express, { Express } from 'express';
-
+import express, { Router } from 'express';
 import {
   match,
   validateName,
@@ -9,9 +7,10 @@ import {
   antiLoop,
 } from '@verdaccio/middleware';
 import { IAuth } from '@verdaccio/auth';
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { Config } from '@verdaccio/types';
 import bodyParser from 'body-parser';
+import semver from 'semver';
 
 import whoami from './whoami';
 import ping from './ping';
@@ -25,11 +24,11 @@ import profile from './v1/profile';
 import token from './v1/token';
 import v1Search from './v1/search';
 
-export default function (
-  config: Config,
-  auth: IAuth,
-  storage: IStorageHandler
-): Express.Application {
+if (semver.lte(process.version, 'v15.0.0')) {
+  global.AbortController = require('abortcontroller-polyfill/dist/cjs-ponyfill').AbortController;
+}
+
+export default function (config: Config, auth: IAuth, storage: Storage): Router {
   /* eslint new-cap:off */
   const app = express.Router();
   /* eslint new-cap:off */
@@ -58,19 +57,15 @@ export default function (
   whoami(app);
   pkg(app, auth, storage, config);
   profile(app, auth);
-  search(app, auth, storage);
+  // @deprecated endpoint, 404 by default
+  search(app);
   user(app, auth, config);
   distTags(app, auth, storage);
   publish(app, auth, storage, config);
   ping(app);
   stars(app, storage);
-
-  if (config?.flags?.search === true) {
-    v1Search(app, auth, storage);
-  }
-
-  if (config?.flags?.token === true) {
-    token(app, auth, storage, config);
-  }
+  // @ts-ignore
+  v1Search(app, auth, storage);
+  token(app, auth, storage, config);
   return app;
 }

packages/api/src/package.ts

@@ -3,11 +3,11 @@ import { Router } from 'express';
 import buildDebug from 'debug';
 
 import { allow } from '@verdaccio/middleware';
-import { getVersion, ErrorCode } from '@verdaccio/utils';
-import { HEADERS, DIST_TAGS, API_ERROR } from '@verdaccio/commons-api';
+import { getVersion } from '@verdaccio/utils';
+import { HEADERS, DIST_TAGS, API_ERROR, errorUtils } from '@verdaccio/core';
 import { Config, Package } from '@verdaccio/types';
 import { IAuth } from '@verdaccio/auth';
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { convertDistRemoteToLocalTarballUrls } from '@verdaccio/tarball';
 import { $RequestExtend, $ResponseExtend, $NextFunctionVer } from '../types/custom';
 
@@ -34,12 +34,7 @@ const downloadStream = (
   stream.pipe(res);
 };
 
-export default function (
-  route: Router,
-  auth: IAuth,
-  storage: IStorageHandler,
-  config: Config
-): void {
+export default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {
   const can = allow(auth);
   // TODO: anonymous user?
   route.get(
@@ -85,7 +80,7 @@ export default function (
         }
 
         debug('package version not found %o', queryVersion);
-        return next(ErrorCode.getNotFound(`${API_ERROR.VERSION_NOT_EXIST}: ${queryVersion}`));
+        return next(errorUtils.getNotFound(`${API_ERROR.VERSION_NOT_EXIST}: ${queryVersion}`));
       };
 
       debug('get package name %o', name);

packages/api/src/publish.ts

@@ -4,14 +4,21 @@ import mime from 'mime';
 import { Router } from 'express';
 import buildDebug from 'debug';
 
-import { API_MESSAGE, HEADERS, DIST_TAGS, API_ERROR, HTTP_STATUS } from '@verdaccio/commons-api';
-import { validateMetadata, isObject, ErrorCode, hasDiffOneKey } from '@verdaccio/utils';
+import {
+  API_MESSAGE,
+  HEADERS,
+  DIST_TAGS,
+  API_ERROR,
+  HTTP_STATUS,
+  errorUtils,
+} from '@verdaccio/core';
+import { validateMetadata, isObject, hasDiffOneKey } from '@verdaccio/utils';
 import { media, expectJson, allow } from '@verdaccio/middleware';
 import { notify } from '@verdaccio/hooks';
-import { Config, Callback, MergeTags, Version, Package } from '@verdaccio/types';
+import { Config, Callback, MergeTags, Version, Package, CallbackAction } from '@verdaccio/types';
 import { logger } from '@verdaccio/logger';
 import { IAuth } from '@verdaccio/auth';
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { $RequestExtend, $ResponseExtend, $NextFunctionVer } from '../types/custom';
 
 import star from './star';
@@ -22,7 +29,7 @@ const debug = buildDebug('verdaccio:api:publish');
 export default function publish(
   router: Router,
   auth: IAuth,
-  storage: IStorageHandler,
+  storage: Storage,
   config: Config
 ): void {
   const can = allow(auth);
@@ -138,7 +145,7 @@ export default function publish(
 /**
  * Publish a package
  */
-export function publishPackage(storage: IStorageHandler, config: Config, auth: IAuth): any {
+export function publishPackage(storage: Storage, config: Config, auth: IAuth): any {
   const starApi = star(storage);
   return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
     const packageName = req.params.package;
@@ -172,7 +179,7 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
     /**
      * Add new package version in storage
      */
-    const createVersion = function (version: string, metadata: Version, cb: Callback): void {
+    const createVersion = function (version: string, metadata: Version, cb: CallbackAction): void {
       debug('add a new package version %o to storage %o', version, metadata);
       storage.addVersion(packageName, version, metadata, null, cb);
     };
@@ -180,7 +187,7 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
     /**
      * Add new tags in storage
      */
-    const addTags = function (tags: MergeTags, cb: Callback): void {
+    const addTags = function (tags: MergeTags, cb: CallbackAction): void {
       debug('add new tag %o to storage', packageName);
       storage.mergeTags(packageName, tags, cb);
     };
@@ -224,7 +231,7 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
         // if this happens in normal circumstances, report it as a bug
         debug('invalid body format');
         logger.info({ packageName }, `wrong package format on publish a package @{packageName}`);
-        return next(ErrorCode.getBadRequest(API_ERROR.UNSUPORTED_REGISTRY_CALL));
+        return next(errorUtils.getBadRequest(API_ERROR.UNSUPORTED_REGISTRY_CALL));
       }
 
       if (error && error.status !== HTTP_STATUS.CONFLICT) {
@@ -269,7 +276,7 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
                   req.remote_user,
                   `${metadataCopy.name}@${versionToPublish}`
                 );
-              } catch (error) {
+              } catch (error: any) {
                 debug(
                   'error on notify add a new tag %o',
                   `${metadataCopy.name}@${versionToPublish}`
@@ -319,10 +326,10 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
           afterChange(error, API_MESSAGE.PKG_CREATED, metadata);
         });
       }
-    } catch (error) {
+    } catch (error: any) {
       debug('error on publish, bad package format %o', packageName);
       logger.error({ packageName }, 'error on publish, bad package data for @{packageName}');
-      return next(ErrorCode.getBadData(API_ERROR.BAD_PACKAGE_DATA));
+      return next(errorUtils.getBadData(API_ERROR.BAD_PACKAGE_DATA));
     }
   };
 }
@@ -330,25 +337,27 @@ export function publishPackage(storage: IStorageHandler, config: Config, auth: I
 /**
  * un-publish a package
  */
-export function unPublishPackage(storage: IStorageHandler) {
-  return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
+export function unPublishPackage(storage: Storage) {
+  return async function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
     const packageName = req.params.package;
 
     logger.debug({ packageName }, `unpublishing @{packageName}`);
-    storage.removePackage(packageName, function (err) {
+    try {
+      await storage.removePackage(packageName);
+    } catch (err) {
       if (err) {
         return next(err);
       }
-      res.status(HTTP_STATUS.CREATED);
-      return next({ ok: API_MESSAGE.PKG_REMOVED });
-    });
+    }
+    res.status(HTTP_STATUS.CREATED);
+    return next({ ok: API_MESSAGE.PKG_REMOVED });
   };
 }
 
 /**
  * Delete tarball
  */
-export function removeTarball(storage: IStorageHandler) {
+export function removeTarball(storage: Storage) {
   return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
     const packageName = req.params.package;
     const { filename, revision } = req.params;
@@ -374,7 +383,7 @@ export function removeTarball(storage: IStorageHandler) {
 /**
  * Adds a new version
  */
-export function addVersion(storage: IStorageHandler) {
+export function addVersion(storage: Storage) {
   return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
     const { version, tag } = req.params;
     const packageName = req.params.package;
@@ -398,7 +407,7 @@ export function addVersion(storage: IStorageHandler) {
 /**
  * uploadPackageTarball
  */
-export function uploadPackageTarball(storage: IStorageHandler) {
+export function uploadPackageTarball(storage: Storage) {
   return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
     const packageName = req.params.package;
     const stream = storage.addTarball(packageName, req.params.filename);

packages/api/src/search.ts

@@ -1,102 +1,11 @@
-import { HEADERS } from '@verdaccio/commons-api';
+import { HTTP_STATUS } from '@verdaccio/core';
+import { logger } from '@verdaccio/logger';
 
-export default function (route, auth, storage): void {
-  // searching packages
-  route.get('/-/all(/since)?', function (req, res) {
-    let received_end = false;
-    let response_finished = false;
-    let processing_pkgs = 0;
-    let firstPackage = true;
-
-    res.status(200);
-    res.set(HEADERS.CONTENT_TYPE, HEADERS.JSON_CHARSET);
-
-    /*
-     * Offical NPM registry (registry.npmjs.org) no longer return whole database,
-     * They only return packages matched with keyword in `referer: search pkg-name`,
-     * And NPM client will request server in every search.
-     *
-     * The magic number 99999 was sent by NPM registry. Modify it may caused strange
-     * behaviour in the future.
-     *
-     * BTW: NPM will not return result if user-agent does not contain string 'npm',
-     * See: method 'request' in up-storage.js
-     *
-     * If there is no cache in local, NPM will request /-/all, then get response with
-     * _updated: 99999, 'Date' in response header was Mon, 10 Oct 1983 00:12:48 GMT,
-     * this will make NPM always query from server
-     *
-     * Data structure also different, whel request /-/all, response is an object, but
-     * when request /-/all/since, response is an array
-     */
-    const respShouldBeArray = req.path.endsWith('/since');
-    if (!respShouldBeArray) {
-      res.set('Date', 'Mon, 10 Oct 1983 00:12:48 GMT');
-    }
-    const check_finish = function (): void {
-      if (!received_end) {
-        return;
-      }
-      if (processing_pkgs) {
-        return;
-      }
-      if (response_finished) {
-        return;
-      }
-      response_finished = true;
-      if (respShouldBeArray) {
-        res.end(']\n');
-      } else {
-        res.end('}\n');
-      }
-    };
-
-    if (respShouldBeArray) {
-      res.write('[');
-    } else {
-      res.write('{"_updated":' + 99999);
-    }
-
-    const stream = storage.search(req.query.startkey || 0, { req: req });
-
-    stream.on('data', function each(pkg) {
-      processing_pkgs++;
-
-      auth.allow_access({ packageName: pkg.name }, req.remote_user, function (err, allowed) {
-        processing_pkgs--;
-
-        if (err) {
-          if (err.status && String(err.status).match(/^4\d\d$/)) {
-            // auth plugin returns 4xx user error,
-            // that's equivalent of !allowed basically
-            allowed = false;
-          } else {
-            stream.abort(err);
-          }
-        }
-
-        if (allowed) {
-          if (respShouldBeArray) {
-            res.write(`${firstPackage ? '' : ','}${JSON.stringify(pkg)}\n`);
-            if (firstPackage) {
-              firstPackage = false;
-            }
-          } else {
-            res.write(',\n' + JSON.stringify(pkg.name) + ':' + JSON.stringify(pkg));
-          }
-        }
-
-        check_finish();
-      });
-    });
-
-    stream.on('error', function () {
-      res.socket.destroy();
-    });
-
-    stream.on('end', function () {
-      received_end = true;
-      check_finish();
-    });
+export default function (route): void {
+  // TODO: next major version, remove this
+  route.get('/-/all(/since)?', function (_req, res) {
+    logger.warn('search endpoint has been removed, please use search v1');
+    res.status(HTTP_STATUS.NOT_FOUND);
+    res.json({ error: 'not found, endpoint was removed' });
   });
 }

packages/api/src/star.ts

@@ -1,15 +1,15 @@
-import { USERS, HTTP_STATUS } from '@verdaccio/commons-api';
+import { USERS, HTTP_STATUS } from '@verdaccio/core';
 import { Response } from 'express';
 import _ from 'lodash';
 import buildDebug from 'debug';
 
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { $RequestExtend, $NextFunctionVer } from '../types/custom';
 
 const debug = buildDebug('verdaccio:api:publish:star');
 
 export default function (
-  storage: IStorageHandler
+  storage: Storage
 ): (req: $RequestExtend, res: Response, next: $NextFunctionVer) => void {
   const validateInputs = (newUsers, localUsers, username, isStar): boolean => {
     const isExistlocalUsers = _.isNil(localUsers[username]) === false;
@@ -40,6 +40,7 @@ export default function (
     };
 
     debug('get package info package for %o', name);
+    // @ts-ignore
     storage.getPackage({
       name,
       req,

packages/api/src/stars.ts

@@ -1,15 +1,15 @@
 import _ from 'lodash';
 import { Response, Router } from 'express';
 
-import { USERS, HTTP_STATUS } from '@verdaccio/commons-api';
+import { USERS, HTTP_STATUS } from '@verdaccio/core';
 import { Package } from '@verdaccio/types';
 
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { $RequestExtend, $NextFunctionVer } from '../types/custom';
 
 type Packages = Package[];
 
-export default function (route: Router, storage: IStorageHandler): void {
+export default function (route: Router, storage: Storage): void {
   route.get(
     '/-/_view/starredByUser',
     (req: $RequestExtend, res: Response, next: $NextFunctionVer): void => {

packages/api/src/user.ts

@@ -2,14 +2,14 @@ import _ from 'lodash';
 import { Response, Router } from 'express';
 import buildDebug from 'debug';
 
-import { getAuthenticatedMessage, validatePassword, ErrorCode } from '@verdaccio/utils';
+import { getAuthenticatedMessage, validatePassword } from '@verdaccio/utils';
 import { getApiToken } from '@verdaccio/auth';
 import { logger } from '@verdaccio/logger';
 import { createRemoteUser } from '@verdaccio/config';
 
 import { Config, RemoteUser } from '@verdaccio/types';
 import { IAuth } from '@verdaccio/auth';
-import { API_ERROR, API_MESSAGE, HTTP_STATUS } from '@verdaccio/commons-api';
+import { API_ERROR, API_MESSAGE, HTTP_STATUS, errorUtils } from '@verdaccio/core';
 import { $RequestExtend, $NextFunctionVer } from '../types/custom';
 
 const debug = buildDebug('verdaccio:api:user');
@@ -47,7 +47,7 @@ export default function (route: Router, auth: IAuth, config: Config): void {
                 'authenticating for user @{username} failed. Error: @{err.message}'
               );
               return next(
-                ErrorCode.getCode(HTTP_STATUS.UNAUTHORIZED, API_ERROR.BAD_USERNAME_PASSWORD)
+                errorUtils.getCode(HTTP_STATUS.UNAUTHORIZED, API_ERROR.BAD_USERNAME_PASSWORD)
               );
             }
 
@@ -55,7 +55,7 @@ export default function (route: Router, auth: IAuth, config: Config): void {
             const token = await getApiToken(auth, config, restoredRemoteUser, password);
             debug('login: new token');
             if (!token) {
-              return next(ErrorCode.getUnauthorized());
+              return next(errorUtils.getUnauthorized());
             }
 
             res.status(HTTP_STATUS.CREATED);
@@ -73,7 +73,7 @@ export default function (route: Router, auth: IAuth, config: Config): void {
         if (validatePassword(password) === false) {
           debug('adduser: invalid password');
           // eslint-disable-next-line new-cap
-          return next(ErrorCode.getCode(HTTP_STATUS.BAD_REQUEST, API_ERROR.PASSWORD_SHORT()));
+          return next(errorUtils.getCode(HTTP_STATUS.BAD_REQUEST, API_ERROR.PASSWORD_SHORT()));
         }
 
         auth.add_user(name, password, async function (err, user): Promise<void> {
@@ -84,7 +84,7 @@ export default function (route: Router, auth: IAuth, config: Config): void {
               // and npm accepts only an 409 error.
               // So, changing status code here.
               return next(
-                ErrorCode.getCode(err.status, err.message) || ErrorCode.getConflict(err.message)
+                errorUtils.getCode(err.status, err.message) || errorUtils.getConflict(err.message)
               );
             }
             return next(err);
@@ -94,7 +94,7 @@ export default function (route: Router, auth: IAuth, config: Config): void {
             name && password ? await getApiToken(auth, config, user, password) : undefined;
           debug('adduser: new token %o', token);
           if (!token) {
-            return next(ErrorCode.getUnauthorized());
+            return next(errorUtils.getUnauthorized());
           }
 
           req.remote_user = user;

packages/api/src/v1/profile.ts

@@ -1,8 +1,8 @@
 import _ from 'lodash';
 import { Response, Router } from 'express';
 
-import { API_ERROR, APP_ERROR, HTTP_STATUS, SUPPORT_ERRORS } from '@verdaccio/commons-api';
-import { ErrorCode, validatePassword } from '@verdaccio/utils';
+import { API_ERROR, APP_ERROR, HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';
+import { validatePassword } from '@verdaccio/utils';
 import { IAuth } from '@verdaccio/auth';
 import { $RequestExtend, $NextFunctionVer } from '../../types/custom';
 
@@ -61,7 +61,7 @@ export default function (route: Router, auth: IAuth): void {
       if (_.isNil(password) === false) {
         if (validatePassword(password.new) === false) {
           /* eslint new-cap:off */
-          return next(ErrorCode.getCode(HTTP_STATUS.UNAUTHORIZED, API_ERROR.PASSWORD_SHORT()));
+          return next(errorUtils.getCode(HTTP_STATUS.UNAUTHORIZED, API_ERROR.PASSWORD_SHORT()));
           /* eslint new-cap:off */
         }
 
@@ -72,22 +72,22 @@ export default function (route: Router, auth: IAuth): void {
           (err, isUpdated): $NextFunctionVer => {
             if (_.isNull(err) === false) {
               return next(
-                ErrorCode.getCode(err.status, err.message) || ErrorCode.getConflict(err.message)
+                errorUtils.getCode(err.status, err.message) || errorUtils.getConflict(err.message)
               );
             }
 
             if (isUpdated) {
               return next(buildProfile(req.remote_user.name));
             }
-            return next(ErrorCode.getInternalError(API_ERROR.INTERNAL_SERVER_ERROR));
+            return next(errorUtils.getInternalError(API_ERROR.INTERNAL_SERVER_ERROR));
           }
         );
       } else if (_.isNil(tfa) === false) {
         return next(
-          ErrorCode.getCode(HTTP_STATUS.SERVICE_UNAVAILABLE, SUPPORT_ERRORS.TFA_DISABLED)
+          errorUtils.getCode(HTTP_STATUS.SERVICE_UNAVAILABLE, SUPPORT_ERRORS.TFA_DISABLED)
         );
       } else {
-        return next(ErrorCode.getCode(HTTP_STATUS.INTERNAL_ERROR, APP_ERROR.PROFILE_ERROR));
+        return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, APP_ERROR.PROFILE_ERROR));
       }
     }
   );

packages/api/src/v1/search.ts

@@ -1,106 +1,81 @@
-import semver from 'semver';
+import _ from 'lodash';
+import buildDebug from 'debug';
+import { logger } from '@verdaccio/logger';
+import { IAuth } from '@verdaccio/auth';
+import { HTTP_STATUS, searchUtils } from '@verdaccio/core';
+import { Storage } from '@verdaccio/store';
 import { Package } from '@verdaccio/types';
 
-function compileTextSearch(textSearch: string): (pkg: Package) => boolean {
-  const personMatch = (person, search) => {
-    if (typeof person === 'string') {
-      return person.includes(search);
-    }
+const debug = buildDebug('verdaccio:api:search');
 
-    if (typeof person === 'object') {
-      for (const field of Object.values(person)) {
-        if (typeof field === 'string' && field.includes(search)) {
-          return true;
+/**
+ * Endpoint for npm search v1
+ * Empty value
+ *  - {"objects":[],"total":0,"time":"Sun Jul 25 2021 14:09:11 GMT+0000 (Coordinated Universal Time)"}
+ * req: 'GET /-/v1/search?text=react&size=20&frpom=0&quality=0.65&popularity=0.98&maintenance=0.5'
+ */
+export default function (route, auth: IAuth, storage: Storage): void {
+  function checkAccess(pkg: any, auth: any, remoteUser): Promise<Package | null> {
+    return new Promise((resolve, reject) => {
+      auth.allow_access({ packageName: pkg?.package?.name }, remoteUser, function (err, allowed) {
+        if (err) {
+          if (err.status && String(err.status).match(/^4\d\d$/)) {
+            // auth plugin returns 4xx user error,
+            // that's equivalent of !allowed basically
+            allowed = false;
+            return resolve(null);
+          } else {
+            reject(err);
+          }
+        } else {
+          return resolve(allowed ? pkg : null);
         }
-      }
-    }
-
-    return false;
-  };
-  const matcher = function (q) {
-    const match = q.match(/author:(.*)/);
-    if (match !== null) {
-      return (pkg) => personMatch(pkg.author, match[1]);
-    }
-
-    // TODO: maintainer, keywords, not/is unstable insecure, boost-exact
-    // TODO implement some scoring system for freetext
-    return (pkg) => {
-      return ['name', 'displayName', 'description']
-        .map((k) => pkg[k])
-        .filter((x) => x !== undefined)
-        .some((txt) => txt.includes(q));
-    };
-  };
-
-  const textMatchers = (textSearch || '').split(' ').map(matcher);
-  return (pkg) => textMatchers.every((m) => m(pkg));
-}
-
-export default function (route, auth, storage): void {
-  route.get('/-/v1/search', (req, res) => {
-    // TODO: implement proper result scoring weighted by quality, popularity and
-    // maintenance query parameters
-    let [text, size, from /* , quality, popularity, maintenance */] = [
-      'text',
-      'size',
-      'from' /* , 'quality', 'popularity', 'maintenance' */,
-    ].map((k) => req.query[k]);
-
-    size = parseInt(size) || 20;
-    from = parseInt(from) || 0;
-
-    const isInteresting = compileTextSearch(text);
-
-    const resultStream = storage.search(0, { req: { query: { local: true } } });
-    const resultBuf = [] as any;
-    let completed = false;
-
-    const sendResponse = (): void => {
-      completed = true;
-      resultStream.destroy();
-
-      const final = resultBuf.slice(from, size).map((pkg) => {
-        return {
-          package: pkg,
-          flags: {
-            unstable: Object.keys(pkg.versions).some((v) => semver.satisfies(v, '^1.0.0'))
-              ? undefined
-              : true,
-          },
-          score: {
-            final: 1,
-            detail: {
-              quality: 1,
-              popularity: 1,
-              maintenance: 0,
-            },
-          },
-          searchScore: 100000,
-        };
       });
-      const response = {
+    });
+  }
+
+  route.get('/-/v1/search', async (req, res, next) => {
+    const { query, url } = req;
+    let [size, from] = ['size', 'from'].map((k) => query[k]);
+    let data;
+    const abort = new AbortController();
+
+    req.on('aborted', () => {
+      abort.abort();
+    });
+
+    size = parseInt(size, 10) || 20;
+    from = parseInt(from, 10) || 0;
+
+    try {
+      data = await storage.searchManager?.search({
+        query,
+        url,
+        abort,
+      });
+      debug('stream finish');
+      const checkAccessPromises: searchUtils.SearchItemPkg[] = await Promise.all(
+        data.map((pkgItem) => {
+          return checkAccess(pkgItem, auth, req.remote_user);
+        })
+      );
+
+      const final: searchUtils.SearchItemPkg[] = checkAccessPromises
+        .filter((i) => !_.isNull(i))
+        .slice(from, size);
+      logger.debug(`search results ${final?.length}`);
+
+      const response: searchUtils.SearchResults = {
         objects: final,
         total: final.length,
         time: new Date().toUTCString(),
       };
 
-      res.status(200).json(response);
-    };
-
-    resultStream.on('data', (pkg) => {
-      if (!isInteresting(pkg)) {
-        return;
-      }
-      resultBuf.push(pkg);
-      if (!completed && resultBuf.length >= size + from) {
-        sendResponse();
-      }
-    });
-    resultStream.on('end', () => {
-      if (!completed) {
-        sendResponse();
-      }
-    });
+      res.status(HTTP_STATUS.OK).json(response);
+    } catch (error) {
+      logger.error({ error }, 'search endpoint has failed @{error.message}');
+      next(next);
+      return;
+    }
   });
 }

packages/api/src/v1/token.ts

@@ -1,13 +1,13 @@
 import _ from 'lodash';
-import { HTTP_STATUS, SUPPORT_ERRORS, getInternalError } from '@verdaccio/commons-api';
-import { ErrorCode, stringToMD5, mask } from '@verdaccio/utils';
+import { errorUtils, HTTP_STATUS, SUPPORT_ERRORS } from '@verdaccio/core';
+import { stringToMD5, mask } from '@verdaccio/utils';
 import { getApiToken } from '@verdaccio/auth';
 import { logger } from '@verdaccio/logger';
 import { Response, Router } from 'express';
 
 import { Config, RemoteUser, Token } from '@verdaccio/types';
 import { IAuth } from '@verdaccio/auth';
-import { IStorageHandler } from '@verdaccio/store';
+import { Storage } from '@verdaccio/store';
 import { $RequestExtend, $NextFunctionVer } from '../../types/custom';
 
 export type NormalizeToken = Token & {
@@ -22,12 +22,7 @@ function normalizeToken(token: Token): NormalizeToken {
 }
 
 // https://github.com/npm/npm-profile/blob/latest/lib/index.js
-export default function (
-  route: Router,
-  auth: IAuth,
-  storage: IStorageHandler,
-  config: Config
-): void {
+export default function (route: Router, auth: IAuth, storage: Storage, config: Config): void {
   route.get(
     '/-/npm/v1/tokens',
     async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
@@ -46,12 +41,12 @@ export default function (
               next: '', // TODO: pagination?
             },
           });
-        } catch (error) {
+        } catch (error: any) {
           logger.error({ error: error.msg }, 'token list has failed: @{error}');
-          return next(ErrorCode.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
+          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
         }
       }
-      return next(ErrorCode.getUnauthorized());
+      return next(errorUtils.getUnauthorized());
     }
   );
 
@@ -62,27 +57,27 @@ export default function (
       const { name } = req.remote_user;
 
       if (!_.isBoolean(readonly) || !_.isArray(cidr_whitelist)) {
-        return next(ErrorCode.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));
+        return next(errorUtils.getCode(HTTP_STATUS.BAD_DATA, SUPPORT_ERRORS.PARAMETERS_NOT_VALID));
       }
 
       auth.authenticate(name, password, async (err, user: RemoteUser) => {
         if (err) {
           const errorCode = err.message ? HTTP_STATUS.UNAUTHORIZED : HTTP_STATUS.INTERNAL_ERROR;
-          return next(ErrorCode.getCode(errorCode, err.message));
+          return next(errorUtils.getCode(errorCode, err.message));
         }
 
         req.remote_user = user;
 
         if (!_.isFunction(storage.saveToken)) {
           return next(
-            ErrorCode.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)
+            errorUtils.getCode(HTTP_STATUS.NOT_IMPLEMENTED, SUPPORT_ERRORS.STORAGE_NOT_IMPLEMENT)
           );
         }
 
         try {
           const token = await getApiToken(auth, config, user, password);
           if (!token) {
-            throw getInternalError();
+            throw errorUtils.getInternalError();
           }
 
           const key = stringToMD5(token);
@@ -116,9 +111,9 @@ export default function (
               created: saveToken.created,
             })
           );
-        } catch (error) {
+        } catch (error: any) {
           logger.error({ error: error.msg }, 'token creation has failed: @{error}');
-          return next(ErrorCode.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
+          return next(errorUtils.getInternalError(error.message));
         }
       });
     }
@@ -138,12 +133,12 @@ export default function (
           await storage.deleteToken(name, tokenKey);
           logger.info({ tokenKey, name }, 'token id @{tokenKey} was revoked for user @{name}');
           return next({});
-        } catch (error) {
+        } catch (error: any) {
           logger.error({ error: error.msg }, 'token creation has failed: @{error}');
-          return next(ErrorCode.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
+          return next(errorUtils.getCode(HTTP_STATUS.INTERNAL_ERROR, error.message));
         }
       }
-      return next(ErrorCode.getUnauthorized());
+      return next(errorUtils.getUnauthorized());
     }
   );
 }