chore: update versions (6-next) (#3334)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/famous-tigers-doubt.md

@@ -0,0 +1,42 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/core': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/readme': patch
+'@verdaccio/tarball': patch
+'@verdaccio/types': patch
+'@verdaccio/url': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/node-api': patch
+'verdaccio-audit': patch
+'verdaccio-auth-memory': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'verdaccio-memory': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/proxy': patch
+'@verdaccio/server': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/cli-standalone': patch
+'@verdaccio/store': patch
+'docusaurus-plugin-contributors': patch
+'@verdaccio/test-helper': patch
+'verdaccio': patch
+'@verdaccio/web': patch
+'@verdaccio/test-cli-commons': patch
+'@verdaccio/e2e-cli-npm6': patch
+'@verdaccio/e2e-cli-npm7': patch
+'@verdaccio/e2e-cli-npm8': patch
+'@verdaccio/e2e-cli-pnpm6': patch
+'@verdaccio/e2e-cli-pnpm7': patch
+'@verdaccio/e2e-cli-yarn1': patch
+'@verdaccio/e2e-cli-yarn2': patch
+'@verdaccio/e2e-cli-yarn3': patch
+'@verdaccio/e2e-cli-yarn4': patch
+---
+
+fix(deps): @verdaccio/utils should be a prod dep of local-storage

.changeset/pre.json

@@ -41,16 +41,16 @@
     "@verdaccio/test-helper": "1.0.0",
     "docusaurus-plugin-contributors": "1.0.0",
     "@verdaccio/website": "5.4.0",
-    "@verdaccio/test-cli-commons": "1.0.0",
-    "@verdaccio/e2e-cli-npm6": "1.0.0",
-    "@verdaccio/e2e-cli-npm7": "1.0.0",
-    "@verdaccio/e2e-cli-npm8": "1.0.0",
-    "@verdaccio/e2e-cli-pnpm6": "1.0.0",
-    "@verdaccio/e2e-cli-pnpm7": "1.0.0",
-    "@verdaccio/e2e-cli-yarn1": "1.0.0",
-    "@verdaccio/e2e-cli-yarn2": "1.0.0",
-    "@verdaccio/e2e-cli-yarn3": "1.0.0",
-    "@verdaccio/e2e-cli-yarn4": "1.0.0"
+    "@verdaccio/test-cli-commons": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-npm6": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-npm7": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-npm8": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-pnpm6": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-pnpm7": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-yarn1": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-yarn2": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-yarn3": "1.0.1-6-next.1",
+    "@verdaccio/e2e-cli-yarn4": "1.0.1-6-next.1"
   },
   "changesets": [
     "afraid-mice-obey",
@@ -67,6 +67,7 @@
     "eleven-brooms-hunt",
     "eleven-spoons-matter",
     "fair-lemons-beam",
+    "famous-tigers-doubt",
     "few-cooks-destroy",
     "few-mangos-grow",
     "fifty-jars-rest",
@@ -112,6 +113,7 @@
     "slow-carrots-relate",
     "smart-apricots-kneel",
     "smart-beds-cross",
+    "smooth-owls-pump",
     "sour-buses-shout",
     "spicy-frogs-press",
     "spicy-snakes-sip",
@@ -124,6 +126,7 @@
     "three-moles-drop",
     "three-pots-sit",
     "tiny-seals-join",
+    "tricky-taxis-watch",
     "two-dolls-check",
     "wild-jokes-beam"
   ]

.changeset/smooth-owls-pump.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+ui: basic grammatical fixes in the Ukraine Message

.changeset/tricky-taxis-watch.md

@@ -0,0 +1,28 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/types': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/server-fastify': minor
+'@verdaccio/store': minor
+'@verdaccio/test-helper': minor
+'@verdaccio/web': minor
+---
+
+feat: implement abbreviated manifest
+
+Enable abbreviated manifest data by adding the header:
+
+```
+curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+```
+
+It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+Current support for packages managers:
+
+- npm: yes
+- pnpm: yes
+- yarn classic: yes
+- yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format

.github/workflows/benchmark.yml

@@ -18,8 +18,8 @@ jobs:
     name: Prepare build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16.x
       - name: install pnpm
@@ -33,7 +33,7 @@ jobs:
       - name: install dependencies
         run: pnpm install
       - name: Cache .pnpm-store
-        uses: actions/cache@v3
+        uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -44,7 +44,7 @@ jobs:
       - name: tar packages
         run: |      
           tar -czvf ${{ github.workspace }}/pkg.tar.gz -C ${{ github.workspace }}/packages .
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: verdaccio-artifact
           path: pkg.tar.gz
@@ -65,11 +65,11 @@ jobs:
     name: Benchmark autocannon
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16.x
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # tag=v3
         with:
           name: verdaccio-artifact
       - name: untar packages
@@ -77,7 +77,7 @@ jobs:
       - name: install pnpm
         # require fixed version
         run: sudo npm i pnpm@latest-6 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}   
@@ -90,7 +90,7 @@ jobs:
         shell: bash
         env:
           DEBUG: metrics*
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: verdaccio-metrics-api
           path: ./api-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json  
@@ -126,11 +126,11 @@ jobs:
     name: Benchmark hyperfine
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16.x
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@fb598a63ae348fa914e94cd0ff38f362e927b741 # tag=v3
         with:
           name: verdaccio-artifact
       - name: untar packages
@@ -138,7 +138,7 @@ jobs:
       - name: install pnpm
         # require fixed version
         run: sudo npm i pnpm@latest-6 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}   
@@ -156,7 +156,7 @@ jobs:
         shell: bash
       - name: rename
         run: mv ./hyper-results.json ./hyper-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
         with:
           name: verdaccio-metrics
           path: ./hyper-results-${{matrix.verdaccioVersion}}-${{matrix.benchmark}}.json  

.github/workflows/changesets.yml

@@ -20,12 +20,12 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
         with:
           fetch-depth: 0
 
       - name: setup node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 14
           registry-url: 'https://registry.npmjs.org'
@@ -63,7 +63,7 @@ jobs:
           title: 'chore: update versions'
           publish: pnpm ci:publish
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CHANGESET_RELEASE_TOKEN }}
           NPM_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
           NPM_CONFIG_REGISTRY: https://registry.npmjs.org

.github/workflows/ci.yml

@@ -25,9 +25,9 @@ jobs:
         ports:
           - 4873:4873
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
     - name: Use Node 16
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
       with:
         node-version: 16
     - name: Install pnpm
@@ -39,7 +39,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@v3
+      uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -50,14 +50,14 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
       - name: Use Node 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -70,14 +70,14 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
       - name: Use Node 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -95,14 +95,14 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
       - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -117,13 +117,13 @@ jobs:
     runs-on: ubuntu-latest
     name: UI Test E2E Node 16
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -140,13 +140,13 @@ jobs:
     runs-on: ubuntu-latest
     name: CLI Test E2E Node 16
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -165,13 +165,13 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@v3
+      - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -34,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@7fee4ca032ac341c12486c4c06822c5221c76533 # tag=v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@7fee4ca032ac341c12486c4c06822c5221c76533 # tag=v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@7fee4ca032ac341c12486c4c06822c5221c76533 # tag=v2

.github/workflows/contributors.yml

@@ -15,11 +15,11 @@ jobs:
     name: Run script
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 17.x
       - name: install pnpm
@@ -39,7 +39,7 @@ jobs:
       - name: format
         run: pnpm format
       - name: Commit & Push changes
-        uses: actions-js/push@v1.3
+        uses: actions-js/push@a52398fac807b0c1e5f1492c969b477c8560a0ba # tag=v1.3
         with:
           github_token: ${{ secrets.TOKEN_VERDACCIOBOT_GITHUB }}
           message: "chore: updated contributors list"

.github/workflows/docker-publish.yml

@@ -19,8 +19,8 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: docker/setup-qemu-action@v1
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+      - uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/website.yml

@@ -16,15 +16,15 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
 
       - name: Use Node 16
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
         with:
           node-version: 16
 
       - name: Cache pnpm modules
-        uses: actions/cache@v3
+        uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         env:
           cache-name: cache-pnpm-modules
         with:
@@ -33,7 +33,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
 
-      - uses: pnpm/action-setup@v2.2.2
+      - uses: pnpm/action-setup@10693b3829bf86eb2572aef5f3571dcf5ca9287d # tag=v2.2.2
         with:
           version: 6.32.15
           run_install: |
@@ -42,7 +42,7 @@ jobs:
       - name: Build Plugins
         run: pnpm build --filter "docusaurus-plugin-contributors"
       - name: Cache Docusaurus Build
-        uses: actions/cache@v3
+        uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -91,7 +91,7 @@ jobs:
       - name: Audit preview URL with Lighthouse
         if: github.repository == 'verdaccio/verdaccio'
         id: lighthouse_audit
-        uses: treosh/lighthouse-ci-action@9.3.0
+        uses: treosh/lighthouse-ci-action@b4dfae3eb959c5226e2c5c6afd563d493188bfaf # tag=9.3.0
         with:
           urls: |
             ${{ steps.netlify_preview.outputs.preview-url }}
@@ -100,7 +100,7 @@ jobs:
 
       - name: Format lighthouse score
         id: format_lighthouse_score
-        uses: actions/github-script@v6
+        uses: actions/github-script@d50f485531ba88479582bc2da03ff424389af5c1 # tag=v6
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
@@ -125,7 +125,7 @@ jobs:
       - name: Add comment to PR
         if: github.repository == 'verdaccio/verdaccio'
         id: comment_to_pr
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443 # tag=v2
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ github.event.issue.number }}

README.md

@@ -44,7 +44,19 @@ Google Cloud Storage** or create your own plugin.
 Install with npm:
 
 ```bash
-npm install --global verdaccio@6-next
+npm install --location=global verdaccio@6-next
+```
+
+With `yarn`
+
+```bash
+yarn global add verdaccio@6-next
+```
+
+With `pnpm`
+
+```bash
+pnpm i -g verdaccio@6-next
 ```
 
 or
@@ -68,8 +80,8 @@ Furthermore, you can read the [**Debugging Guidelines**](https://github.com/verd
 You can develop your own [plugins](https://verdaccio.org/docs/plugins) with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin). Installing [Yeoman](https://yeoman.io/) is required.
 
 ```
-npm install -g yo
-npm install -g generator-verdaccio-plugin
+npm install --location=global yo
+npm install --location=global generator-verdaccio-plugin
 ```
 
 Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.

package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@babel/cli": "7.18.10",
-    "@babel/core": "7.18.10",
+    "@babel/core": "7.18.13",
     "@babel/node": "7.18.10",
     "@babel/plugin-proposal-class-properties": "7.18.6",
     "@babel/plugin-proposal-decorators": "7.18.10",
@@ -38,32 +38,32 @@
     "@babel/preset-typescript": "7.18.6",
     "@babel/register": "7.18.9",
     "@babel/runtime": "7.18.9",
-    "@dianmora/contributors": "2.0.2",
+    "@dianmora/contributors": "5.0.0",
     "@changesets/changelog-github": "0.4.6",
     "@changesets/cli": "2.15.0",
     "@changesets/get-dependents-graph": "1.3.3",
-    "@crowdin/cli": "3.7.9",
+    "@crowdin/cli": "3.7.10",
     "@trivago/prettier-plugin-sort-imports": "3.3.0",
     "@types/async": "3.2.15",
     "@types/autocannon": "4.1.1",
     "@types/express": "4.17.13",
     "@types/http-errors": "1.8.2",
     "@types/jest": "27.5.2",
-    "@types/lodash": "4.14.182",
+    "@types/lodash": "4.14.184",
     "@types/mime": "2.0.3",
     "@types/minimatch": "3.0.5",
-    "@types/node": "16.11.47",
-    "@types/jsonwebtoken": "8.5.8",
+    "@types/node": "16.11.56",
+    "@types/jsonwebtoken": "8.5.9",
     "@types/request": "2.48.8",
-    "@types/semver": "7.3.10",
+    "@types/semver": "7.3.12",
     "@types/node-fetch": "2.6.2",
     "@types/supertest": "2.0.12",
     "@types/testing-library__jest-dom": "5.14.5",
     "@types/validator": "13.7.5",
     "@types/webpack": "5.28.0",
-    "@types/webpack-env": "1.17.0",
-    "@typescript-eslint/eslint-plugin": "5.32.0",
-    "@typescript-eslint/parser": "5.32.0",
+    "@types/webpack-env": "1.18.0",
+    "@typescript-eslint/eslint-plugin": "5.33.1",
+    "@typescript-eslint/parser": "5.33.1",
     "@verdaccio/benchmark": "workspace:*",
     "@verdaccio/eslint-config": "workspace:*",
     "@verdaccio/types": "workspace:*",
@@ -76,13 +76,13 @@
     "babel-plugin-emotion": "10.2.2",
     "codecov": "3.8.3",
     "concurrently": "6.5.1",
-    "core-js": "3.24.1",
+    "core-js": "3.25.0",
     "cross-env": "7.0.3",
     "debug": "4.3.4",
     "detect-secrets": "1.0.6",
     "pretty-format": "27.5.1",
     "jest-diff": "27.5.1",
-    "eslint": "8.21.0",
+    "eslint": "8.22.0",
     "fs-extra": "10.1.0",
     "husky": "7.0.4",
     "in-publish": "2.0.1",
@@ -102,7 +102,7 @@
     "selfsigned": "1.10.14",
     "supertest": "6.2.4",
     "ts-node": "10.9.1",
-    "typescript": "4.7.4",
+    "typescript": "4.8.2",
     "update-ts-references": "2.4.1",
     "verdaccio-audit": "workspace:*",
     "verdaccio-auth-memory": "workspace:*",

packages/api/CHANGELOG.md

@@ -1,5 +1,50 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.28
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/store@6.0.0-6-next.25
+  - @verdaccio/middleware@6.0.0-6-next.24
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.27
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/store@6.0.0-6-next.24
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/logger@6.0.0-6-next.12
+
 ## 6.0.0-6-next.26
 
 ### Major Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "6.0.0-6-next.26",
+  "version": "6.0.0-6-next.28",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,13 +39,13 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.23",
-    "@verdaccio/store": "workspace:6.0.0-6-next.23",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.24",
+    "@verdaccio/store": "workspace:6.0.0-6-next.25",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "abortcontroller-polyfill": "1.7.3",
     "cookies": "0.8.0",
     "debug": "4.3.4",
@@ -56,10 +56,10 @@
     "semver": "7.3.7"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/server": "workspace:6.0.0-6-next.32",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
+    "@types/node": "16.11.56",
+    "@verdaccio/server": "workspace:6.0.0-6-next.34",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
     "supertest": "6.2.4",
     "nock": "13.2.9",
     "mockdate": "3.0.5"

packages/api/src/package.ts

@@ -25,6 +25,7 @@ export default function (route: Router, auth: IAuth, storage: Storage): void {
       const name = req.params.package;
       let version = req.params.version;
       const write = req.query.write === 'true';
+      const abbreviated = req.get('Accept') === Storage.ABBREVIATED_HEADER;
       const requestOptions = {
         protocol: req.protocol,
         headers: req.headers as any,
@@ -38,6 +39,7 @@ export default function (route: Router, auth: IAuth, storage: Storage): void {
         const manifest = await storage.getPackageByOptions({
           name,
           uplinksLook: true,
+          abbreviated,
           version,
           requestOptions,
         });

packages/api/src/publish.ts

@@ -56,7 +56,7 @@ const debug = buildDebug('verdaccio:api:publish');
    *
    * There are two possible flows:
    *
-   * - Remove all pacakges (entirely)
+   * - Remove all packages (entirely)
    *   eg: npm unpublish package-name@* --force
    *   eg: npm unpublish package-name  --force
    *

packages/api/test/integration/package.spec.ts

@@ -1,6 +1,7 @@
 import supertest from 'supertest';
 
-import { HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
+import { DIST_TAGS, HEADERS, HEADER_TYPE, HTTP_STATUS } from '@verdaccio/core';
+import { Storage } from '@verdaccio/store';
 
 import { initializeServer, publishVersion } from './_helper';
 
@@ -45,4 +46,24 @@ describe('package', () => {
       expect(response.body.name).toEqual(pkg);
     }
   );
+
+  test.each([['foo-abbreviated'], ['@scope/foo-abbreviated']])(
+    'should return abbreviated local manifest',
+    async (pkg) => {
+      await publishVersion(app, pkg, '1.0.0');
+      const response = await supertest(app)
+        .get(`/${pkg}`)
+        .set(HEADERS.ACCEPT, HEADERS.JSON)
+        .set(HEADERS.ACCEPT, Storage.ABBREVIATED_HEADER)
+        .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET)
+        .expect(HTTP_STATUS.OK);
+      expect(response.body.name).toEqual(pkg);
+      expect(response.body.time).toBeDefined();
+      expect(response.body.modified).toBeDefined();
+      expect(response.body[DIST_TAGS]).toEqual({ latest: '1.0.0' });
+      expect(response.body.readme).not.toBeDefined();
+      expect(response.body._rev).not.toBeDefined();
+      expect(response.body.users).not.toBeDefined();
+    }
+  );
 });

packages/auth/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @verdaccio/auth
 
+## 6.0.0-6-next.24
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/loaders@6.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - verdaccio-htpasswd@11.0.0-6-next.15
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
 ## 6.0.0-6-next.23
 
 ### Major Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "6.0.0-6-next.23",
+  "version": "6.0.0-6-next.24",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,19 +39,19 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.13",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.14",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "debug": "4.3.4",
     "express": "4.18.1",
     "jsonwebtoken": "8.5.1",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:11.0.0-6-next.14"
+    "verdaccio-htpasswd": "workspace:11.0.0-6-next.15"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "funding": {
     "type": "opencollective",

packages/cli/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @verdaccio/cli
 
+## 6.0.0-6-next.37
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/node-api@6.0.0-6-next.35
+  - @verdaccio/config@6.0.0-6-next.16
+
+## 6.0.0-6-next.36
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.6
+- @verdaccio/logger@6.0.0-6-next.12
+- @verdaccio/node-api@6.0.0-6-next.34
+
 ## 6.0.0-6-next.35
 
 ### Major Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "6.0.0-6-next.35",
+  "version": "6.0.0-6-next.37",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -44,10 +44,10 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/node-api": "workspace:6.0.0-6-next.33",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/node-api": "workspace:6.0.0-6-next.35",
     "clipanion": "3.1.0",
     "envinfo": "7.8.1",
     "kleur": "3.0.3",

packages/config/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/config
 
+## 6.0.0-6-next.16
+
+### Patch Changes
+
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/utils@6.0.0-6-next.13
+
 ## 6.0.0-6-next.15
 
 ### Major Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "6.0.0-6-next.15",
+  "version": "6.0.0-6-next.16",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,8 +39,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "debug": "4.3.4",
     "yaml": "2.1.1",
     "lodash": "4.17.21",

packages/core/core/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/core
 
+## 6.0.0-6-next.7
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
 ## 6.0.0-6-next.6
 
 ### Major Changes

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "6.0.0-6-next.6",
+  "version": "6.0.0-6-next.7",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -39,11 +39,11 @@
     "semver": "7.3.7",
     "ajv": "8.11.0",
     "process-warning": "1.0.0",
-    "core-js": "3.24.1"
+    "core-js": "3.25.0"
   },
   "devDependencies": {
     "lodash": "4.17.21",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/file-locking/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 11.0.0-6-next.6
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
 ## 11.0.0-6-next.5
 
 ### Major Changes

packages/core/file-locking/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/file-locking",
-  "version": "11.0.0-6-next.5",
+  "version": "11.0.0-6-next.6",
   "description": "library that handle file locking",
   "keywords": [
     "private",
@@ -40,7 +40,7 @@
     "lockfile": "1.0.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/readme/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 11.0.0-6-next.6
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
 ## 11.0.0-6-next.5
 
 ### Major Changes

packages/core/readme/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/readme",
-  "version": "11.0.0-6-next.5",
+  "version": "11.0.0-6-next.6",
   "description": "Readme markdown parser",
   "keywords": [
     "private",
@@ -40,12 +40,12 @@
     "build"
   ],
   "dependencies": {
-    "dompurify": "2.3.10",
+    "dompurify": "2.4.0",
     "jsdom": "17.0.0",
     "marked": "3.0.8"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Change Log
 
+## 11.0.0-6-next.14
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/url@11.0.0-6-next.11
+  - @verdaccio/utils@6.0.0-6-next.13
+
 ## 11.0.0-6-next.13
 
 ### Major Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "11.0.0-6-next.13",
+  "version": "11.0.0-6-next.14",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -35,13 +35,13 @@
   },
   "dependencies": {
     "debug": "4.3.4",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/url": "workspace:11.0.0-6-next.10",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/url": "workspace:11.0.0-6-next.11",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
     "node-mocks-http": "1.11.0"
   },
   "scripts": {

packages/core/types/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Change Log
 
+## 11.0.0-6-next.15
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
+## 11.0.0-6-next.14
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
 ## 11.0.0-6-next.13
 
 ### Major Changes

packages/core/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "11.0.0-6-next.13",
+  "version": "11.0.0-6-next.15",
   "description": "verdaccio types definitions",
   "keywords": [
     "private",
@@ -41,7 +41,7 @@
     "build": "tsc --emitDeclarationOnly -p tsconfig.build.json"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
+    "@types/node": "16.11.56",
     "typedoc": "beta",
     "typedoc-plugin-missing-exports": "1.0.0"
   },

packages/core/types/src/manifest.ts

@@ -92,7 +92,6 @@ export interface Tags {
 export interface Version {
   name: string;
   version: string;
-  devDependencies?: string;
   directories?: any;
   dist: Dist;
   author: string | Author;
@@ -113,7 +112,11 @@ export interface Version {
   scripts?: any;
   homepage?: string;
   etag?: string;
-  dependencies: any;
+  dependencies?: Dependencies;
+  peerDependencies?: Dependencies;
+  devDependencies?: Dependencies;
+  optionalDependencies?: Dependencies;
+  bundleDependencies?: Dependencies;
   keywords?: string | string[];
   nodeVersion?: string;
   _id: string;
@@ -121,6 +124,17 @@ export interface Version {
   _npmUser: Author;
   _hasShrinkwrap?: boolean;
   deprecated?: string;
+  funding?: { type: string; url: string };
+  engines?: Engines;
+  hasInstallScript?: boolean;
+}
+
+export interface Dependencies {
+  [key: string]: string;
+}
+
+export interface Engines {
+  [key: string]: string;
 }
 
 export interface Versions {
@@ -194,6 +208,32 @@ export interface Manifest extends FullRemoteManifest, PublishManifest {
    */
   _rev: string;
 }
+
+export type AbbreviatedVersion = Pick<
+  Version,
+  | 'name'
+  | 'version'
+  | 'description'
+  | 'dependencies'
+  | 'devDependencies'
+  | 'bin'
+  | 'dist'
+  | 'engines'
+  | 'funding'
+  | 'peerDependencies'
+>;
+
+export interface AbbreviatedVersions {
+  [key: string]: AbbreviatedVersion;
+}
+/**
+ *
+ */
+export type AbbreviatedManifest = Pick<Manifest, 'name' | 'dist-tags' | 'time'> & {
+  modified: string;
+  versions: AbbreviatedVersions;
+};
+
 export interface PublishManifest {
   /**
    * The `_attachments` object has different usages:

packages/core/url/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## 11.0.0-6-next.11
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+
 ## 11.0.0-6-next.10
 
 ### Major Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "11.0.0-6-next.10",
+  "version": "11.0.0-6-next.11",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -34,13 +34,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
     "debug": "4.3.4",
     "lodash": "4.17.21",
     "validator": "13.7.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
     "node-mocks-http": "1.11.0"
   },
   "scripts": {

packages/hooks/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @verdaccio/hooks
 
+## 6.0.0-6-next.15
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+
 ## 6.0.0-6-next.14
 
 ### Major Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "6.0.0-6-next.14",
+  "version": "6.0.0-6-next.15",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,18 +30,18 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "core-js": "3.24.1",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "core-js": "3.25.0",
     "debug": "4.3.4",
     "handlebars": "4.7.7",
     "undici": "4.16.0"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@types/node": "16.11.56",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/loaders/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/loaders
 
+## 6.0.0-6-next.14
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/logger@6.0.0-6-next.13
+
 ## 6.0.0-6-next.13
 
 ### Major Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "6.0.0-6-next.13",
+  "version": "6.0.0-6-next.14",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -13,14 +13,14 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "homepage": "https://verdaccio.org",
   "keywords": [

packages/logger-prettify/package.json

@@ -39,14 +39,14 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "dayjs": "1.11.4",
+    "dayjs": "1.11.5",
     "pino-abstract-transport": "1.0.0",
-    "colorette": "2.0.7",
+    "colorette": "2.0.19",
     "lodash": "4.17.21",
     "sonic-boom": "3.2.0"
   },
   "devDependencies": {
-    "pino": "8.4.1"
+    "pino": "8.4.2"
   },
   "funding": {
     "type": "opencollective",

packages/logger/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/logger
 
+## 6.0.0-6-next.13
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+
 ## 6.0.0-6-next.12
 
 ### Major Changes

packages/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "6.0.0-6-next.12",
+  "version": "6.0.0-6-next.13",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,14 +39,14 @@
     "build": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
     "@verdaccio/logger-prettify": "workspace:6.0.0-6-next.7",
     "debug": "4.3.4",
-    "colorette": "2.0.7",
-    "pino": "8.4.1"
+    "colorette": "2.0.19",
+    "pino": "8.4.2"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "funding": {
     "type": "opencollective",

packages/middleware/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/middleware
 
+## 6.0.0-6-next.24
+
+### Patch Changes
+
+- Updated dependencies [351aeeaa]
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/utils@6.0.0-6-next.13
+
 ## 6.0.0-6-next.23
 
 ### Major Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "6.0.0-6-next.23",
+  "version": "6.0.0-6-next.24",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -40,10 +40,10 @@
   "dependencies": {
     "debug": "4.3.4",
     "body-parser": "1.20.0",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "lodash": "4.17.21"
   },
   "funding": {

packages/node-api/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @verdaccio/node-api
 
+## 6.0.0-6-next.35
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/server@6.0.0-6-next.34
+  - @verdaccio/server-fastify@6.0.0-6-next.26
+  - @verdaccio/config@6.0.0-6-next.16
+
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/server-fastify@6.0.0-6-next.25
+  - @verdaccio/server@6.0.0-6-next.33
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/logger@6.0.0-6-next.12
+
 ## 6.0.0-6-next.33
 
 ### Major Changes

packages/node-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/node-api",
-  "version": "6.0.0-6-next.33",
+  "version": "6.0.0-6-next.35",
   "description": "node API",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -39,18 +39,18 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/server": "workspace:6.0.0-6-next.32",
-    "@verdaccio/server-fastify": "workspace:6.0.0-6-next.24",
-    "core-js": "3.24.1",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/server": "workspace:6.0.0-6-next.34",
+    "@verdaccio/server-fastify": "workspace:6.0.0-6-next.26",
+    "core-js": "3.25.0",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
+    "@types/node": "16.11.56",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
     "jest-mock-process": "1.5.1",
     "selfsigned": "1.10.14",
     "supertest": "6.2.4"

packages/plugins/audit/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 11.0.0-6-next.10
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
 ## 11.0.0-6-next.9
 
 ### Major Changes

packages/plugins/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "11.0.0-6-next.9",
+  "version": "11.0.0-6-next.10",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "private",
@@ -37,9 +37,9 @@
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
     "nock": "13.2.9",
     "supertest": "6.2.4"
   },

packages/plugins/auth-memory/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## 11.0.0-6-next.10
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+
 ## 11.0.0-6-next.9
 
 ### Major Changes

packages/plugins/auth-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-auth-memory",
-  "version": "11.0.0-6-next.9",
+  "version": "11.0.0-6-next.10",
   "description": "Auth plugin for Verdaccio that keeps users in memory",
   "keywords": [
     "private",
@@ -32,10 +32,10 @@
   },
   "dependencies": {
     "debug": "4.3.4",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6"
+    "@verdaccio/core": "workspace:6.0.0-6-next.7"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/htpasswd/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## 11.0.0-6-next.15
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/file-locking@11.0.0-6-next.6
+
 ## 11.0.0-6-next.14
 
 ### Major Changes

packages/plugins/htpasswd/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-htpasswd",
-  "version": "11.0.0-6-next.14",
+  "version": "11.0.0-6-next.15",
   "description": "htpasswd auth plugin for Verdaccio",
   "keywords": [
     "private",
@@ -34,20 +34,20 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/file-locking": "workspace:11.0.0-6-next.5",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/file-locking": "workspace:11.0.0-6-next.6",
     "apache-md5": "1.1.7",
     "bcryptjs": "2.4.3",
-    "core-js": "3.24.1",
+    "core-js": "3.25.0",
     "http-errors": "1.8.1",
     "debug": "4.3.4",
     "unix-crypt-td-js": "1.1.4"
   },
   "devDependencies": {
     "@types/bcryptjs": "2.4.2",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
     "mockdate": "3.0.5"
   },
   "scripts": {

packages/plugins/local-storage/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Change Log
 
+## 11.0.0-6-next.15
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/file-locking@11.0.0-6-next.6
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 11.0.0-6-next.14
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.6
+- @verdaccio/file-locking@11.0.0-6-next.5
+
 ## 11.0.0-6-next.13
 
 ### Major Changes

packages/plugins/local-storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/local-storage",
-  "version": "11.0.0-6-next.13",
+  "version": "11.0.0-6-next.15",
   "description": "Local storage implementation",
   "keywords": [
     "private",
@@ -37,9 +37,10 @@
     "npm": ">=7"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/file-locking": "workspace:11.0.0-6-next.5",
-    "core-js": "3.24.1",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/file-locking": "workspace:11.0.0-6-next.6",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
+    "core-js": "3.25.0",
     "debug": "4.3.4",
     "globby": "11.1.0",
     "lockfile": "1.0.4",
@@ -50,11 +51,10 @@
   },
   "devDependencies": {
     "@types/minimatch": "3.0.5",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
     "minimatch": "3.1.2"
   },
   "scripts": {

packages/plugins/local-storage/src/local-database.ts

@@ -40,7 +40,7 @@ class LocalDatabase extends TokenActions implements IPluginStorage {
     debug('config path %o', config.configPath);
     this.path = _dbGenPath(DB_NAME, config);
     this.storages = this._getCustomPackageLocalStorages();
-    this.logger.debug({ path: this.path }, 'local storage path @{path}');
+    this.logger.info({ path: this.path }, 'local storage path @{path}');
     debug('plugin storage path %o', this.path);
   }
 

packages/plugins/local-storage/src/local-fs.ts

@@ -285,7 +285,7 @@ export default class LocalFS implements ILocalFSPackageManager {
     });
 
     // if upload is aborted, we clean up the temporal file
-    signal.addEventListener(
+    signal?.addEventListener(
       'abort',
       async () => {
         if (opened) {

packages/plugins/memory/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## 11.0.0-6-next.12
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+
 ## 11.0.0-6-next.11
 
 ### Major Changes

packages/plugins/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-memory",
-  "version": "11.0.0-6-next.11",
+  "version": "11.0.0-6-next.12",
   "description": "Storage implementation in memory",
   "keywords": [
     "private",
@@ -31,15 +31,15 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
     "memory-fs": "0.5.0",
     "debug": "4.3.4",
     "memfs": "3.4.7"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12"
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/ui-theme/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @verdaccio/ui-theme
 
+## 6.0.0-6-next.28
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
+## 6.0.0-6-next.27
+
+### Patch Changes
+
+- 20d63dc3: ui: basic grammatical fixes in the Ukraine Message
+
 ## 6.0.0-6-next.26
 
 ### Major Changes

packages/plugins/ui-theme/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/ui-theme",
-  "version": "6.0.0-6-next.26",
+  "version": "6.0.0-6-next.28",
   "description": "Verdaccio User Interface",
   "author": {
     "name": "Verdaccio Contributors",
@@ -24,21 +24,21 @@
     "@emotion/jest": "11.10.0",
     "@emotion/styled": "11.10.0",
     "@emotion/css": "11.10.0",
-    "@emotion/babel-plugin": "11.10.0",
-    "@mui/icons-material": "5.8.4",
-    "@mui/material": "5.9.3",
-    "@mui/styles": "5.9.3",
+    "@emotion/babel-plugin": "11.10.2",
+    "@mui/icons-material": "5.10.2",
+    "@mui/material": "5.10.2",
+    "@mui/styles": "5.10.2",
     "@rematch/core": "2.2.0",
     "@rematch/loading": "2.1.2",
-    "@testing-library/dom": "8.16.1",
+    "@testing-library/dom": "8.17.1",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "12.1.5",
-    "@verdaccio/node-api": "workspace:6.0.0-6-next.33",
+    "@verdaccio/node-api": "workspace:6.0.0-6-next.35",
     "@verdaccio/types": "workspace:*",
     "babel-loader": "8.2.5",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "css-loader": "6.7.1",
-    "dayjs": "1.11.4",
+    "dayjs": "1.11.5",
     "friendly-errors-webpack-plugin": "1.7.0",
     "github-markdown-css": "4.0.0",
     "harmony-reflect": "1.6.2",
@@ -62,9 +62,9 @@
     "ora": "5.4.1",
     "react": "17.0.2",
     "react-dom": "17.0.2",
-    "react-hook-form": "7.34.0",
+    "react-hook-form": "7.34.2",
     "react-hot-loader": "4.13.0",
-    "react-i18next": "11.18.3",
+    "react-i18next": "11.18.5",
     "react-router": "5.3.3",
     "react-router-dom": "5.3.3",
     "react-virtualized": "9.22.3",
@@ -72,26 +72,26 @@
     "redux": "4.2.0",
     "rimraf": "3.0.2",
     "raw-loader": "4.0.2",
-    "msw": "0.44.2",
+    "msw": "0.45.0",
     "style-loader": "3.3.1",
-    "stylelint": "14.9.1",
+    "stylelint": "14.10.0",
     "stylelint-config-recommended": "7.0.0",
     "stylelint-config-styled-components": "0.1.1",
     "stylelint-processor-styled-components": "1.10.0",
     "stylelint-webpack-plugin": "3.3.0",
     "supertest": "6.2.4",
-    "terser-webpack-plugin": "5.3.3",
+    "terser-webpack-plugin": "5.3.5",
     "url-loader": "4.1.1",
     "validator": "13.7.0",
     "webpack": "5.74.0",
-    "webpack-bundle-analyzer": "4.5.0",
+    "webpack-bundle-analyzer": "4.6.1",
     "webpack-bundle-size-analyzer": "3.1.0",
     "webpack-cli": "^4.7.2",
     "webpack-dev-server": "3.11.3",
     "webpack-manifest-plugin": "4.1.1",
     "webpack-merge": "5.8.0",
     "whatwg-fetch": "3.6.2",
-    "xss": "1.0.13"
+    "xss": "1.0.14"
   },
   "keywords": [
     "private",

packages/plugins/ui-theme/src/App/Header/Support/Support.tsx

@@ -13,7 +13,7 @@ const title = 'Support people affected by the war in Ukraine';
 const links = [
   {
     href: 'https://twitter.com/denysdovhan/status/1501486563842211843',
-    text: 'Listen at Twitter OSS developers about the kjkjwar',
+    text: 'Listen OSS developers about the war on Twitter',
   },
   {
     href: 'https://snyk.io/blog/celebrating-amazing-open-source-innovation-ukraine/',
@@ -21,7 +21,7 @@ const links = [
   },
   {
     href: 'https://www.savethechildren.org/us/where-we-work/ukraine/',
-    text: 'Donate to Save the Children',
+    text: 'Donate to save children in Ukraine',
   },
   {
     href: 'https://www.ifrc.org/',
@@ -29,7 +29,7 @@ const links = [
   },
   {
     href: 'https://www.hrw.org/news/2022/03/10/ukraine-russian-air-dropped-bombs-hit-residential-area/',
-    text: 'Read Reports from Human Rights Watch',
+    text: 'Read reports from Human Rights Watch',
   },
   {
     href: 'https://europeanbloodalliance.eu/',
@@ -59,7 +59,7 @@ const Support = () => {
             <Typography>
               {`Hi, this is a message that I've composed to call your attention to ask 
                 for humanitarian support for more than 44 million Ukrainians that are having 
-                a  hard time suffering for a horrible and unjustified war. It would be great if you
+                a hard time suffering for a horrible and unjustified war. It would be great if you
                 decide today to make a difference and help others. You could help by donating 
                 to very well-known humanitarian organizations, helping in your local 
                 area with food, clothes, donate blood, toys for kids, or your own time. Any help is very welcome.`}

packages/plugins/ui-theme/src/App/Header/generated_contributors_list.json

@@ -175,6 +175,10 @@
     "username": "CrispyConductor",
     "id": 2132722
   },
+  {
+    "username": "NotWearingPants",
+    "id": 26556598
+  },
   {
     "username": "Utwo",
     "id": 282668
@@ -260,8 +264,8 @@
     "id": 175305
   },
   {
-    "username": "NotWearingPants",
-    "id": 26556598
+    "username": "mbtools",
+    "id": 59966492
   },
   {
     "username": "rmkanda",
@@ -403,6 +407,10 @@
     "username": "innosatyam",
     "id": 85342175
   },
+  {
+    "username": "SuzunaMinami",
+    "id": 49131888
+  },
   {
     "username": "varijkapil13",
     "id": 8291077
@@ -783,10 +791,6 @@
     "username": "larsgw",
     "id": 14018963
   },
-  {
-    "username": "mbtools",
-    "id": 59966492
-  },
   {
     "username": "mavimo",
     "id": 43941

packages/proxy/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @verdaccio/proxy
 
+## 6.0.0-6-next.23
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/local-storage@11.0.0-6-next.15
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.22
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/local-storage@11.0.0-6-next.14
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/logger@6.0.0-6-next.12
+
 ## 6.0.0-6-next.21
 
 ### Major Changes

packages/proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/proxy",
-  "version": "6.0.0-6-next.21",
+  "version": "6.0.0-6-next.23",
   "description": "verdaccio proxy fetcher",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,11 +39,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/local-storage": "workspace:11.0.0-6-next.13",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/local-storage": "workspace:11.0.0-6-next.15",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "JSONStream": "1.3.5",
     "debug": "4.3.4",
     "lodash": "4.17.21",
@@ -52,8 +52,8 @@
     "undici": "4.16.0"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
+    "@types/node": "16.11.56",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
     "get-stream": "^6.0.1",
     "nock": "13.2.9",
     "node-mocks-http": "1.11.0",

packages/server/express/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @verdaccio/server
 
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/api@6.0.0-6-next.28
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/loaders@6.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - verdaccio-audit@11.0.0-6-next.10
+  - @verdaccio/store@6.0.0-6-next.25
+  - @verdaccio/web@6.0.0-6-next.32
+  - @verdaccio/middleware@6.0.0-6-next.24
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/api@6.0.0-6-next.27
+  - @verdaccio/store@6.0.0-6-next.24
+  - @verdaccio/web@6.0.0-6-next.31
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/loaders@6.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+  - verdaccio-audit@11.0.0-6-next.9
+
 ## 6.0.0-6-next.32
 
 ### Major Changes

packages/server/express/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "6.0.0-6-next.32",
+  "version": "6.0.0-6-next.34",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,17 +30,17 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/api": "workspace:6.0.0-6-next.26",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.13",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.23",
-    "@verdaccio/store": "workspace:6.0.0-6-next.23",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
-    "@verdaccio/web": "workspace:6.0.0-6-next.30",
-    "verdaccio-audit": "workspace:11.0.0-6-next.9",
+    "@verdaccio/api": "workspace:6.0.0-6-next.28",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.14",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.24",
+    "@verdaccio/store": "workspace:6.0.0-6-next.25",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
+    "@verdaccio/web": "workspace:6.0.0-6-next.32",
+    "verdaccio-audit": "workspace:11.0.0-6-next.10",
     "compression": "1.7.4",
     "cors": "2.8.5",
     "debug": "4.3.4",
@@ -49,9 +49,9 @@
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/proxy": "workspace:6.0.0-6-next.21",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
+    "@types/node": "16.11.56",
+    "@verdaccio/proxy": "workspace:6.0.0-6-next.23",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
     "http-errors": "1.8.1"
   },
   "scripts": {

packages/server/fastify/CHANGELOG.md

@@ -1,5 +1,53 @@
 # @verdaccio/server-fastify
 
+## 6.0.0-6-next.26
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/readme@11.0.0-6-next.6
+  - @verdaccio/tarball@11.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/store@6.0.0-6-next.25
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.25
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/store@6.0.0-6-next.24
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/readme@11.0.0-6-next.5
+  - @verdaccio/tarball@11.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+
 ## 6.0.0-6-next.24
 
 ### Minor Changes

packages/server/fastify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server-fastify",
-  "version": "6.0.0-6-next.24",
+  "version": "6.0.0-6-next.26",
   "description": "fastify server api implementation",
   "keywords": [
     "private",
@@ -34,23 +34,23 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/store": "workspace:6.0.0-6-next.23",
-    "@verdaccio/tarball": "workspace:11.0.0-6-next.13",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
-    "@verdaccio/readme": "workspace:11.0.0-6-next.5",
-    "core-js": "3.24.1",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/store": "workspace:6.0.0-6-next.25",
+    "@verdaccio/tarball": "workspace:11.0.0-6-next.14",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
+    "@verdaccio/readme": "workspace:11.0.0-6-next.6",
+    "core-js": "3.25.0",
     "debug": "4.3.4",
-    "fastify": "4.3.0",
-    "fastify-plugin": "4.1.0",
+    "fastify": "4.5.3",
+    "fastify-plugin": "4.2.1",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
+    "@types/node": "16.11.56",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
     "ts-node": "10.9.1"
   },
   "scripts": {

packages/server/fastify/src/endpoints/manifest.ts

@@ -16,6 +16,8 @@ async function manifestRoute(fastify: FastifyInstance) {
     const { name } = request.params;
     const storage = fastify.storage;
     debug('pkg name %s ', name);
+    // @ts-ignore
+    const abbreviated = request.headers['accept'] === Storage.ABBREVIATED_HEADER;
     const data = await storage?.getPackageByOptions({
       name,
       // @ts-ignore
@@ -25,6 +27,7 @@ async function manifestRoute(fastify: FastifyInstance) {
         headers: request.headers as any,
         host: request.hostname,
       },
+      abbreviated,
     });
     return data;
   });

packages/server/fastify/src/routes/web/api/readme.ts

@@ -3,6 +3,7 @@ import { FastifyInstance } from 'fastify';
 import _ from 'lodash';
 
 import sanitizyReadme from '@verdaccio/readme';
+import { Manifest } from '@verdaccio/types';
 
 const debug = buildDebug('verdaccio:fastify:web:readme');
 export const NOT_README_FOUND = 'ERROR: No README data found!';
@@ -12,7 +13,7 @@ async function readmeRoute(fastify: FastifyInstance) {
     // @ts-ignore
     const { version, packageName } = request.params;
     debug('readme name %s   version: %s', packageName, version);
-    const manifest = await fastify.storage?.getPackageByOptions({
+    const manifest = (await fastify.storage?.getPackageByOptions({
       name: packageName,
       // remove on refactor getPackageByOptions
       // @ts-ignore
@@ -24,7 +25,7 @@ async function readmeRoute(fastify: FastifyInstance) {
         headers: request.headers as any,
         host: request.hostname,
       },
-    });
+    })) as Manifest;
     try {
       const parsedReadme = parseReadme(manifest.name, manifest.readme as string);
       reply.code(fastify.statusCode.OK).send(parsedReadme);
@@ -37,7 +38,7 @@ async function readmeRoute(fastify: FastifyInstance) {
     // @ts-ignore
     const { version, packageName } = request.params;
     debug('readme name %s   version: %s', packageName, version);
-    const manifest = await fastify.storage?.getPackageByOptions({
+    const manifest = (await fastify.storage?.getPackageByOptions({
       name: packageName,
       // remove on refactor getPackageByOptions
       // @ts-ignore
@@ -49,7 +50,7 @@ async function readmeRoute(fastify: FastifyInstance) {
         headers: request.headers as any,
         host: request.hostname,
       },
-    });
+    })) as Manifest;
     try {
       const parsedReadme = parseReadme(manifest.name, manifest.readme as string);
       reply.code(fastify.statusCode.OK).send(parsedReadme);

packages/standalone/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/cli-standalone
 
+## 6.0.0-6-next.7
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
 ## 6.0.0-6-next.6
 
 ### Major Changes

packages/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli-standalone",
-  "version": "6.0.0-6-next.6",
+  "version": "6.0.0-6-next.7",
   "description": "standalone verdaccio registry with no dependencies",
   "main": "dist/bundle.js",
   "bin": {
@@ -32,11 +32,11 @@
   "homepage": "https://verdaccio.org",
   "license": "MIT",
   "devDependencies": {
-    "@verdaccio/cli": "workspace:6.0.0-6-next.35",
-    "@verdaccio/ui-theme": "workspace:6.0.0-6-next.26",
+    "@verdaccio/cli": "workspace:6.0.0-6-next.37",
+    "@verdaccio/ui-theme": "workspace:6.0.0-6-next.28",
     "fs-extra": "10.1.0",
     "webpack": "5.74.0",
-    "webpack-bundle-analyzer": "4.5.0",
+    "webpack-bundle-analyzer": "4.6.1",
     "webpack-bundle-size-analyzer": "3.1.0",
     "webpack-cli": "4.10.0"
   },

packages/store/CHANGELOG.md

@@ -1,5 +1,57 @@
 # @verdaccio/store
 
+## 6.0.0-6-next.25
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/tarball@11.0.0-6-next.14
+  - @verdaccio/url@11.0.0-6-next.11
+  - @verdaccio/hooks@6.0.0-6-next.15
+  - @verdaccio/loaders@6.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/local-storage@11.0.0-6-next.15
+  - @verdaccio/proxy@6.0.0-6-next.23
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.24
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/local-storage@11.0.0-6-next.14
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/tarball@11.0.0-6-next.13
+  - @verdaccio/url@11.0.0-6-next.10
+  - @verdaccio/hooks@6.0.0-6-next.14
+  - @verdaccio/loaders@6.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+  - @verdaccio/proxy@6.0.0-6-next.22
+
 ## 6.0.0-6-next.23
 
 ### Major Changes

packages/store/jest.config.js

@@ -4,9 +4,9 @@ module.exports = Object.assign({}, config, {
   coverageThreshold: {
     global: {
       // FIXME: increase to 90
-      branches: 51,
-      functions: 75,
-      lines: 64,
+      branches: 55,
+      functions: 81,
+      lines: 71,
     },
   },
 });

packages/store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/store",
-  "version": "6.0.0-6-next.23",
+  "version": "6.0.0-6-next.25",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,16 +39,16 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/hooks": "workspace:6.0.0-6-next.14",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.13",
-    "@verdaccio/local-storage": "workspace:11.0.0-6-next.13",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/proxy": "workspace:6.0.0-6-next.21",
-    "@verdaccio/url": "workspace:11.0.0-6-next.10",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
-    "@verdaccio/tarball": "workspace:11.0.0-6-next.13",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/hooks": "workspace:6.0.0-6-next.15",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.14",
+    "@verdaccio/local-storage": "workspace:11.0.0-6-next.15",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/proxy": "workspace:6.0.0-6-next.23",
+    "@verdaccio/url": "workspace:11.0.0-6-next.11",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
+    "@verdaccio/tarball": "workspace:11.0.0-6-next.14",
     "JSONStream": "1.3.5",
     "debug": "4.3.4",
     "lodash": "4.17.21",
@@ -56,9 +56,9 @@
     "semver": "7.3.7"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
+    "@types/node": "16.11.56",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
     "undici": "4.16.0",
     "nock": "13.2.9",
     "node-mocks-http": "1.11.0",

packages/store/src/lib/storage-utils.ts

@@ -256,7 +256,7 @@ export function hasInvalidPublishBody(manifest: Pick<Manifest, '_attachments' |
   */
 export function mergeVersions(cacheManifest: Manifest, remoteManifest: Manifest): Manifest {
   let _cacheManifest = { ...cacheManifest };
-  const { versions } = remoteManifest;
+  const { versions, time } = remoteManifest;
   // copy new versions to a cache
   // NOTE: if a certain version was updated, we can't refresh it reliably
   for (const i in versions) {
@@ -265,6 +265,12 @@ export function mergeVersions(cacheManifest: Manifest, remoteManifest: Manifest)
     }
   }
 
+  for (const i in time) {
+    if (typeof cacheManifest.time[i] === 'undefined') {
+      _cacheManifest.time[i] = time[i];
+    }
+  }
+
   for (const distTag in remoteManifest[DIST_TAGS]) {
     if (_cacheManifest[DIST_TAGS][distTag] !== remoteManifest[DIST_TAGS][distTag]) {
       if (

packages/store/src/storage.ts

@@ -25,6 +25,8 @@ import {
   convertDistVersionToLocalTarballsUrl,
 } from '@verdaccio/tarball';
 import {
+  AbbreviatedManifest,
+  AbbreviatedVersions,
   Author,
   Config,
   DistFile,
@@ -91,6 +93,9 @@ class Storage {
     debug('uplinks available %o', Object.keys(this.uplinks));
   }
 
+  static ABBREVIATED_HEADER =
+    'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.8, */*';
+
   /**
    * Change an existing package (i.e. unpublish one version)
    Function changes a package info from local storage and all uplinks with write access./
@@ -523,17 +528,66 @@ class Storage {
     return convertedManifest;
   }
 
+  private convertAbbreviatedManifest(manifest: Manifest): AbbreviatedManifest {
+    const abbreviatedVersions = Object.keys(manifest.versions).reduce(
+      (acc: AbbreviatedVersions, version: string) => {
+        const _version = manifest.versions[version];
+        // This should be align with this document
+        // https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-version-object
+        const _version_abbreviated = {
+          name: _version.name,
+          version: _version.version,
+          description: _version.description,
+          deprecated: _version.deprecated,
+          bin: _version.bin,
+          dist: _version.dist,
+          engines: _version.engines,
+          funding: _version.funding,
+          directories: _version.directories,
+          dependencies: _version.dependencies,
+          devDependencies: _version.devDependencies,
+          peerDependencies: _version.peerDependencies,
+          optionalDependencies: _version.optionalDependencies,
+          bundleDependencies: _version.bundleDependencies,
+          // npm cli specifics
+          _hasShrinkwrap: _version._hasShrinkwrap,
+          hasInstallScript: _version.hasInstallScript,
+        };
+        acc[version] = _version_abbreviated;
+        return acc;
+      },
+      {}
+    );
+    const convertedManifest = {
+      name: manifest['name'],
+      [DIST_TAGS]: manifest[DIST_TAGS],
+      versions: abbreviatedVersions,
+      modified: manifest.time.modified,
+      // NOTE: special case for pnpm https://github.com/pnpm/rfcs/pull/2
+      time: manifest.time,
+    };
+
+    return convertedManifest;
+  }
+
   /**
    * Return a manifest or version based on the options.
    * @param options {Object}
    * @returns A package manifest or specific version
    */
-  public async getPackageByOptions(options: IGetPackageOptionsNext): Promise<Manifest | Version> {
+  public async getPackageByOptions(
+    options: IGetPackageOptionsNext
+  ): Promise<Manifest | AbbreviatedManifest | Version> {
     // if no version we return the whole manifest
     if (_.isNil(options.version) === false) {
       return this.getPackageByVersion(options);
     } else {
-      return this.getPackageManifest(options);
+      const manifest = await this.getPackageManifest(options);
+      if (options.abbreviated === true) {
+        debug('abbreviated manifest');
+        return this.convertAbbreviatedManifest(manifest);
+      }
+      return manifest;
     }
   }
 
@@ -596,7 +650,7 @@ class Storage {
   }
 
   /**
-   * Initialize the storage asyncronously.
+   * Initialize the storage asynchronously.
    * @param config Config
    * @param filters IPluginFilters
    * @returns Storage instance
@@ -1613,7 +1667,7 @@ class Storage {
    * @param options options
    * @returns Returns a promise that resolves with the merged manifest.
    */
-  public async mergeCacheRemoteMetadata(
+  private async mergeCacheRemoteMetadata(
     uplink: IProxy,
     cachedManifest: Manifest,
     options: ISyncUplinksOptions
@@ -1642,7 +1696,7 @@ class Storage {
     );
 
     try {
-      _cacheManifest = validatioUtils.normalizeMetadata(remoteManifest, _cacheManifest.name);
+      _cacheManifest = validatioUtils.normalizeMetadata(_cacheManifest, _cacheManifest.name);
     } catch (err: any) {
       this.logger.error(
         {
@@ -1657,7 +1711,7 @@ class Storage {
     // merge time field cache and remote
     _cacheManifest = mergeUplinkTimeIntoLocalNext(_cacheManifest, remoteManifest);
     // update the _uplinks field in the cache
-    _cacheManifest = updateVersionsHiddenUpLinkNext(cachedManifest, uplink);
+    _cacheManifest = updateVersionsHiddenUpLinkNext(_cacheManifest, uplink);
     try {
       // merge versions from remote into the cache
       _cacheManifest = mergeVersions(_cacheManifest, remoteManifest);
@@ -1667,7 +1721,7 @@ class Storage {
         {
           err: err,
         },
-        'package.json mergin has failed @{!err?.message}\n@{err.stack}'
+        'package.json merge has failed @{!err?.message}\n@{err.stack}'
       );
       throw err;
     }

packages/store/src/type.ts

@@ -33,6 +33,12 @@ export type IGetPackageOptionsNext = {
    * internally indicates to avoid any cache layer.
    */
   byPassCache?: boolean;
+
+  /**
+   * Reduce the package metadata to the minimum required to get the package.
+   * https://github.com/npm/registry/blob/c0b573593fb5d6e0268de7d6612addd7059cb779/docs/responses/package-metadata.md#package-metadata
+   */
+  abbreviated?: boolean;
 };
 
 // @deprecate remove this type

packages/store/test/storage.spec.ts

@@ -11,16 +11,17 @@ import { API_ERROR, DIST_TAGS, HEADERS, HEADER_TYPE, errorUtils, fileUtils } fro
 import { setup } from '@verdaccio/logger';
 import {
   addNewVersion,
+  generateLocalPackageMetadata,
   generatePackageMetadata,
   generateRemotePackageMetadata,
 } from '@verdaccio/test-helper';
-import { Manifest, Version } from '@verdaccio/types';
+import { AbbreviatedManifest, Manifest, Version } from '@verdaccio/types';
 
 import { Storage } from '../src';
 import manifestFooRemoteNpmjs from './fixtures/manifests/foo-npmjs.json';
 import { configExample } from './helpers';
 
-function generateRamdonStorage() {
+function generateRandomStorage() {
   const tempStorage = pseudoRandomBytes(5).toString('hex');
   const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), '/verdaccio-test'));
 
@@ -29,7 +30,7 @@ function generateRamdonStorage() {
 
 setup({ type: 'stdout', format: 'pretty', level: 'trace' });
 
-const domain = 'http://localhost:4873';
+const domain = 'https://registry.npmjs.org';
 const fakeHost = 'localhost:4873';
 const fooManifest = generatePackageMetadata('foo', '1.0.0');
 
@@ -40,23 +41,6 @@ describe('storage', () => {
     jest.clearAllMocks();
   });
 
-  // describe('add packages', () => {
-  //   test('add package item', async () => {
-  //     nock(domain).get('/foo').reply(404);
-  //     const config = new Config(
-  //       configExample({
-  //         storage: generateRamdonStorage(),
-  //       })
-  //     );
-  //     const storage = new Storage(config);
-  //     await storage.init(config);
-
-  //     await storage.addPackage('foo', fooManifest, (err) => {
-  //       expect(err).toBeNull();
-  //     });
-  //   });
-  // });
-
   describe('updateManifest', () => {
     test('create private package', async () => {
       const mockDate = '2018-01-14T11:17:40.712Z';
@@ -71,7 +55,7 @@ describe('storage', () => {
         configExample(
           {
             ...getDefaultConfig(),
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/updateManifest-1.yaml',
           __dirname
@@ -114,7 +98,7 @@ describe('storage', () => {
       const config = new Config(
         configExample(
           {
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/updateManifest-1.yaml',
           __dirname
@@ -155,7 +139,7 @@ describe('storage', () => {
         },
       };
       const pkgName = 'upstream';
-      // const storage = generateRamdonStorage();
+      // const storage = generateRandomStorage();
       const config = new Config(
         configExample(
           {
@@ -246,7 +230,7 @@ describe('storage', () => {
       const config = new Config(
         configExample(
           {
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/getTarballNext-getupstream.yaml',
           __dirname
@@ -276,7 +260,7 @@ describe('storage', () => {
       const config = new Config(
         configExample({
           ...getDefaultConfig(),
-          storage: generateRamdonStorage(),
+          storage: generateRandomStorage(),
         })
       );
       const storage = new Storage(config);
@@ -313,7 +297,7 @@ describe('storage', () => {
       const config = new Config(
         configExample(
           {
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/getTarballNext-getupstream.yaml',
           __dirname
@@ -357,7 +341,7 @@ describe('storage', () => {
       const config = new Config(
         configExample(
           {
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/getTarballNext-getupstream.yaml',
           __dirname
@@ -417,7 +401,7 @@ describe('storage', () => {
         .replyWithFile(201, path.join(__dirname, 'fixtures/tarball.tgz'), {
           [HEADER_TYPE.CONTENT_LENGTH]: 277,
         });
-      const storagePath = generateRamdonStorage();
+      const storagePath = generateRandomStorage();
       const config = new Config(
         configExample(
           {
@@ -474,7 +458,7 @@ describe('storage', () => {
       const config = new Config(
         configExample(
           {
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           },
           './fixtures/config/getTarballNext-getupstream.yaml',
           __dirname
@@ -532,7 +516,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncDoubleUplinksMetadata.yaml',
             __dirname
@@ -562,7 +546,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncSingleUplinksMetadata.yaml',
             __dirname
@@ -583,7 +567,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncSingleUplinksMetadata.yaml',
             __dirname
@@ -600,12 +584,12 @@ describe('storage', () => {
 
     describe('success scenarios', () => {
       test('should handle one proxy success', async () => {
-        const fooManifest = generatePackageMetadata('foo', '8.0.0');
+        const fooManifest = generateLocalPackageMetadata('foo', '8.0.0');
         nock('https://registry.verdaccio.org').get('/foo').reply(201, manifestFooRemoteNpmjs);
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncSingleUplinksMetadata.yaml',
             __dirname
@@ -617,7 +601,28 @@ describe('storage', () => {
         const [response] = await storage.syncUplinksMetadataNext(fooManifest.name, fooManifest);
         expect(response).not.toBeNull();
         expect((response as Manifest).name).toEqual(fooManifest.name);
+        expect(Object.keys((response as Manifest).versions)).toEqual([
+          '8.0.0',
+          '1.0.0',
+          '0.0.3',
+          '0.0.4',
+          '0.0.5',
+          '0.0.6',
+          '0.0.7',
+        ]);
+        expect(Object.keys((response as Manifest).time)).toEqual([
+          'modified',
+          'created',
+          '8.0.0',
+          '1.0.0',
+          '0.0.3',
+          '0.0.4',
+          '0.0.5',
+          '0.0.6',
+          '0.0.7',
+        ]);
         expect((response as Manifest)[DIST_TAGS].latest).toEqual('8.0.0');
+        expect((response as Manifest).time['8.0.0']).toBeDefined();
       });
 
       test('should handle one proxy success with no local cache manifest', async () => {
@@ -625,7 +630,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncSingleUplinksMetadata.yaml',
             __dirname
@@ -647,7 +652,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncNoUplinksMetadata.yaml',
             __dirname
@@ -670,7 +675,7 @@ describe('storage', () => {
         const config = new Config(
           configExample(
             {
-              storage: generateRamdonStorage(),
+              storage: generateRandomStorage(),
             },
             './fixtures/config/syncSingleUplinksMetadata.yaml',
             __dirname
@@ -689,7 +694,184 @@ describe('storage', () => {
     });
   });
 
-  // TODO: getPackageNext should replace getPackage eventually
+  describe('getLocalDatabaseNext', () => {
+    test('should return 0 local packages', async () => {
+      const config = new Config(
+        configExample({
+          ...getDefaultConfig(),
+          storage: generateRandomStorage(),
+        })
+      );
+      const storage = new Storage(config);
+      await storage.init(config);
+      await expect(storage.getLocalDatabaseNext()).resolves.toHaveLength(0);
+    });
+
+    test('should return 1 local packages', async () => {
+      const config = new Config(
+        configExample({
+          ...getDefaultConfig(),
+          storage: generateRandomStorage(),
+        })
+      );
+      const req = httpMocks.createRequest({
+        method: 'GET',
+        connection: { remoteAddress: fakeHost },
+        headers: {
+          host: 'host',
+        },
+        url: '/',
+      });
+      const storage = new Storage(config);
+      await storage.init(config);
+      const manifest = generatePackageMetadata('foo');
+      const ac = new AbortController();
+      await storage.updateManifest(manifest, {
+        signal: ac.signal,
+        name: 'foo',
+        uplinksLook: false,
+        requestOptions: {
+          headers: req.headers as any,
+          protocol: req.protocol,
+          host: req.get('host') as string,
+        },
+      });
+      const response = await storage.getLocalDatabaseNext();
+      expect(response).toHaveLength(1);
+      expect(response[0]).toEqual(expect.objectContaining({ name: 'foo', version: '1.0.0' }));
+    });
+  });
+
+  describe('tokens', () => {
+    describe('saveToken', () => {
+      test('should retrieve tokens created', async () => {
+        const config = new Config(
+          configExample({
+            ...getDefaultConfig(),
+            storage: generateRandomStorage(),
+          })
+        );
+        const storage = new Storage(config);
+        await storage.init(config);
+        await storage.saveToken({
+          user: 'foo',
+          token: 'secret',
+          key: 'key',
+          created: 'created',
+          readonly: true,
+        });
+        const tokens = await storage.readTokens({ user: 'foo' });
+        expect(tokens).toEqual([
+          { user: 'foo', token: 'secret', key: 'key', readonly: true, created: 'created' },
+        ]);
+      });
+
+      test('should delete a token created', async () => {
+        const config = new Config(
+          configExample({
+            ...getDefaultConfig(),
+            storage: generateRandomStorage(),
+          })
+        );
+        const storage = new Storage(config);
+        await storage.init(config);
+        await storage.saveToken({
+          user: 'foo',
+          token: 'secret',
+          key: 'key',
+          created: 'created',
+          readonly: true,
+        });
+        const tokens = await storage.readTokens({ user: 'foo' });
+        expect(tokens).toHaveLength(1);
+        await storage.deleteToken('foo', 'key');
+        const tokens2 = await storage.readTokens({ user: 'foo' });
+        expect(tokens2).toHaveLength(0);
+      });
+    });
+  });
+
+  describe('removeTarball', () => {
+    test('should fail on remove tarball of package does not exist', async () => {
+      const config = new Config(
+        configExample({
+          ...getDefaultConfig(),
+          storage: generateRandomStorage(),
+        })
+      );
+      const storage = new Storage(config);
+      await storage.init(config);
+      await expect(storage.removeTarball('foo', 'foo-1.0.0.tgz', 'rev')).rejects.toThrow(
+        API_ERROR.NO_PACKAGE
+      );
+    });
+  });
+
+  describe('removePackage', () => {
+    test('should remove entirely a package', async () => {
+      const config = new Config(
+        configExample({
+          ...getDefaultConfig(),
+          storage: generateRandomStorage(),
+        })
+      );
+      const req = httpMocks.createRequest({
+        method: 'GET',
+        connection: { remoteAddress: fakeHost },
+        headers: {
+          host: fakeHost,
+          [HEADERS.FORWARDED_PROTO]: 'http',
+        },
+        url: '/',
+      });
+      const storage = new Storage(config);
+      await storage.init(config);
+
+      const manifest = generatePackageMetadata('foo');
+      const ac = new AbortController();
+      // 1. publish a package
+      await storage.updateManifest(manifest, {
+        signal: ac.signal,
+        name: 'foo',
+        uplinksLook: false,
+        requestOptions: {
+          headers: req.headers as any,
+          protocol: req.protocol,
+          host: req.get('host') as string,
+        },
+      });
+      // 2. request package (should be available in the local cache)
+      const manifest1 = (await storage.getPackageByOptions({
+        name: 'foo',
+        uplinksLook: false,
+        requestOptions: {
+          headers: req.headers as any,
+          protocol: req.protocol,
+          host: req.get('host') as string,
+        },
+      })) as Manifest;
+      const _rev = manifest1._rev;
+      // 3. remove the tarball
+      await expect(
+        storage.removeTarball(manifest1.name, 'foo-1.0.0.tgz', _rev)
+      ).resolves.toBeDefined();
+      // 4. remove the package
+      await storage.removePackage(manifest1.name, _rev);
+      // 5. fails if package does not exist anymore in storage
+      await expect(
+        storage.getPackageByOptions({
+          name: 'foo',
+          uplinksLook: false,
+          requestOptions: {
+            headers: req.headers as any,
+            protocol: req.protocol,
+            host: req.get('host') as string,
+          },
+        })
+      ).rejects.toThrowError('package does not exist on uplink: foo');
+    });
+  });
+
   describe('get packages getPackageByOptions()', () => {
     describe('with uplinks', () => {
       test('should get 201 and merge from uplink', async () => {
@@ -697,7 +879,7 @@ describe('storage', () => {
         const config = new Config(
           configExample({
             ...getDefaultConfig(),
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -729,7 +911,7 @@ describe('storage', () => {
         const config = new Config(
           configExample({
             ...getDefaultConfig(),
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -762,7 +944,7 @@ describe('storage', () => {
         const config = new Config(
           configExample({
             ...getDefaultConfig(),
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -795,7 +977,7 @@ describe('storage', () => {
         const config = new Config(
           configExample({
             ...getDefaultConfig(),
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -835,7 +1017,7 @@ describe('storage', () => {
                 url: domain,
               },
             },
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -875,7 +1057,7 @@ describe('storage', () => {
                 url: domain,
               },
             },
-            storage: generateRamdonStorage(),
+            storage: generateRandomStorage(),
           })
         );
         const req = httpMocks.createRequest({
@@ -902,6 +1084,72 @@ describe('storage', () => {
           })
         ).rejects.toThrow(errorUtils.getServiceUnavailable('ETIMEDOUT'));
       });
+
+      test('should fetch abbreviated version of manifest ', async () => {
+        const fooManifest = generateLocalPackageMetadata('foo', '1.0.0');
+        nock(domain).get('/foo').reply(201, fooManifest);
+        const config = new Config(
+          configExample({
+            ...getDefaultConfig(),
+            storage: generateRandomStorage(),
+          })
+        );
+        const req = httpMocks.createRequest({
+          method: 'GET',
+          connection: { remoteAddress: fakeHost },
+          headers: {
+            host: fakeHost,
+            [HEADERS.FORWARDED_PROTO]: 'http',
+          },
+          url: '/',
+        });
+        const storage = new Storage(config);
+        await storage.init(config);
+
+        const manifest = (await storage.getPackageByOptions({
+          name: 'foo',
+          uplinksLook: true,
+          requestOptions: {
+            headers: req.headers as any,
+            protocol: req.protocol,
+            host: req.get('host') as string,
+          },
+          abbreviated: true,
+        })) as AbbreviatedManifest;
+        const { versions, name } = manifest;
+        expect(name).toEqual('foo');
+        expect(Object.keys(versions)).toEqual(['1.0.0']);
+        expect(manifest[DIST_TAGS]).toEqual({ latest: '1.0.0' });
+        const version = versions['1.0.0'];
+        expect(Object.keys(version)).toEqual([
+          'name',
+          'version',
+          'description',
+          'deprecated',
+          'bin',
+          'dist',
+          'engines',
+          'funding',
+          'directories',
+          'dependencies',
+          'devDependencies',
+          'peerDependencies',
+          'optionalDependencies',
+          'bundleDependencies',
+          '_hasShrinkwrap',
+          'hasInstallScript',
+        ]);
+        expect(manifest.modified).toBeDefined();
+        // special case for pnpm/rfcs/pull/2
+        expect(manifest.time).toBeDefined();
+        // fields must not have
+        // @ts-expect-error
+        expect(manifest.readme).not.toBeDefined();
+        // @ts-expect-error
+        expect(manifest._attachments).not.toBeDefined();
+        // @ts-expect-error
+        expect(manifest._rev).not.toBeDefined();
+      });
     });
   });
 });

packages/tools/docusaurus-plugin-contributors/CHANGELOG.md

@@ -0,0 +1,6 @@
+# docusaurus-plugin-contributors
+
+## 1.0.1-6-next.0
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage

packages/tools/docusaurus-plugin-contributors/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docusaurus-plugin-contributors",
-  "version": "1.0.0",
+  "version": "1.0.1-6-next.0",
   "private": true,
   "main": "./build/index.js",
   "types": "build/index.d.ts",

packages/tools/docusaurus-plugin-contributors/src/index.ts

@@ -31,7 +31,10 @@ export default function contributorsPlugin(
       const contributorsFilesName = pathFileName || join(__dirname, 'contributors.json');
       try {
         content = JSON.parse(readFileSync(contributorsFilesName, 'utf8'));
-        return content;
+        return {
+          contributors: content.contributors,
+          repositories: content.repositories,
+        };
       } catch (error) {
         console.log('error', error);
         return { error: true };
@@ -47,7 +50,7 @@ export default function contributorsPlugin(
         path: normalizeUrl([baseUrl, 'contributors']),
         component: '@site/src/components/Contributors.tsx',
         modules: {
-          contributors: contributorsJsonPath,
+          data: contributorsJsonPath,
         },
         exact: true,
       };

packages/tools/eslint/package.json

@@ -16,7 +16,7 @@
     "eslint-config-prettier": "8.5.0",
     "eslint-plugin-babel": "5.3.1",
     "eslint-plugin-import": "2.26.0",
-    "eslint-plugin-jest": "26.8.0",
+    "eslint-plugin-jest": "26.8.4",
     "eslint-plugin-jsx-a11y": "6.6.1",
     "eslint-plugin-prettier": "4.2.1",
     "eslint-plugin-react": "7.30.1",

packages/tools/helpers/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Change Log
 
+## 1.1.0-6-next.3
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+
+## 1.1.0-6-next.2
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
 ## 1.1.0-6-next.1
 
 ### Patch Changes

packages/tools/helpers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/test-helper",
-  "version": "1.1.0-6-next.1",
+  "version": "1.1.0-6-next.3",
   "private": true,
   "description": "test helpers",
   "author": "Juan Picado <juanpicado19@gmail.com>",
@@ -9,12 +9,12 @@
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.23",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.24",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "body-parser": "1.20.0",
     "express": "4.18.1",
     "supertest": "6.2.4",

packages/tools/helpers/src/generatePackageMetadata.ts

@@ -1,4 +1,4 @@
-import { Manifest } from '@verdaccio/types';
+import { GenericBody, Manifest } from '@verdaccio/types';
 
 export interface DistTags {
   [key: string]: string;
@@ -73,7 +73,8 @@ export function addNewVersion(
 export function generateLocalPackageMetadata(
   pkgName: string,
   version = '1.0.0',
-  domain: string = 'http://localhost:5555'
+  domain: string = 'http://localhost:5555',
+  time?: GenericBody
 ): Manifest {
   // @ts-ignore
   return {
@@ -115,6 +116,11 @@ export function generateLocalPackageMetadata(
         },
       },
     },
+    time: time ?? {
+      modified: new Date().toISOString(),
+      created: new Date().toISOString(),
+      [version]: new Date().toISOString(),
+    },
     readme: '# test',
     _attachments: {
       [`${getTarball(pkgName)}-${version}.tgz`]: {

packages/utils/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/utils
 
+## 6.0.0-6-next.13
+
+### Patch Changes
+
+- Updated dependencies [351aeeaa]
+  - @verdaccio/core@6.0.0-6-next.7
+
 ## 6.0.0-6-next.12
 
 ### Major Changes

packages/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/utils",
-  "version": "6.0.0-6-next.12",
+  "version": "6.0.0-6-next.13",
   "description": "verdaccio utilities",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -30,7 +30,7 @@
     "npm": ">=6"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
     "minimatch": "3.1.2",
     "semver": "7.3.7",
     "lodash": "4.17.21"

packages/verdaccio/CHANGELOG.md

@@ -1,5 +1,39 @@
 # verdaccio
 
+## 6.0.0-6-next.45
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/cli@6.0.0-6-next.37
+  - @verdaccio/hooks@6.0.0-6-next.15
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/node-api@6.0.0-6-next.35
+  - verdaccio-audit@11.0.0-6-next.10
+  - verdaccio-htpasswd@11.0.0-6-next.15
+  - @verdaccio/ui-theme@6.0.0-6-next.28
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.44
+
+### Patch Changes
+
+- Updated dependencies [20d63dc3]
+  - @verdaccio/ui-theme@6.0.0-6-next.27
+
+## 6.0.0-6-next.43
+
+### Patch Changes
+
+- @verdaccio/hooks@6.0.0-6-next.14
+- @verdaccio/logger@6.0.0-6-next.12
+- @verdaccio/node-api@6.0.0-6-next.34
+- verdaccio-audit@11.0.0-6-next.9
+- verdaccio-htpasswd@11.0.0-6-next.14
+- @verdaccio/ui-theme@6.0.0-6-next.26
+- @verdaccio/cli@6.0.0-6-next.36
+
 ## 6.0.0-6-next.42
 
 ### Major Changes

packages/verdaccio/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio",
-  "version": "6.0.0-6-next.42",
+  "version": "6.0.0-6-next.45",
   "description": "A lightweight private npm proxy registry",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -37,22 +37,22 @@
   },
   "homepage": "https://verdaccio.org",
   "dependencies": {
-    "@verdaccio/cli": "workspace:6.0.0-6-next.35",
-    "@verdaccio/hooks": "workspace:6.0.0-6-next.14",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/node-api": "workspace:6.0.0-6-next.33",
-    "@verdaccio/ui-theme": "workspace:6.0.0-6-next.26",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
-    "verdaccio-audit": "workspace:11.0.0-6-next.9",
-    "verdaccio-htpasswd": "workspace:11.0.0-6-next.14"
+    "@verdaccio/cli": "workspace:6.0.0-6-next.37",
+    "@verdaccio/hooks": "workspace:6.0.0-6-next.15",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/node-api": "workspace:6.0.0-6-next.35",
+    "@verdaccio/ui-theme": "workspace:6.0.0-6-next.28",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
+    "verdaccio-audit": "workspace:11.0.0-6-next.10",
+    "verdaccio-htpasswd": "workspace:11.0.0-6-next.15"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/store": "workspace:6.0.0-6-next.23",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
-    "fastify": "4.3.0",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/store": "workspace:6.0.0-6-next.25",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
+    "fastify": "4.5.3",
     "yaml": "2.1.1",
     "got": "11.8.5",
     "lodash": "4.17.21",

packages/web/CHANGELOG.md

@@ -1,5 +1,58 @@
 # @verdaccio/web
 
+## 6.0.0-6-next.32
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/auth@6.0.0-6-next.24
+  - @verdaccio/core@6.0.0-6-next.7
+  - @verdaccio/readme@11.0.0-6-next.6
+  - @verdaccio/tarball@11.0.0-6-next.14
+  - @verdaccio/url@11.0.0-6-next.11
+  - @verdaccio/loaders@6.0.0-6-next.14
+  - @verdaccio/logger@6.0.0-6-next.13
+  - @verdaccio/store@6.0.0-6-next.25
+  - @verdaccio/middleware@6.0.0-6-next.24
+  - @verdaccio/config@6.0.0-6-next.16
+  - @verdaccio/utils@6.0.0-6-next.13
+
+## 6.0.0-6-next.31
+
+### Minor Changes
+
+- 37274e4c: feat: implement abbreviated manifest
+
+  Enable abbreviated manifest data by adding the header:
+
+  ```
+  curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
+  ```
+
+  It returns a filtered manifest, additionally includes the [time](https://github.com/pnpm/rfcs/pull/2) field by request.
+
+  Current support for packages managers:
+
+  - npm: yes
+  - pnpm: yes
+  - yarn classic: yes
+  - yarn modern (+2.x): [no](https://github.com/yarnpkg/berry/pull/3981#issuecomment-1076566096)
+
+  https://github.com/npm/registry/blob/master/docs/responses/package-metadata.md#abbreviated-metadata-format
+
+### Patch Changes
+
+- Updated dependencies [37274e4c]
+  - @verdaccio/store@6.0.0-6-next.24
+  - @verdaccio/auth@6.0.0-6-next.23
+  - @verdaccio/core@6.0.0-6-next.6
+  - @verdaccio/readme@11.0.0-6-next.5
+  - @verdaccio/tarball@11.0.0-6-next.13
+  - @verdaccio/url@11.0.0-6-next.10
+  - @verdaccio/loaders@6.0.0-6-next.13
+  - @verdaccio/logger@6.0.0-6-next.12
+
 ## 6.0.0-6-next.30
 
 ### Major Changes

packages/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/web",
-  "version": "6.0.0-6-next.30",
+  "version": "6.0.0-6-next.32",
   "description": "web ui middleware",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -25,17 +25,17 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.23",
-    "@verdaccio/core": "workspace:6.0.0-6-next.6",
-    "@verdaccio/config": "workspace:6.0.0-6-next.15",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.13",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.12",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.23",
-    "@verdaccio/readme": "workspace:11.0.0-6-next.5",
-    "@verdaccio/store": "workspace:6.0.0-6-next.23",
-    "@verdaccio/tarball": "workspace:11.0.0-6-next.13",
-    "@verdaccio/url": "workspace:11.0.0-6-next.10",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.12",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.24",
+    "@verdaccio/core": "workspace:6.0.0-6-next.7",
+    "@verdaccio/config": "workspace:6.0.0-6-next.16",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.14",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.13",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.24",
+    "@verdaccio/readme": "workspace:11.0.0-6-next.6",
+    "@verdaccio/store": "workspace:6.0.0-6-next.25",
+    "@verdaccio/tarball": "workspace:11.0.0-6-next.14",
+    "@verdaccio/url": "workspace:11.0.0-6-next.11",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.13",
     "body-parser": "1.20.0",
     "debug": "4.3.4",
     "express": "4.18.1",
@@ -43,17 +43,17 @@
     "lru-cache": "6.0.0"
   },
   "devDependencies": {
-    "@types/node": "16.11.47",
-    "@verdaccio/types": "workspace:11.0.0-6-next.13",
-    "@verdaccio/test-helper": "workspace:1.1.0-6-next.1",
-    "@verdaccio/api": "workspace:6.0.0-6-next.26",
+    "@types/node": "16.11.56",
+    "@verdaccio/types": "workspace:11.0.0-6-next.15",
+    "@verdaccio/test-helper": "workspace:1.1.0-6-next.3",
+    "@verdaccio/api": "workspace:6.0.0-6-next.28",
     "node-html-parser": "4.1.5",
     "supertest": "6.2.4",
     "nock": "13.2.9",
     "jsdom": "20.0.0",
     "undici": "4.16.0",
-    "verdaccio-auth-memory": "workspace:11.0.0-6-next.9",
-    "verdaccio-memory": "workspace:11.0.0-6-next.11"
+    "verdaccio-auth-memory": "workspace:11.0.0-6-next.10",
+    "verdaccio-memory": "workspace:11.0.0-6-next.12"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/web/src/api/package.ts

@@ -75,7 +75,7 @@ function addPackageWebApi(storage: Storage, auth: IAuth, config: Config): Router
         }
       } catch (err: any) {
         debug('process packages error %o', err);
-        logger.logger.error(
+        logger.error(
           { name: pkg.name, error: err },
           'permission process for @{name} has failed: @{error}'
         );

packages/web/src/api/readme.ts

@@ -45,11 +45,12 @@ function addReadmeWebApi(storage: Storage, auth: IAuth): Router {
         remoteAddress: req.socket.remoteAddress,
       };
       try {
-        const manifest = await storage.getPackageByOptions({
+        const manifest = (await storage.getPackageByOptions({
           name,
           uplinksLook: true,
+          abbreviated: false,
           requestOptions,
-        });
+        })) as Manifest;
         debug('readme pkg %o', manifest?.name);
         res.set(HEADER_TYPE.CONTENT_TYPE, HEADERS.TEXT_PLAIN_UTF8);
         try {

renovate.json

@@ -2,15 +2,35 @@
   "extends": ["config:base", "schedule:earlyMondays", "helpers:pinGitHubActionDigests"],
   "prConcurrentLimit": 1,
   "ignorePaths": ["docker-examples/**"],
-  "ignoreDeps": ["eslint-plugin-verdaccio", "@verdaccio/test-helper"],
+  "ignoreDeps": [
+    "eslint-plugin-verdaccio",
+    "@verdaccio/test-helper",
+    "docker/setup-buildx-action",
+    "docker/login-action",
+    "docker/build-push-action",
+    "crazy-max/ghaction-docker-meta",
+    "pnpm"
+  ],
   "baseBranches": ["master", "5.x"],
-  "major": true,
+  "major": false,
   "labels": ["bot: dependencies"],
   "packageRules": [
     {
       "packageNames": ["aws-sdk"],
       "allowedVersions": "2.607.0"
     },
+    {
+      "packageNames": ["got"],
+      "allowedVersions": "^11.8.5"
+    },
+    {
+      "packageNames": ["globby"],
+      "allowedVersions": "^12.2.0"
+    },
+    {
+      "packageNames": ["get-port"],
+      "allowedVersions": "^5.1.1"
+    },
     {
       "packageNames": ["@google-cloud/datastore"],
       "allowedVersions": "4.5.0"