chore: update versions (next) (#4056)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -1,245 +0,0 @@
-{
-  "projectName": "verdaccio",
-  "projectOwner": "verdaccio",
-  "repoType": "github",
-  "repoHost": "https://github.com",
-  "commitConvention": "none",
-  "files": [
-    "CONTRIBUTORS.md"
-  ],
-  "contributors": [
-    {
-      "login": "juanpicado",
-      "name": "Juan Picado",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
-      "profile": "https://www.linkedin.com/in/jotadeveloper/",
-      "contributions": [
-        "doc",
-        "code",
-        "infra",
-        "eventOrganizing",
-        "blog",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "sergiohgz",
-      "name": "Sergio Herrera",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
-      "profile": "https://github.com/sergiohgz",
-      "contributions": [
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "DanielRuf",
-      "name": "Daniel Ruf",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
-      "profile": "https://daniel-ruf.de/",
-      "contributions": [
-        "security",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "priscilawebdev",
-      "name": "Priscila Oliveira",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
-      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
-      "contributions": [
-        "design",
-        "code",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "ayusharma",
-      "name": "Ayush Sharma",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
-      "profile": "http://ayusharma.github.io/",
-      "contributions": [
-        "infra",
-        "code",
-        "design"
-      ]
-    },
-    {
-      "login": "trentearl",
-      "name": "Trent Earl",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
-      "profile": "https://github.com/trentearl",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jmwilkinson",
-      "name": "jmwilkinson",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
-      "profile": "https://github.com/jmwilkinson",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "bufferoverflow",
-      "name": "Roger Meier",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
-      "profile": "https://github.com/bufferoverflow",
-      "contributions": [
-        "plugin"
-      ]
-    },
-    {
-      "login": "jamesgeorge007",
-      "name": "James George",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
-      "profile": "https://ghuser.io/jamesgeorge007",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "AvailCat",
-      "name": "AvailCat",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
-      "profile": "https://github.com/AvailCat",
-      "contributions": [
-        "code",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "lgaitan",
-      "name": "Lucius Gaitán",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
-      "profile": "https://www.luciusgaitan.com/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ramonornela",
-      "name": "Ramon Henrique Ornelas",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
-      "profile": "https://github.com/ramonornela",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "UnitedMarsupials-zz",
-      "name": "UnitedMarsupials-zz",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
-      "profile": "https://people.freebsd.org/~mi/resume/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ryan-codingintrigue",
-      "name": "Ryan Graham",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
-      "profile": "http://www.codingintrigue.co.uk/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "coolsp",
-      "name": "coolsp",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
-      "profile": "https://github.com/coolsp",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ashishsurana",
-      "name": "Ashish Surana",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
-      "profile": "http://ashishsurana.in/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "buffaybu",
-      "name": "Wang Yifei",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
-      "profile": "https://github.com/buffaybu",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "lirantal",
-      "name": "Liran Tal",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
-      "profile": "https://twitter.com/liran_tal",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "brenordr",
-      "name": "Breno Rodrigues",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
-      "profile": "https://github.com/brenordr",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jachstet-sea",
-      "name": "jachstet-sea",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
-      "profile": "https://github.com/jachstet-sea",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "Vrtak-CZ",
-      "name": "Patrik Votoček",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
-      "profile": "https://patrik.votocek.cz/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "monkeywithacupcake",
-      "name": "jess",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
-      "profile": "https://github.com/monkeywithacupcake",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "toolsofraj",
-      "name": "toolsofraj",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
-      "profile": "https://github.com/toolsofraj",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ddhp",
-      "name": "Jian-Chen Chen (jesse)",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
-      "profile": "https://github.com/ddhp",
-      "contributions": [
-        "translation",
-        "code"
-      ]
-    }
-  ],
-  "skipCi": true,
-  "contributorsPerLine": 7
-}

.babelrc

@@ -1,26 +1,18 @@
 {
-  "presets": [ [
-    "@babel/env",
-    {
-      "useBuiltIns": "usage",
-      "corejs": {
-        "version": 3, "proposals": true
-      },
-      "targets": {
-        "node": 12
+  "presets": [
+    [
+      "@babel/env",
+      {
+        "targets": {
+          "node": 12
+        }
       }
-    }
-  ],
+    ],
     "@babel/typescript"
   ],
+  "ignore": ["**/*.d.ts"],
   "plugins": [
-    "babel-plugin-dynamic-import-node",
-    "@babel/proposal-class-properties",
-    "@babel/proposal-object-rest-spread",
     "@babel/plugin-proposal-optional-chaining",
     "@babel/plugin-proposal-nullish-coalescing-operator"
-    ],
-  "ignore": [
-    "**/*.d.ts"
   ]
 }

.changeset/afraid-mice-obey.md

@@ -1,15 +0,0 @@
----
-'@verdaccio/types': minor
-'@verdaccio/ui-theme': minor
-'@verdaccio/web': minor
----
-
-allow disable login on ui and endpoints
-
-To be able disable the login, set `login: false`, anything else would enable login. This flag will disable access via UI and web endpoints.
-
-```yml
-web:
-  title: verdaccio
-  login: false
-```

.changeset/angry-trees-tie.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/ui-theme': patch
+---
+
+- fixed login state when token is expired (@ku3mi41 in #3980)

.changeset/big-lobsters-sin.md

@@ -1,23 +0,0 @@
----
-'@verdaccio/local-storage': major
-'@verdaccio/url': major
-'verdaccio-aws-s3-storage': major
-'verdaccio-google-cloud': major
-'verdaccio-memory': major
-'@verdaccio/store': major
----
-
-# async storage plugin bootstrap
-
-Gives a storage plugin the ability to perform asynchronous tasks on initialization
-
-## Breaking change
-
-Plugin must have an init method in which asynchronous tasks can be executed
-
-```js
-public async init(): Promise<void> {
-   this.data = await this._fetchLocalPackages();
-   this._sync();
-}
-```

.changeset/breezy-mayflies-pull.md

@@ -3,44 +3,42 @@
 '@verdaccio/auth': major
 '@verdaccio/cli': major
 '@verdaccio/config': major
-'@verdaccio/commons-api': major
+'@verdaccio/core': major
 '@verdaccio/file-locking': major
-'verdaccio-htpasswd': major
-'@verdaccio/local-storage': major
-'@verdaccio/readme': major
-'@verdaccio/streams': major
+'@verdaccio/tarball': major
 '@verdaccio/types': major
+'@verdaccio/url': major
 '@verdaccio/hooks': major
 '@verdaccio/loaders': major
 '@verdaccio/logger': major
+'@verdaccio/logger-7': major
+'@verdaccio/logger-commons': major
 '@verdaccio/logger-prettify': major
 '@verdaccio/middleware': major
-'@verdaccio/mock': major
 '@verdaccio/node-api': major
-'@verdaccio/active-directory': major
 'verdaccio-audit': major
 'verdaccio-auth-memory': major
-'verdaccio-aws-s3-storage': major
-'verdaccio-google-cloud': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
 'verdaccio-memory': major
+'@verdaccio/ui-theme': major
 '@verdaccio/proxy': major
+'@verdaccio/search': major
 '@verdaccio/server': major
+'@verdaccio/server-fastify': major
+'@verdaccio/signature': major
+'@verdaccio/cli-standalone': major
 '@verdaccio/store': major
-'@verdaccio/dev-types': major
+'docusaurus-plugin-contributors': major
+'@verdaccio/eslint-config': major
+'@verdaccio/test-helper': major
+'customprefix-auth': major
+'@verdaccio/ui-components': major
 '@verdaccio/utils': major
 'verdaccio': major
 '@verdaccio/web': major
 '@verdaccio/website': major
+'@verdaccio/local-publish': patch
 ---
 
-feat!: experiments config renamed to flags
-
-- The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
-
-```js
-flags: token: false;
-search: false;
-```
-
-- The `self_path` property from the config file is being removed in favor of `config_file` full path.
-- Refactor `config` module, better types and utilities
+feat!: bump to v7

.changeset/calm-pants-impress.md

@@ -1,5 +0,0 @@
----
-'verdaccio-aws-s3-storage': patch
----
-
-Fix the prefix used to delete from s3 when unpublishing packages

.changeset/chilled-carrots-guess.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+- added `onClick` prop to `Link` component in @verdaccio/ui-components. (@moglerdev in #3989)
+- resolved issue in the `Package` component where the download button was incorrectly opening a new tab to the homepage. (@moglerdev in #3989)

.changeset/config.json

@@ -2,9 +2,17 @@
   "$schema": "https://unpkg.com/@changesets/config@1.3.0/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
-  "linked": [],
+  "fixed": [
+    [
+      "verdaccio",
+      "@verdaccio/cli",
+      "@verdaccio/core",
+      "@verdaccio/config",
+      "@verdaccio/node-api",
+      "@verdaccio/ui-theme"
+    ]
+  ],
   "access": "public",
   "baseBranch": "master",
-  "updateInternalDependencies": "patch",
-  "ignore": []
+  "updateInternalDependencies": "patch"
 }

.changeset/eight-squids-judge.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+fix: display labels for engine versions

.changeset/fifty-jars-rest.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/middleware': patch
-'@verdaccio/web': patch
----
-
-Remove @ts-ignore and any in packages/web/src/endpoint/package.ts

.changeset/gentle-parrots-lay.md

@@ -1,11 +0,0 @@
----
-'@verdaccio/config': minor
-'@verdaccio/local-storage': minor
-'@verdaccio/e2e-ui': minor
----
-
-Some verdaccio modules depend on 'mkdirp' library which provides recursive directory creation functionality.
-NodeJS can do this out of the box since v.10.12. The last commit in 'mkdirp' was made in early 2016, and it's mid 2021 now.
-Time to stick with a built-in library solution!
-
-- All 'mkdirp' calls are replaced with appropriate 'fs' calls.

.changeset/gentle-trains-switch.md

@@ -1,44 +0,0 @@
----
-'@verdaccio/api': major
-'@verdaccio/auth': major
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/commons-api': major
-'@verdaccio/file-locking': major
-'verdaccio-htpasswd': major
-'@verdaccio/local-storage': major
-'@verdaccio/readme': major
-'@verdaccio/streams': major
-'@verdaccio/types': major
-'@verdaccio/hooks': major
-'@verdaccio/loaders': major
-'@verdaccio/logger': major
-'@verdaccio/logger-prettify': major
-'@verdaccio/middleware': major
-'@verdaccio/mock': major
-'@verdaccio/node-api': major
-'@verdaccio/proxy': major
-'@verdaccio/server': major
-'@verdaccio/store': major
-'@verdaccio/dev-types': major
-'@verdaccio/utils': major
-'verdaccio': major
-'@verdaccio/web': major
----
-
-- Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
-- Introduce environment variables for legacy tokens
-
-### Code Improvements
-
-- Add debug library for improve developer experience
-
-### Breaking change
-
-- The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
-- The secret key must have 32 characters long.
-
-### New environment variables
-
-- `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
-- `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory

.changeset/gold-vans-tease.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/utils': patch
----
-
-Fixed the validation of the name when searching for a tarball that have scoped package name

.changeset/healthy-bikes-behave.md

@@ -1,21 +0,0 @@
----
-'@verdaccio/cli': patch
-'@verdaccio/types': patch
-'@verdaccio/node-api': patch
-'@verdaccio/server': patch
----
-
-fix: restore logger on init
-
-Enable logger after parse configuration and log the very first step on startup phase.
-
-```bash
- warn --- experiments are enabled, it is recommended do not use experiments in production comment out this section to disable it
- info --- support for experiment [token]  is disabled
- info --- support for experiment [search]  is disabled
-(node:50831) Warning: config.logs is deprecated, rename configuration to "config.log"
-(Use `node --trace-warnings ...` to show where the warning was created)
- info --- http address http://localhost:4873/
- info --- version: 6.0.0-6-next.11
- info --- server started
-```

.changeset/healthy-poets-compare.md

@@ -1,11 +0,0 @@
----
-'@verdaccio/config': patch
----
-
-Feature
-
-- add option to set storage from environment variable VERDACCIO_STORAGE_PATH
-
-#### Related tickets
-
-https://github.com/verdaccio/verdaccio/issues/1681

.changeset/heavy-ravens-lay.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/cli': minor
-'@verdaccio/fastify-migration': minor
----
-
-[Fastify] Add ping endpoint

.changeset/hip-hounds-destroy.md

@@ -1,39 +0,0 @@
----
-'@verdaccio/local-storage': patch
-'@verdaccio/ui-theme': patch
-'@verdaccio/server': patch
-'@verdaccio/api': patch
-'@verdaccio/auth': patch
-'@verdaccio/cli': patch
-'@verdaccio/config': patch
-'@verdaccio/commons-api': patch
-'@verdaccio/file-locking': patch
-'verdaccio-htpasswd': patch
-'@verdaccio/readme': patch
-'@verdaccio/streams': patch
-'@verdaccio/types': patch
-'@verdaccio/hooks': patch
-'@verdaccio/loaders': patch
-'@verdaccio/logger': patch
-'@verdaccio/logger-prettify': patch
-'@verdaccio/middleware': patch
-'@verdaccio/mock': patch
-'@verdaccio/node-api': patch
-'@verdaccio/active-directory': patch
-'verdaccio-audit': patch
-'verdaccio-auth-memory': patch
-'verdaccio-aws-s3-storage': patch
-'verdaccio-google-cloud': patch
-'verdaccio-memory': patch
-'@verdaccio/proxy': patch
-'@verdaccio/store': patch
-'@verdaccio/dev-types': patch
-'@verdaccio/utils': patch
-'verdaccio': patch
-'@verdaccio/web': patch
-'@verdaccio/e2e-cli': patch
-'@verdaccio/e2e-ui': patch
-'@verdaccio/website': patch
----
-
-chore: add release step to private regisry on merge changeset pr

.changeset/late-adults-love.md

@@ -1,20 +0,0 @@
----
-'@verdaccio/api': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/local-storage': minor
----
-
-feat: remove level dependency by lowdb for npm token cli as storage
-
-### new npm token database
-
-There will be a new database located in your storage named `.token-db.json` which
-will store all references to created tokens, **it does not store tokens**, just
-mask of them and related metadata required to reference them.
-
-#### Breaking change
-
-If you were relying on `npm token` experiment. This PR will replace the
-used database (level) by a json plain based one (lowbd) which does not
-require Node.js C++ compilation step and has less dependencies. Since was
-a experiment there is no migration step.

.changeset/late-parents-act.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/hooks': patch
-'@verdaccio/proxy': patch
----
-
-refactor: migrate request to node-fetch at hooks package

.changeset/long-jars-collect.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+---
+
+feat: ui improvements
+
+Some UI improvements
+
+- download progress indicator: https://github.com/verdaccio/verdaccio/discussions/4068
+- fix dark mode and readme css support https://github.com/verdaccio/verdaccio/discussions/3942 https://github.com/verdaccio/verdaccio/discussions/3467
+- fix global for yarn packages and add version to the packages on copy
+- feat: hide deprecated versions option
+- fix: improve deprecated package style
+- feat: display deprecated versions

.changeset/many-vans-care.md

@@ -1,16 +0,0 @@
----
-'@verdaccio/tarball': patch
-'@verdaccio/mock': patch
-'@verdaccio/ui-theme': patch
-'@verdaccio/server': patch
-'@verdaccio/utils': patch
-'verdaccio': patch
----
-
-Bug Fixes
-
-- fix escaped slash in namespaced packages
-
-#### Related tickets
-
-https://github.com/verdaccio/verdaccio/pull/2193

.changeset/modern-spies-tell.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': minor
-'verdaccio': minor
----
-
-feat: ui theme plugin part of the application

.changeset/neat-toes-report.md

@@ -1,51 +0,0 @@
----
-'@verdaccio/api': minor
-'@verdaccio/auth': minor
-'@verdaccio/cli': minor
-'@verdaccio/config': minor
-'@verdaccio/commons-api': minor
-'@verdaccio/file-locking': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/local-storage': minor
-'@verdaccio/readme': minor
-'@verdaccio/streams': minor
-'@verdaccio/types': minor
-'@verdaccio/hooks': minor
-'@verdaccio/loaders': minor
-'@verdaccio/logger': minor
-'@verdaccio/logger-prettify': minor
-'@verdaccio/middleware': minor
-'@verdaccio/mock': minor
-'@verdaccio/node-api': minor
-'@verdaccio/active-directory': minor
-'verdaccio-audit': minor
-'verdaccio-auth-memory': minor
-'verdaccio-aws-s3-storage': minor
-'verdaccio-google-cloud': minor
-'verdaccio-memory': minor
-'@verdaccio/ui-theme': minor
-'@verdaccio/proxy': minor
-'@verdaccio/server': minor
-'@verdaccio/store': minor
-'@verdaccio/dev-types': minor
-'@verdaccio/utils': minor
-'verdaccio': minor
-'@verdaccio/web': minor
----
-
-feat: add server rate limit protection to all request
-
-To modify custom values, use the server settings property.
-
-```markdown
-server:
-
-## https://www.npmjs.com/package/express-rate-limit#configuration-options
-
-rateLimit:
-windowMs: 1000
-max: 10000
-```
-
-The values are intended to be high, if you want to improve security of your server consider
-using different values.

.changeset/old-turkeys-heal.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/file-locking': minor
+'@verdaccio/tarball': minor
+'@verdaccio/url': minor
+'@verdaccio/logger-7': minor
+'@verdaccio/logger-commons': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'verdaccio-audit': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/search': minor
+'@verdaccio/signature': minor
+'@verdaccio/utils': minor
+---
+
+restore legacy support

.changeset/perfect-chairs-act.md

@@ -0,0 +1,36 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/core': major
+'@verdaccio/file-locking': major
+'@verdaccio/tarball': major
+'@verdaccio/types': major
+'@verdaccio/url': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-commons': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/node-api': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/proxy': major
+'@verdaccio/search': major
+'@verdaccio/server': major
+'@verdaccio/server-fastify': major
+'@verdaccio/signature': major
+'@verdaccio/store': major
+'@verdaccio/ui-components': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+update major dependencies, remove old nodejs support

.changeset/perfect-kangaroos-agree.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/cli': major
----
-
-feat: use clipanion over commander

.changeset/plenty-news-remember.md

@@ -1,30 +0,0 @@
----
-'@verdaccio/auth': major
-'verdaccio-htpasswd': major
-'verdaccio-audit': major
-'@verdaccio/server': major
-'@verdaccio/cli-standalone': major
----
-
-feat: standalone registry with no dependencies
-
-## Usage
-
-To install a server with no dependencies
-
-```bash
-npm install -g @verdaccio/standalone
-```
-
-with no internet required
-
-```bash
-npm install -g ./tarball.tar.gz
-```
-
-Bundles htpasswd and audit plugins.
-
-### Breaking Change
-
-It does not allow anymore the `auth` and `middleware` property at config file empty,
-it will fallback to those plugins by default.

.changeset/plenty-spiders-melt.md

@@ -1,36 +0,0 @@
----
-'@verdaccio/api': minor
-'@verdaccio/auth': minor
-'@verdaccio/cli': minor
-'@verdaccio/config': minor
-'@verdaccio/commons-api': minor
-'@verdaccio/file-locking': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/local-storage': minor
-'@verdaccio/readme': minor
-'@verdaccio/streams': minor
-'@verdaccio/types': minor
-'@verdaccio/hooks': minor
-'@verdaccio/loaders': minor
-'@verdaccio/logger': minor
-'@verdaccio/logger-prettify': minor
-'@verdaccio/middleware': minor
-'@verdaccio/mock': minor
-'@verdaccio/node-api': minor
-'@verdaccio/proxy': minor
-'@verdaccio/server': minor
-'@verdaccio/store': minor
-'@verdaccio/dev-types': minor
-'@verdaccio/utils': minor
-'verdaccio': minor
-'@verdaccio/web': minor
-'@verdaccio/website': minor
----
-
-feat: add typescript project references settings
-
-Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
-
-It allows to navigate (IDE) trough the packages without need compile the packages.
-
-Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).

.changeset/plenty-tables-refuse.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/cli': minor
-'@verdaccio/node-api': minor
----
-
-feat: improve cli loggin on start up

.changeset/pre.json

@@ -1,77 +1,71 @@
 {
   "mode": "pre",
-  "tag": "6-next",
+  "tag": "next",
   "initialVersions": {
-    "@verdaccio/api": "6.0.0-alpha.0",
-    "@verdaccio/auth": "6.0.0-alpha.0",
-    "@verdaccio/cli": "6.0.0-alpha.0",
-    "@verdaccio/config": "6.0.0-alpha.0",
-    "@verdaccio/commons-api": "11.0.0-alpha.0",
-    "@verdaccio/file-locking": "11.0.0-alpha.0",
-    "verdaccio-htpasswd": "11.0.0-alpha.0",
-    "@verdaccio/local-storage": "11.0.0-alpha.0",
-    "@verdaccio/readme": "11.0.0-alpha.0",
-    "@verdaccio/streams": "11.0.0-alpha.0",
-    "@verdaccio/types": "11.0.0-alpha.0",
-    "@verdaccio/hooks": "6.0.0-alpha.0",
-    "@verdaccio/loaders": "6.0.0-alpha.0",
-    "@verdaccio/logger": "6.0.0-alpha.0",
-    "@verdaccio/logger-prettify": "6.0.0-alpha.0",
-    "@verdaccio/middleware": "6.0.0-alpha.0",
-    "@verdaccio/mock": "6.0.0-alpha.0",
-    "@verdaccio/node-api": "6.0.0-alpha.0",
-    "@verdaccio/proxy": "6.0.0-alpha.0",
-    "@verdaccio/server": "6.0.0-alpha.0",
-    "@verdaccio/store": "6.0.0-alpha.0",
-    "@verdaccio/dev-types": "6.0.0-alpha.0",
-    "@verdaccio/utils": "6.0.0-alpha.0",
-    "verdaccio": "6.0.0-alpha.0",
-    "@verdaccio/web": "6.0.0-alpha.0",
-    "@verdaccio/active-directory": "11.0.0-alpha.0",
-    "verdaccio-audit": "11.0.0-alpha.0",
-    "verdaccio-auth-memory": "11.0.0-alpha.0",
-    "verdaccio-aws-s3-storage": "11.0.0-alpha.0",
-    "verdaccio-google-cloud": "11.0.0-alpha.0",
-    "verdaccio-memory": "11.0.0-alpha.0",
-    "@verdaccio/ui-theme": "6.0.0-alpha.1",
-    "@verdaccio/e2e-cli": "1.0.0",
-    "@verdaccio/e2e-ui": "1.0.0",
-    "@verdaccio/cli-standalone": "6.0.0-alpha.3",
-    "@verdaccio/tarball": "11.0.0-alpha.3",
-    "@verdaccio/url": "11.0.0-alpha.3",
-    "@verdaccio/fastify-migration": "6.0.0-6-next.9",
-    "@verdaccio/eslint-config": "1.0.0"
+    "@verdaccio/test-cli-commons": "1.1.0",
+    "@verdaccio/e2e-cli-npm6": "1.0.1",
+    "@verdaccio/e2e-cli-npm7": "1.0.1",
+    "@verdaccio/e2e-cli-npm8": "1.0.1",
+    "@verdaccio/e2e-cli-npm9": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm6": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm7": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm8": "1.0.1",
+    "@verdaccio/e2e-cli-yarn1": "1.0.1",
+    "@verdaccio/e2e-cli-yarn2": "1.0.1",
+    "@verdaccio/e2e-cli-yarn3": "1.0.1",
+    "@verdaccio/e2e-cli-yarn4": "1.0.1",
+    "@verdaccio/e2e-ui": "2.0.0",
+    "@verdaccio/api": "6.0.0",
+    "@verdaccio/auth": "6.0.0",
+    "@verdaccio/cli": "6.0.0",
+    "@verdaccio/config": "6.0.0",
+    "@verdaccio/core": "6.0.0",
+    "@verdaccio/file-locking": "11.0.0",
+    "@verdaccio/tarball": "11.0.0",
+    "@verdaccio/types": "11.0.0",
+    "@verdaccio/url": "11.0.0",
+    "@verdaccio/hooks": "6.0.0",
+    "@verdaccio/loaders": "6.0.0",
+    "@verdaccio/logger": "6.0.0",
+    "@verdaccio/logger-7": "6.0.0",
+    "@verdaccio/logger-commons": "6.0.0",
+    "@verdaccio/logger-prettify": "6.0.0",
+    "@verdaccio/middleware": "6.0.0",
+    "@verdaccio/node-api": "6.0.0",
+    "verdaccio-audit": "11.0.0",
+    "verdaccio-auth-memory": "11.0.0",
+    "verdaccio-htpasswd": "11.0.0",
+    "@verdaccio/local-storage": "11.0.0",
+    "verdaccio-memory": "11.0.0",
+    "@verdaccio/ui-theme": "6.0.0",
+    "@verdaccio/proxy": "6.0.0",
+    "@verdaccio/search": "6.0.0",
+    "@verdaccio/server": "6.0.0",
+    "@verdaccio/server-fastify": "6.0.0",
+    "@verdaccio/signature": "6.0.0",
+    "@verdaccio/cli-standalone": "6.0.0",
+    "@verdaccio/store": "6.0.0",
+    "docusaurus-plugin-contributors": "1.0.1",
+    "@verdaccio/eslint-config": "2.0.0",
+    "@verdaccio/test-helper": "2.0.0",
+    "@verdaccio/crowdin-translations": "1.0.0",
+    "customprefix-auth": "1.0.0",
+    "@verdaccio/ui-components": "2.0.0",
+    "@verdaccio/utils": "6.0.0",
+    "verdaccio": "6.0.0",
+    "@verdaccio/web": "6.0.0",
+    "@verdaccio/website": "5.20.2",
+    "@verdaccio/local-publish": "0.0.1"
   },
   "changesets": [
-    "afraid-mice-obey",
-    "big-lobsters-sin",
-    "calm-pants-impress",
-    "few-cooks-destroy",
-    "fifty-jars-rest",
-    "gentle-parrots-lay",
-    "gentle-trains-switch",
-    "gold-vans-tease",
-    "healthy-bikes-behave",
-    "healthy-poets-compare",
-    "heavy-ravens-lay",
-    "hip-hounds-destroy",
-    "late-adults-love",
-    "late-parents-act",
-    "many-vans-care",
-    "modern-spies-tell",
-    "neat-toes-report",
-    "perfect-kangaroos-agree",
-    "plenty-news-remember",
-    "plenty-spiders-melt",
-    "plenty-tables-refuse",
-    "pretty-hounds-tap",
-    "red-chefs-float",
-    "shiny-chefs-heal",
-    "smart-apricots-kneel",
-    "spicy-frogs-press",
-    "tender-bags-call",
-    "three-pots-sit",
-    "two-dolls-check",
-    "wild-jokes-beam"
+    "angry-trees-tie",
+    "breezy-mayflies-pull",
+    "chilled-carrots-guess",
+    "eight-squids-judge",
+    "long-jars-collect",
+    "old-turkeys-heal",
+    "perfect-chairs-act",
+    "shiny-worms-retire",
+    "weak-fans-explain"
   ]
 }

.changeset/pretty-hounds-tap.md

@@ -1,29 +0,0 @@
----
-'@verdaccio/api': patch
-'@verdaccio/auth': patch
-'@verdaccio/cli': patch
-'@verdaccio/config': patch
-'@verdaccio/commons-api': patch
-'@verdaccio/file-locking': patch
-'verdaccio-htpasswd': patch
-'@verdaccio/local-storage': patch
-'@verdaccio/readme': patch
-'@verdaccio/streams': patch
-'@verdaccio/types': patch
-'@verdaccio/hooks': patch
-'@verdaccio/loaders': patch
-'@verdaccio/logger': patch
-'@verdaccio/logger-prettify': patch
-'@verdaccio/middleware': patch
-'@verdaccio/mock': patch
-'@verdaccio/node-api': patch
-'@verdaccio/proxy': patch
-'@verdaccio/server': patch
-'@verdaccio/store': patch
-'@verdaccio/dev-types': patch
-'@verdaccio/utils': patch
-'verdaccio': patch
-'@verdaccio/web': patch
----
-
-Enable prerelease mode with **changesets**

.changeset/red-chefs-float.md

@@ -1,11 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/web': patch
----
-
-Fix the search by exact name of the package
-
-Full package name queries was not finding anithing. It was happening
-becouse of stemmer of [lunr.js](https://lunrjs.com/).
-
-To fix this, the stemmer of [lunr.js](https://lunrjs.com/) was removed from search pipeline.

.changeset/shiny-chefs-heal.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/api': patch
----
-
-testing changesets

.changeset/shiny-worms-retire.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/search': patch
+---
+
+fix: keyword undefined errors

.changeset/smart-apricots-kneel.md

@@ -1,79 +0,0 @@
----
-'@verdaccio/ui-theme': major
-'@verdaccio/cli-standalone': major
-'@verdaccio/web': major
----
-
-feat: flexible user interface generator
-
-**breaking change**
-
-The UI does not provide a pre-generated `index.html`, instead the server generates
-the body of the web application based in few parameters:
-
-- Webpack manifest
-- User configuration details
-
-It allows inject html tags, javascript and new CSS to make the page even more flexible.
-
-### Web new properties for dynamic template
-
-The new set of properties are made in order allow inject _html_ and _JavaScript_ scripts within the template. This
-might be useful for scenarios like Google Analytics scripts or custom html in any part of the body.
-
-- metaScripts: html injected before close the `head` element.
-- scriptsBodyAfter: html injected before close the `body` element.
-- bodyAfter: html injected after _verdaccio_ JS scripts.
-
-```yaml
-web:
-  scriptsBodyAfter:
-    - '<script type="text/javascript" src="https://my.company.com/customJS.min.js"></script>'
-  metaScripts:
-    - '<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>'
-    - '<script type="text/javascript" src="https://browser.sentry-cdn.com/5.15.5/bundle.min.js"></script>'
-    - '<meta name="robots" content="noindex" />'
-  bodyBefore:
-    - '<div id="myId">html before webpack scripts</div>'
-  bodyAfter:
-    - '<div id="myId">html after webpack scripts</div>'
-```
-
-### UI plugin changes
-
-- `index.html` is not longer used, template is generated based on `manifest.json` generated by webpack.
-- Plugin must export:
-  - the manifest file.
-  - the manifest files: matcher (array of id that generates required scripts to run the ui)
-  - static path: The absolute path where the files are located in `node_modules`
-
-```
-exports.staticPath = path.join(__dirname, 'static');
-exports.manifest = require('./static/manifest.json');
-exports.manifestFiles = {
-  js: ['runtime.js', 'vendors.js', 'main.js'],
-  css: [],
-  ico: 'favicon.ico',
-};
-```
-
-- Remove font files
-- CSS is inline on JS (this will help with #2046)
-
-### Docker v5 Examples
-
-- Move all current examples to v4 folder
-- Remove any v3 example
-- Create v5 folder with Nginx Example
-
-#### Related tickets
-
-https://github.com/verdaccio/verdaccio/issues/1523
-https://github.com/verdaccio/verdaccio/issues/1297
-https://github.com/verdaccio/verdaccio/issues/1593
-https://github.com/verdaccio/verdaccio/discussions/1539
-https://github.com/verdaccio/website/issues/264
-https://github.com/verdaccio/verdaccio/issues/1565
-https://github.com/verdaccio/verdaccio/issues/1251
-https://github.com/verdaccio/verdaccio/issues/2029
-https://github.com/verdaccio/docker-examples/issues/29

.changeset/spicy-frogs-press.md

@@ -1,32 +0,0 @@
----
-'verdaccio-htpasswd': major
----
-
-feat: allow other password hashing algorithms (#1917)
-
-**breaking change**
-
-The current implementation of the `htpasswd` module supports multiple hash formats on verify, but only `crypt` on sign in.
-`crypt` is an insecure old format, so to improve the security of the new `verdaccio` release we introduce the support of multiple hash algorithms on sign in step.
-
-### New hashing algorithms
-
-The new possible hash algorithms to use are `bcrypt`, `md5`, `sha1`. `bcrypt` is chosen as a default, because of its customizable complexity and overall reliability. You can read more about them [here](https://httpd.apache.org/docs/2.4/misc/password_encryptions.html).
-
-Two new properties are added to `auth` section in the configuration file:
-
-- `algorithm` to choose the way you want to hash passwords.
-- `rounds` is used to determine `bcrypt` complexity. So one can improve security according to increasing computational power.
-
-Example of the new `auth` config file section:
-
-```yaml
-auth:
-htpasswd:
-  file: ./htpasswd
-  max_users: 1000
-  # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
-  algorithm: bcrypt
-  # Rounds number for "bcrypt", will be ignored for other algorithms.
-  rounds: 10
-```

.changeset/tender-bags-call.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/logger': major
----
-
-logging prettifier only in development mode
-
-- Verdaccio prettify `@verdaccio/logger-prettify` the logging which looks beautiful. But there are scenarios which does not make sense in production. This feature enables disable by default the prettifies if production `NODE_ENV` is enabled.
-- Updates pino.js to `^6.7.0`.
-- Suppress the warning when prettifier is enabled `suppressFlushSyncWarning`

.changeset/three-pots-sit.md

@@ -1,33 +0,0 @@
----
-'@verdaccio/api': patch
-'@verdaccio/auth': patch
-'@verdaccio/cli': patch
-'@verdaccio/config': patch
-'@verdaccio/commons-api': patch
-'@verdaccio/file-locking': patch
-'verdaccio-htpasswd': patch
-'@verdaccio/local-storage': patch
-'@verdaccio/readme': patch
-'@verdaccio/types': patch
-'@verdaccio/hooks': patch
-'@verdaccio/loaders': patch
-'@verdaccio/logger': patch
-'@verdaccio/logger-prettify': patch
-'@verdaccio/middleware': patch
-'@verdaccio/mock': patch
-'@verdaccio/node-api': patch
-'@verdaccio/proxy': patch
-'@verdaccio/server': patch
-'@verdaccio/store': patch
-'@verdaccio/dev-types': patch
-'@verdaccio/utils': patch
-'verdaccio': patch
----
-
-ESLint Warnings Fixed
-
-Related to issue #1461
-
-- max-len: most of the sensible max-len errors are fixed
-- no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
-- @typescript-eslint/no-unused-vars: same as above

.changeset/two-dolls-check.md

@@ -1,28 +0,0 @@
----
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/types': major
-'@verdaccio/logger': major
-'@verdaccio/node-api': major
-'verdaccio-google-cloud': major
-'verdaccio': major
----
-
-feat: node api new structure based on promise
-
-```js
-import { runServer } from '@verdaccio/node-api';
-// or
-import { runServer } from 'verdaccio';
-
-const app = await runServer(); // default configuration
-const app = await runServer('./config/config.yaml');
-const app = await runServer({ configuration });
-app.listen(4000, (event) => {
-  // do something
-});
-```
-
-### Breaking Change
-
-If you are using the node-api, the new structure is Promise based and less arguments.

.changeset/weak-fans-explain.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+fix: Avoid 404 error when getting favicon from root

.changeset/wild-jokes-beam.md

@@ -1,32 +0,0 @@
----
-'@verdaccio/types': minor
-'@verdaccio/ui-theme': minor
-'@verdaccio/web': minor
----
-
-web: allow ui hide package managers on sidebar
-
-If there is a package manager of preference over others, you can define the package managers to be displayed on the detail page and sidebar, just define in the `config.yaml` and web section the list of package managers to be displayed.
-
-```
-web:
-  title: Verdaccio
-  sort_packages: asc
-  primary_color: #cccccc
-  pkgManagers:
-    - pnpm
-    - yarn
-    # - npm
-```
-
-To disable all package managers, just define empty:
-
-```
-web:
-  title: Verdaccio
-  sort_packages: asc
-  primary_color: #cccccc
-  pkgManagers:
-```
-
-and the section would be hidden.

.eslintignore

@@ -4,9 +4,17 @@
 **/types/custom.d.ts
 build/
 coverage/
-flow-typed/
 node_modules/
 static/
 website/
 wiki/
 dist/
+docs/
+test/functional/store/*
+docker-examples/**/lib/**/*.js
+test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
+yarn.js
+# storybook
+packages/ui-components/storybook-static
+dist.js
+bundle.js

.github/ISSUE_TEMPLATE/bug_report.md

@@ -6,6 +6,25 @@ title: ''
 assignees: ''
 ---
 
+<!-- PLEASE READ THIS:  
+ - If you are not sure is a bug, OPEN a DISCUSSION, if is a legitimate bug, is easy to create a bug from a discussion.
+ - Empty reports won't be considered and eventually be closed by a bot.
+ - Include debugging notes will help to fix it faster, HOW TO: https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio 
+ - If you remove this template, ticket will be closed immediately.
+ - No English perfect is required, use public translators if is need it, we will do our best to help you.
+ - Extra bonus: The most complete this report is delivered, the faster you will get a response.
+ - Extra bonus: include screenshots, logs (remove sensitive data).
+ - If you are willing to fix it, there is a checkbox at the bottom.
+-->
+
+**Your Environment**
+  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
+ * **verdaccio version**: 5.x.x
+ * **node version** [12.x.x, 14.x.x]:
+ * **package manager**: [npm@7, pnpm@6, yarn@2]
+ * **os**: [mac, windows@10, linux]
+ * **platform**: [npm, docker, helm, other]
+
 **Describe the bug**
 
 <!-- A clear and concise description of what the bug is. -->
@@ -23,7 +42,7 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots**
+**Screenshots, server logs, package manager log**
 
 <!-- If applicable, add screenshots to help explain your problem.  -->
 
@@ -38,10 +57,14 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 **Debugging output**
 
 - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
-- `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+- `$ DEBUG=verdaccio* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
 - `$ npm -ddd` prints:
 - `$ npm config get registry` prints:
 
+**Contribute to Verdaccio**
+
+- [ ] I'm willing to fix this bug 🥇 
+
 <!--
 
 IMPORTANT: please do not attach external files, all content should be visible from any device.

.github/ISSUE_TEMPLATE/config.yml

@@ -7,8 +7,5 @@ contact_links:
     url: https://github.com/verdaccio/verdaccio/security/policy
     about: I want to report a security vulnerability
   - name: Chat 🏘
-    url: http://chat.verdaccio.org
-    about: For a quick question you should do it through our community chat
-  - name: User Interface Report 👩🏼‍🎨👨🏼‍🎨
-    url: https://github.com/verdaccio/ui/issues/new/choose
-    about: Any report related with the User Interface should be posted in another repository
+    url: https://discord.gg/7qWJxBf
+    about: Quick question? Try out Discord chat, you can get faster feedback

.github/ISSUE_TEMPLATE/feature.md

@@ -7,14 +7,18 @@ assignees: ''
 ---
 
 <!--
+IMPORTANT: If you don't have an action plan, please consider create a DISCUSSION (idea) instead for an open a feature request issue.
+
+https://github.com/verdaccio/verdaccio/discussions/new
 
 Verdaccio is a project addressed for voluntaries, if you appreciate this project consider to donate.
+1$/5$ or custom amount single contribution
+
+or monthly
 1$/month - minimal contribution
 5$/month - nice contribution
-500$ - help to promote this project, marketing, stickers.
-2000$/year - sponsor status, your company logo will be in our readme, meetups talks and your request will have high priority
 
-https://opencollective.com/verdaccio
+https://github.com/sponsors/verdaccio
 
 As reminder, the Open Source must be sustainable.
 -->

.github/disabled/docker-plugins-e2e.yml

@@ -0,0 +1,39 @@
+name: E2E Docker Proxy Plugins Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      with:
+        node-version: 18
+
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry=http://localhost:4873
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost:4873
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost:4873
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost:4873
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 15
+daysUntilStale: 365
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 10
+daysUntilClose: 500
 # Issues with these labels will never be considered stale
 exemptLabels:
   - dev: high priority
@@ -17,7 +17,7 @@ markComment: >
 
   This issue has gone quiet 😶.
 
-   We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
+   We get a lot of issues, so we currently close issues after 180 days of inactivity. It’s been at least 90c days since the last update here.
    If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
    As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
 

.github/workflows/changesets.yml

@@ -20,44 +20,50 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
 
       - name: setup node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
-          node-version: 14
-          registry-url: 'https://registry.verdaccio.org'
+          node-version-file: '.nvmrc'
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
       - name: install pnpm
-        run: npm i pnpm@latest -g
+        run: npm i pnpm@latest-8 -g
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
       - name: setup pnpm config
         run: pnpm config set store-dir $PNPM_CACHE_FOLDER
       - name: setup pnpm config registry
-        run: pnpm config set registry https://registry.verdaccio.org
+        run: pnpm config set registry https://registry.npmjs.org
 
       - name: install dependencies
         run: pnpm install
         env:
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
-
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+      - name: crowdin download
+        env:          
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download       
       - name: build
         run: pnpm build
 
       - name: create versions
-        uses: verdaccio/changeset-action@master
+        uses: changesets/action@master
         with:
           version: pnpm ci:version
           commit: 'chore: update versions'
           title: 'chore: update versions'
           publish: pnpm ci:publish
+          createGithubReleases: false
+          setupGitUser: false
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.VERDACCIO_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CHANGESET_RELEASE_TOKEN }}
+          NPM_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NPM_CONFIG_REGISTRY: https://registry.npmjs.org

.github/workflows/ci-windows.yml

@@ -0,0 +1,150 @@
+name: CI windows
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '5 0 * * SUN' 
+permissions:
+  contents: read
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    name: setup verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:nightly-master
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production          
+    steps:
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - name: Node
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install pnpm
+      run: npm i pnpm@latest-8 -g
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store            
+    - name: Install
+      run: pnpm install --registry http://localhost:4873
+    - name: Cache .pnpm-store
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+        restore-keys: |
+          pnpm-
+  lint:
+    runs-on: windows-latest
+    name: Lint
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts
+      - name: Lint
+        run: pnpm lint
+  format:
+    runs-on: windows-latest
+    name: Format
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store          
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts
+      - name: Lint
+        run: pnpm format:check
+  build:
+    needs: [format, lint]
+    strategy:
+      fail-fast: true
+      matrix:
+        os: [windows-latest]
+        node_version: [18]
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store          
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test
+        run: pnpm test
+  ci-e2e-ui:
+    needs: [format, lint]
+    runs-on: windows-latest
+    name: UI Test E2E
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm install --offline --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test UI
+        run: pnpm test:e2e:ui
+        # env:
+        #  DEBUG: verdaccio:e2e*

.github/workflows/ci.yml

@@ -2,17 +2,19 @@ name: CI
 
 on:
   push:
-    branches:
-      - master
-      - 'changeset-release/master'
   pull_request:
     paths:
       - .changeset/**
       - .github/workflows/ci.yml
       - 'packages/**'
+      - 'test/**'
+      - 'docker-examples/**'
       - 'jest/**'
       - 'package.json'
       - 'pnpm-workspace.yaml'
+permissions:
+  contents: read
+
 jobs:
   prepare:
     runs-on: ubuntu-latest
@@ -22,22 +24,26 @@ jobs:
         image: verdaccio/verdaccio:5
         ports:
           - 4873:4873
+        env:
+          NODE_ENV: production          
     steps:
-    - uses: actions/checkout@v2.3.1
-    - name: Use Node 14
-      uses: actions/setup-node@v1
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - name: Node
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
       with:
-        node-version: 14 
+        node-version-file: '.nvmrc'
     - name: Install pnpm
-      run: npm i pnpm@latest -g
+      run: |
+        corepack enable
+        corepack prepare --activate pnpm@latest-8
     - name: set store
-      run: | 
+      run: |
         mkdir ~/.pnpm-store
         pnpm config set store-dir ~/.pnpm-store
     - name: Install
-      run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
+      run: pnpm install  --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@v2
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -48,19 +54,24 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node 16
-        uses: actions/setup-node@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
-          node-version: 16
+          node-version-file: '.nvmrc'
       - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@latest-8
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
       - name: Install
-        run: pnpm recursive install --frozen-lockfile --ignore-scripts
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm lint
   format:
@@ -68,150 +79,88 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node 16
-        uses: actions/setup-node@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
-          node-version: 16
+          node-version-file: '.nvmrc'
       - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@latest-8
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
       - name: Install
-        run: pnpm recursive install --frozen-lockfile --ignore-scripts
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm format:check
-  build:
-    runs-on: ubuntu-latest
-    name: build
-    needs: [format, lint]
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node 16
-        uses: actions/setup-node@v1
-        with:
-          node-version: 16
-      - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}     
-      - name: Install
-        run: pnpm recursive install --frozen-lockfile --ignore-scripts
-      - name: build
-        run: pnpm build
-      - name: tar packages
-        run: |      
-          tar -czvf ${{ github.workspace }}/pkg.tar.gz -C ${{ github.workspace }}/packages .
-      - uses: actions/upload-artifact@v2
-        with:
-          name: verdaccio-artifact
-          path: pkg.tar.gz            
   test:
-    needs: build
+    needs: [format, lint]
     strategy:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [12, 14]
+        node_version: [18, 20]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2.3.1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version: ${{ matrix.node_version }}
-      - uses: actions/download-artifact@v2
-        with:
-          name: verdaccio-artifact
-      - name: untar packages
-        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
       - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@latest-8
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
       - name: Install
-        run: pnpm recursive install --frozen-lockfile --ignore-scripts 
-      - name: Test
-        run: pnpm test
-  ci-e2e-ui:
-    needs: build
-    runs-on: ubuntu-latest
-    name: UI Test E2E Node 14
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 14
-      - uses: actions/download-artifact@v2
-        with:
-          name: verdaccio-artifact
-      - name: untar packages
-        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
-      - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
-      - name: Install
-        ## we need scripts, pupetter downloads aditional content
-        run: pnpm recursive install --frozen-lockfile 
-      - name: Test UI
-        run: pnpm test:e2e:ui
-        env:
-          DEBUG: verdaccio:e2e*       
-  ci-e2e-cli:
-    needs: build
-    runs-on: ubuntu-latest
-    name: CLI Test E2E Node 14
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 14
-      - uses: actions/download-artifact@v2
-        with:
-          name: verdaccio-artifact
-      - name: untar packages
-        run: tar -xzvf pkg.tar.gz -C ${{ github.workspace }}/packages    
-      - name: Install pnpm
-        run: npm i pnpm@latest -g
-      - uses: actions/cache@v2
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                          
-      - name: Install
-        ## we need scripts, pupetter downloads aditional content
-        run: pnpm recursive install --frozen-lockfile
-      - name: Test CLI
-        run: pnpm test:e2e:cli
-  test-windows:
-    needs: [format, lint]
-    runs-on: windows-latest
-    name: windows test node 14
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node 14
-        uses: actions/setup-node@v1
-        with:
-          node-version: 14
-      - name: Install pnpm
-        run: npm i pnpm@latest -g
-       # pnpm cache is not working for windows (we need a solution)
-      - uses: actions/cache@v2
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}                                            
-      - name: Install
-        run: pnpm recursive install --frozen-lockfile --ignore-scripts 
+        run: pnpm install --ignore-scripts --registry http://localhost:4873
       - name: build
         run: pnpm build
       - name: Test
         run: pnpm test
+  sync-translations:
+    needs: [test]
+    runs-on: ubuntu-latest
+    name: synchronize translations
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@latest-8
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        ## we need scripts, pupetter downloads aditional content
+        run: pnpm install --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: generate website translations
+        run: pnpm --filter ...@verdaccio/website write-translations
+      - name: sync
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:sync

.github/workflows/codeql-analysis.yml

@@ -8,13 +8,20 @@ on:
   schedule:
     - cron: '0 2 * * 4'
 
+permissions:
+  contents: read
+
 jobs:
   CodeQL-Build:
+    permissions:
+      actions: read  # for github/codeql-action/init to get workflow details
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/autobuild to send a status report
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2.3.1
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -27,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@fdcae64e1484d349b3366718cdfef3d404390e85 # v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -35,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v1
+        uses: github/codeql-action/autobuild@fdcae64e1484d349b3366718cdfef3d404390e85 # v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -49,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@fdcae64e1484d349b3366718cdfef3d404390e85 # v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -0,0 +1,38 @@
+name: E2E Docker Proxy Apache Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
+      with:
+        node-version: 18
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -0,0 +1,41 @@
+name: E2E Docker Proxy Nginx Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
+      with:
+        node-version: 18
+    - name: npm setup
+      run: |
+        npm config set fetch-retries="5"
+        npm config set fetch-retry-factor="50"
+        npm config set fetch-retry-mintimeout="20000"
+        npm config set fetch-retry-maxtimeout="80000"      
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down

.github/workflows/docker-publish.yml

@@ -15,12 +15,16 @@ on:
       - 'master'
     tags:
       - 'v*'
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: docker/setup-qemu-action@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host
@@ -41,11 +45,11 @@ jobs:
             {{major}}
             {{major}}.{{minor}}
       - name: Build & Push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v4
         with:
           context: .
           file: ./Dockerfile
-          platforms: linux/amd64
+          platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/e2e-ci.yml

@@ -0,0 +1,112 @@
+name: E2E CLI
+
+on: [pull_request]
+permissions:
+  contents: read
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    name: setup e2e verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:nightly-master
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production
+    steps:
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - name: Use Node
+      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install pnpm
+      run: npm i pnpm@latest-8 -g
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+    - name: Install
+      run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
+    - name: Cache .pnpm-store
+      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+        restore-keys: |
+          pnpm-
+  build:
+    needs: [prepare]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node 16
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm recursive install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Cache packages
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        id: cache-packages
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            packages-
+      # - name: Cache test
+      #   uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   id: cache-test
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      #     restore-keys: |
+      #       test-
+  e2e-cli:
+    needs: [prepare, build]
+    strategy:
+      fail-fast: false
+      matrix:
+        pkg: [npm6, npm7, npm8, npm9, npm10, pnpm6, pnpm7, pnpm8, yarn1, yarn2, yarn3, yarn4]
+        node: [16, 18, 19]
+    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run:  pnpm --filter @verdaccio/test-cli-commons build
+      - name: Test CLI
+        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}

.github/workflows/e2e-ui.yml

@@ -0,0 +1,36 @@
+name: E2E UI
+
+on: [pull_request]
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    name: UI Test E2E
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:5
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+         corepack enable
+         corepack prepare --activate pnpm@latest-8
+      - name: Install
+        run: pnpm install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test UI
+        run: pnpm test:e2e:ui
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        with:
+          name: videos
+          path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/static-data.yml

@@ -0,0 +1,54 @@
+---
+name: static data
+
+on:
+  workflow_dispatch:
+  schedule:
+    # twice peer week
+    - cron: '0 0 * * 1,4'
+  # for now, scheduled, we can enable on push master but not make much sense now
+  # push:
+  #   branches:
+  #     - master
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+jobs:
+  prepare:
+    name: Run script
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version: 18.x
+      - name: install pnpm
+        run: sudo npm i pnpm@latest-8 -g
+      - name: install dependencies
+        run: pnpm install
+      - name: Build Translations percentage
+        run: pnpm --filter @verdaccio/crowdin-translations build
+      - name: update contributors
+        run: pnpm run contributors
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: update addson data
+        run: pnpm script:addson
+      - name: update translations
+        run: pnpm run translations
+        env:
+          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}          
+      - name: format
+        run: pnpm format
+      - name: Commit & Push changes
+        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 # tag=v1.4
+        with:
+          github_token: ${{ secrets.TOKEN_VERDACCIOBOT_GITHUB }}
+          message: "chore: updated static data"
+          branch: master
+          author_email: verdaccio.npm@gmail.com
+          author_name: verdacciobot

.github/workflows/ui-components.yml

@@ -0,0 +1,78 @@
+name: UI Components
+
+on: 
+  workflow_dispatch:
+  pull_request:
+    paths:
+    - .github/workflows/ui-components.yml
+    - 'packages/ui-components/**'
+    - 'package.json'
+    - 'pnpm-workspace.yaml'
+    - 'pnpm-lock.yaml'
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+env:
+  DEBUG: verdaccio*
+
+jobs:
+  deploy:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      deployments: write
+      pull-requests: write  #  to comment on pull-requests
+
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+
+      - name: Use Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache pnpm modules
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        env:
+          cache-name: cache-pnpm-modules
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+
+      - name: Install pnpm
+        run: |
+          corepack enable
+            corepack prepare --activate pnpm@latest-8
+      - name: Install
+        run: pnpm install  
+      - name: Build storybook
+        run: pnpm ui:storybook:build
+      - name: Copy public content
+        # the msw.js worker is need it at the storybook-static folder in production
+        run: cp -R packages/ui-components/public/* packages/ui-components/storybook-static
+      - name: 🔥 Deploy Production UI Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        uses: verdaccio/action-netlify-deploy@1c086d59169edeec9254672c7de17d2ceac3928f # v2.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
+          build-dir: './packages/ui-components/storybook-static'          
+      - name: 🤖 Deploy Preview UI Components Netlify
+        if: github.repository == 'verdaccio/verdaccio'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        id: netlify_preview_ui
+        with:
+          draft: true
+          comment-on-pull-request: true
+          github-deployment-is-production: false
+          github-deployment-is-transient: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
+          build-dir: './packages/ui-components/storybook-static'

.github/workflows/website.yml

@@ -0,0 +1,144 @@
+name: Verdaccio Website CI
+
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+        - 'website/**'
+        - './.github/workflows/website.yml'
+  schedule:
+    - cron: '0 0 * * *' 
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+jobs:
+  build:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      deployments: write
+      pull-requests: write  #  to comment on pull-requests
+
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+
+      - name: Use Node 16
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version: 16
+
+      - name: Cache pnpm modules
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        env:
+          cache-name: cache-pnpm-modules
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+
+      - uses: pnpm/action-setup@d882d12c64e032187b2edb46d3a0d003b7a43598 # tag=v2.4.0
+        with:
+          version: latest-8
+          run_install: |
+            - recursive: true
+              args: [--frozen-lockfile]
+      - name: Build 
+        run: pnpm build
+      - name: Build Translations percentage
+        run: pnpm --filter @verdaccio/crowdin-translations build
+      - name: Cache Docusaurus Build
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: website/node_modules/.cache/webpack
+          key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: cache/webpack-${{github.ref}}
+
+      # Will deploy to production on:
+        # 1st: When a push occurs on master branch
+        # 2nd: When we force the worflow dispatch through the UI
+      - name: Build Production
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          SENTRY_KEY: ${{ secrets.SENTRY_KEY }}
+          CONTEXT: production
+        run: pnpm --filter @verdaccio/website netlify:build:production
+
+      - name: 🔥 Deploy Production Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      # Will deploy to Preview URL, only when a pull request is open with changes on the website
+      - name: Build Deployment Preview
+        env:
+          CONTEXT: deploy-preview
+        run: pnpm --filter ...@verdaccio/website netlify:build:deployPreview
+
+      - name: 🤖 Deploy Preview Netlify
+        if: github.repository == 'verdaccio/verdaccio'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        id: netlify_preview
+        with:
+          draft: true
+          comment-on-pull-request: true
+          github-deployment-is-production: false
+          github-deployment-is-transient: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      - name: Audit preview URL with Lighthouse
+        if: github.repository == 'verdaccio/verdaccio'
+        id: lighthouse_audit
+        uses: treosh/lighthouse-ci-action@03becbfc543944dd6e7534f7ff768abb8a296826 # tag=10.1.0
+        with:
+          urls: |
+            ${{ steps.netlify_preview.outputs.preview-url }}
+          uploadArtifacts: true
+          temporaryPublicStorage: true
+
+      - name: Format lighthouse score
+        id: format_lighthouse_score
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # tag=v6
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            const result = ${{ steps.lighthouse_audit.outputs.manifest }}[0].summary
+            const links = ${{ steps.lighthouse_audit.outputs.links }}
+            const formatResult = (res) => Math.round((res * 100))
+            Object.keys(result).forEach(key => result[key] = formatResult(result[key]))
+            const score = res => res >= 90 ? '🟢' : res >= 50 ? '🟠' : '🔴'
+            const comment = [
+                `⚡️ [Lighthouse report](${Object.values(links)[0]}) for the changes in this PR:`,
+                '| Category | Score |',
+                '| --- | --- |',
+                `| ${score(result.performance)} Performance | ${result.performance} |`,
+                `| ${score(result.accessibility)} Accessibility | ${result.accessibility} |`,
+                `| ${score(result['best-practices'])} Best practices | ${result['best-practices']} |`,
+                `| ${score(result.seo)} SEO | ${result.seo} |`,
+                ' ',
+                `*Lighthouse ran on [${Object.keys(links)[0]}](${Object.keys(links)[0]})*`
+            ].join('\n')
+             core.setOutput("comment", comment);
+
+      - name: Add comment to PR
+        if: github.repository == 'verdaccio/verdaccio'
+        id: comment_to_pr
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd # v2
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          number: ${{ github.event.issue.number }}
+          delete: true
+          header: lighthouse
+          message: |
+            ${{ steps.format_lighthouse_score.outputs.comment }}

.gitignore

@@ -2,22 +2,17 @@
 verdaccio-*.tgz
 .DS_Store
 build/
+dist/
 .eslintcache
-./dist
-
-### Test
+node_modules
 
+### database
 .verdaccio-db.json
 .sinopia-db.json
 
-###
+### test
 test-storage*
 .verdaccio_test_env
-node_modules
-package-lock.json
-yarn-error.log
-yarn.lock
-
 
 # docker examples
 docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
@@ -36,12 +31,25 @@ tsconfig.tsbuildinfo
 
 ## bundle files
 packages/standalone/dist/
+
 ## ui
 packages/plugins/ui-theme/static
+/packages/plugins/ui-theme/src/i18n/download_translations/
+!/packages/plugins/ui-theme/src/i18n/crowdin/ui.json
 
-# website
-website/public
-website/.cache
 
 # CI Pnpm cache
 .pnpm-store/
+
+#docs 
+website/docs/api/**/*.md
+website/docs/api/**/*.yml
+!website/docs/api/index.md
+packages/**/docs
+
+# cypress
+e2e/ui/cypress/videos/**/*
+e2e/ui/cypress/screenshots/**/*
+
+# storybook
+packages/ui-components/storybook-static

.husky/pre-commit

@@ -0,0 +1,5 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+#./node_modules/.bin/lint-staged
+npm run husky:pre-commit

.netlify/netlify-plugin-pnpm/index.js

@@ -0,0 +1,10 @@
+module.exports = {
+  onPreBuild: async ({ utils: { build, run } }) => {
+    try {
+      await run.command("npm install -g pnpm")
+      await run.command("pnpm install --ignore-scripts --frozen-lockfile")
+    } catch (error) {
+      return build.failBuild(error)
+    }
+  }
+}

.netlify/netlify-plugin-pnpm/manifest.yml

@@ -0,0 +1,2 @@
+name: netlify-plugin-pnpm
+inputs: []

.npmignore

@@ -1,4 +1,3 @@
-
 ## npm
 npm-debug.log
 yarn-error.log
@@ -23,7 +22,6 @@ docs/
 wiki/
 
 ## flow
-flow-typed/
 types/
 
 # jest

.npmrc

@@ -1,5 +1,3 @@
 always-auth = true
-recursive-install = true
-registry = https://registry.verdaccio.org
-loglevel=warn
+loglevel=info
 fetch-retries="10"

.nvmrc

@@ -1 +1 @@
-14
+20

.prettierignore

@@ -6,20 +6,34 @@
 **/pnpm-lock.yaml
 **/verdaccio-corrupted.db.json
 **/wrong.package.json
-/website/.cache/
-/website/crowdin/
-/website/public/
-/website/src/dictionaries/
+crowdin.yaml
+/docs/website
+/website/translated_docs/
 CHANGELOG.md
 CONTRIBUTORS.md
 node_modules/
 **/coverage/**
 **/static/*.js
+**/dist/*.js
+website/.docusaurus/**/*
+website/i18n/**/*
 **/build/*.js
 packages/core/local-storage/_storage/**
+packages/partials/storage_default_storage/
 packages/standalone/dist/bundle.js
+packages/verdaccio/dist/bundle.js
 docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
-docker-examples/
 build/
 .vscode/
-.github/
+.github/
+.netlify/
+packages/**/docs/**
+packages/mock/mock-store/**
+api/**
+packages/core/local-storage/tests/__fixtures__/test-storage/
+packages/plugins/ui-theme/static/
+.verdaccio-db.json
+test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
+yarn.js
+website/docs/api/*
+packages/ui-components/storybook-static/*

.prettierrc.json

@@ -1,11 +0,0 @@
-{
-  "endOfLine": "lf",
-  "useTabs": false,
-  "printWidth": 100,
-  "tabWidth": 2,
-  "singleQuote": true,
-  "bracketSpacing": true,
-  "jsxBracketSameLine": true,
-  "trailingComma": "es5",
-  "semi": true
-}

.project

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>verdaccio-dev</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+	</buildSpec>
+	<natures>
+	</natures>
+	<filteredResources>
+		<filter>
+			<id>1630305579538</id>
+			<name></name>
+			<type>26</type>
+			<matcher>
+				<id>org.eclipse.ui.ide.multiFilter</id>
+				<arguments>1.0-name-matches-true-false-node_modules</arguments>
+			</matcher>
+		</filter>
+	</filteredResources>
+</projectDescription>

.vscode/launch.json

@@ -5,77 +5,11 @@
   "version": "0.2.0",
   "configurations": [
     {
-      "name": "Verdaccio Debug",
+      "name": "Attach",
       "port": 9229,
       "request": "attach",
       "skipFiles": ["<node_internals>/**"],
       "type": "pwa-node"
-    },
-    {
-      "type": "node",
-      "request": "launch",
-      "name": "CLI Babel Registry",
-      "stopOnEntry": false,
-      "program": "${workspaceFolder}/debug/bootstrap.js",
-      "args": ["-l", "0.0.0.0:4873"],
-      "env": {
-        "BABEL_ENV": "registry"
-      },
-      "preLaunchTask": "npm: build:webui",
-      "console": "integratedTerminal"
-    },
-    {
-      "name": "Unit Tests",
-      "type": "node",
-      "request": "launch",
-      "program": "${workspaceRoot}/node_modules/bin/jest",
-      "stopOnEntry": false,
-      "args": ["--debug=true"],
-      "cwd": "${workspaceRoot}",
-      "runtimeExecutable": null,
-      "runtimeArgs": ["--nolazy"],
-      "env": {
-        "NODE_ENV": "test",
-        "TZ": "UTC"
-      },
-      "console": "integratedTerminal"
-    },
-    {
-      "name": "Functional Tests",
-      "type": "node",
-      "request": "launch",
-      "program": "${workspaceRoot}/node_modules/.bin/jest",
-      "stopOnEntry": false,
-      "args": [
-        "--config",
-        "./test/jest.config.functional.js",
-        "--testPathPattern",
-        "./test/functional/index*",
-        "--debug=false",
-        "--verbose",
-        "--useStderr",
-        "--detectOpenHandles"
-      ],
-      "cwd": "${workspaceRoot}",
-      "env": {
-        "BABEL_ENV": "testOldEnv",
-        "VERDACCIO_DEBUG": "true",
-        "VERDACCIO_DEBUG_INJECT": "true",
-        "NODE_DEBUG": "TO_DEBUG_REQUEST_REMOVE_THIS_request"
-      },
-      "preLaunchTask": "pre-test",
-      "console": "integratedTerminal",
-      "runtimeExecutable": null,
-      "runtimeArgs": ["--nolazy"]
-    },
-    {
-      "type": "node",
-      "request": "launch",
-      "name": "Verdaccio Compiled",
-      "preLaunchTask": "npm: code:build",
-      "program": "${workspaceRoot}/bin/verdaccio",
-      "args": ["-l", "0.0.0.0:4873"],
-      "console": "integratedTerminal"
     }
   ]
 }

.vscode/settings.json

@@ -2,11 +2,12 @@
 {
   "files.exclude": {
     "**/.nyc_output": true,
-    "**/build": true,
+    "**/build": false,
     "**/coverage": true,
     ".idea": true,
     "storage_default_storage": true,
     ".yarn": true
   },
+  "editor.formatOnSave": true,
   "typescript.tsdk": "node_modules/typescript/lib"
 }

.vscode/tasks.json

@@ -1,21 +0,0 @@
-{
-  // See https://go.microsoft.com/fwlink/?LinkId=733558
-  // for the documentation about the tasks.json format
-  "version": "2.0.0",
-  "tasks": [
-    {
-      "type": "npm",
-      "script": "build:webui",
-      "problemMatcher": []
-    },
-    {
-      "type": "npm",
-      "script": "code:build",
-      "problemMatcher": []
-    },
-    {
-      "label": "pre-test",
-      "dependsOn": ["npm: code:build", "npm: test:clean"]
-    }
-  ]
-}

CONTRIBUTING.md

@@ -1,65 +1,53 @@
 # Contributing
 
-> Any change matters, whatever the size, just do it.
+> This guidelines refers to the main (`master`) that host the v6.x, if you want to contribute to `5.x` please read the following [link](https://github.com/verdaccio/verdaccio/blob/5.x/CONTRIBUTING.md).
 
-We are happy that you are willing to contribute. For that reason, we
-have prepared these guidelines for you:
+We're happy that you're considering contributing!
 
-**Table of Contents**
-
-- [Contributing](#contributing)
-  - [How Do I Contribute?](#how-do-i-contribute)
-  - [Development Setup](#development-setup)
-    - [Building the project](#building-the-project)
-    - [Running test](#running-test)
-    - [Running and debugging](#running-and-debugging)
-    - [Debugging compiled code](#debugging-compiled-code)
-  - [Reporting Bugs](#reporting-bugs)
-    - [Read the documentation](#read-the-documentation)
-    - [What's is not considered a bug?](#whats-is-not-considered-a-bug)
-    - [Issue Search](#issue-search)
-    - [Chat](#chat)
-  - [Request Features](#request-features)
-  - [Contributing Guidelines](#contributing-guidelines)
-    - [Submitting a Pull Request](#submitting-a-pull-request)
-    - [Make Changes and Commit](#make-changes-and-commit)
-      - [Caveats](#caveats)
-      - [Before Commit](#before-commit)
-      - [Commit Guidelines](#commit-guidelines)
-    - [Adding a changeset](#adding-a-changeset)
-    - [Update Tests](#update-tests)
-  - [Develop Plugins](#develop-plugins)
+To help you getting started we've prepared these guidelines for you, any change matter, just do it:
 
 ## How Do I Contribute?
 
-There are different ways to contribute, each comes with a different levels
-of tasks, such as:
+There are many ways to contribute:
 
-- Report a bug.
-- Request a feature you think would be great for verdaccio.
-- Fix bugs.
-- Test and triage reported bugs by others.
-- Work on requested/approved features.
-- Improve the codebase (lint, naming, comments, test descriptions, etc...)
+- [Report a bug](#reporting-bugs)
+- [Request a feature you think would be great for Verdaccio](#feature-request)
+- [Fixing bugs](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3A%22issue%3A+bug%22)
+- [Test and triage bugs reported by others](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3Aissue_needs_triage)
+- [Working on requested/approved features](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3A%22topic%3A+feature+request%22+)
+- [Improve the codebase (linting, naming, comments, test descriptions, etc...)](https://github.com/verdaccio/verdaccio/discussions/1461)
+- Improve code coverage for unit testing for every module, [end to end](https://github.com/verdaccio/verdaccio/tree/master/e2e/cli) or [UI test](https://github.com/verdaccio/verdaccio/tree/master/e2e/ui) (with cypress).
 
-Verdaccio has several areas of involvement, which might fit you better, eg:
+The Verdaccio project is split into several areas, the first three hosted in the main repository:
 
 - **Core**: The [core](https://github.com/verdaccio/verdaccio) is the main repository, built with **Node.js**.
-- **Website**: we uses **Gatsby.js** for the **website** and if you are familiar with this technology, you might become the official webmaster.
+- **Website**: we use [**Docusaurus**](https://docusaurus.io/) for the **website** and if you are familiar with this technology, you might become the official webmaster.
 - **User Interface**: The [user Interface](https://github.com/verdaccio/ui) is based in **react** and **material-ui** and looking for front-end contributors.
 - **Kubernetes and Helm**: Ts the official repository for the [**Helm chart**](https://github.com/verdaccio/charts).
 
-> There are other areas to contribute, like documentation, translation which are not hosted on this repo but check the last section of this notes for further information.
+> There are other areas to contribute, like [documentation](https://github.com/verdaccio/verdaccio/tree/master/website/docs) or [translations](#translations}).
 
-## Development Setup
+## Prepare local setup {#local-setup}
 
-Verdaccio uses [_pnpm_](https://pnpm.js.org/) as package manager for development in this repository. Please install the latest one:
+Verdaccio uses [pnpm](https://pnpm.io) as the package manager for development in this repository.
+
+If you are using pnpm for the first time the [pnpm configuration documentation](https://pnpm.io/configuring) may be useful to avoid any potential problems with the following steps.
+
+**Note**: pnpm uses npm's configuration formats so check that your global `.npmrc` file does not inadvertently disable package locks. In other words, your `.npmrc` file **should not** contain
 
 ```
-npm i -g pnpm
+package-lock=false
 ```
 
-First step is installing all dependencies:
+This setting would cause the `pnpm install` command to install incorrect versions of package dependencies and the subsequent `pnpm build` step would likely fail.
+
+To begin your development setup, please install the latest version of pnpm globally:
+
+```
+npm i -g pnpm@latest-8
+```
+
+With pnpm installed, the first step is installing all dependencies:
 
 ```
 pnpm install
@@ -79,117 +67,166 @@ pnpm build
 pnpm test
 ```
 
-Verdaccio is a mono repository, for running an specific test or package go the specific package eg:
+Verdaccio is a mono repository. To run the tests for for a specific package:
 
 ```
 cd packages/store
 pnpm test
 ```
 
-or an specific test in that package
+or an specific test in that package:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts
 ```
 
-or a single test unit
+or a single test unit:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple'
 ```
 
-The coverage is enabled by default, to speed up test running
+Coverage reporting is enabled by default, but you can turn it off to speed up
+test runs:
 
 ```
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple' --coverage=false
 ```
 
-To increase debug output, we use `debug`, to enable it in your test just add
+You can enable increased [`debug`](https://www.npmjs.com/package/debug) output:
 
 ```
-DEBUG=verdaccio* pnpm test
+DEBUG=verdaccio:* pnpm test
 ```
 
 More details in the debug section
 
 ### Running and debugging
 
-We uses [`debug`](https://www.npmjs.com/package/debug) for debug outcome. Each package has it owns namespace.
+> Check the debugging guidelines [here](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio)
 
-### Debugging compiled code
+We use [`debug`](https://www.npmjs.com/package/debug) to add helpful debugging
+output to the code. Each package has it owns namespace.
 
-Currently you can only run in debug mode pre-compiled packages, to enable debug while running add the `verdaccio` namespace using the `DEBUG` environment variable, like this:
+#### Useful Scripts
+
+To run the application from the source code, ensure the project has been built with `pnpm build`, once this is done, there are few commands that helps to run server:
+
+- `pnpm start`: Runs server on port `8000` and UI on port `4873`. This is particularly useful if you want to contribute to the UI, since it runs with hot reload.
+- `pnpm debug`: Run the server in debug mode `--inspect`. UI runs too but without hot reload. For automatic break use `pnpm debug:break`.
+- `pnpm debug:fastify`: To contribute on the [fastify migration](https://github.com/verdaccio/verdaccio/discussions/2155) this is a temporary command for such purpose.
+- `pnpm website`: Build the website, for more commands to run the _website_, run `cd website` and then `pnpm serve`, website will run on port `3000`.
+- `pnpm docker`: Build the docker image. Requires `docker` command available in your system.
+
+#### Debugging compiled code {#debugging-compiled-code}
+
+Currently you can only run pre-compiled packages in debug mode. To enable debug
+while running add the `verdaccio` namespace using the `DEBUG` environment
+variable, like this:
 
 ```
 DEBUG=verdaccio:* node packages/verdaccio/debug/bootstrap.js
 ```
 
-On this way can be reviewed every package, but if you need to filter out and display more specific output, increase the name space filter.
+You can filter this output to just the packages you're interested in using
+namespaces:
 
 ```
 DEBUG=verdaccio:plugin:* node packages/verdaccio/debug/bootstrap.js
 ```
 
-The debug code is intended to analyze what is happening under the hood and none of the output is gathered with the logger module.
+The debug code is intended to analyze what is happening under the hood and none
+of the output is sent to the logger module.
 
-## Reporting Bugs
+> [See the full guide how to debug with Verdaccio](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio)
 
-**Bugs are considered features that are not working as described in documentation.**
+#### Testing your changes in a local registry {#testing-local-registry}
+
+Once you have perform your changes in the code base, the build and tests passes you can publish a local version:
+
+- Ensure you have build all modules (or the one you have modified)
+- Run `pnpm local:publish:release` to launch a local registry and publish all packages into it. This command will be alive until server is killed (Control Key + C)
+
+```
+pnpm build
+pnpm local:publish:release
+```
+
+The last step consist on install globally the package from the local registry which runs on the default port (4873).
+
+```
+npm i -g verdaccio --registry=http://localhost:4873
+verdaccio
+```
+
+If you perform more changes in the source code, repeat this process, there is not _hot reloading_ support.
+
+## Feature Request {#feature-request}
+
+New feature requests are welcome. Analyse whether the idea fits within scope of the project. Adding in context and the use-case will really help!
+
+**Please provide:**
+
+- Create a [discussion](https://github.com/verdaccio/verdaccio/discussions/new).
+- A detailed description the advantages of your request.
+- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_
+  ](https://github.com/yarnpkg/yarn) or [_yarn modern_
+  ](https://github.com/yarnpkg/berry).
+- A potential implementation or design
+- Whatever else is on your mind! 🤓
+
+## Reporting Bugs {#reporting-bugs}
+
+**Bugs are considered features that are not working as described in
+documentation.**
 
 If you've found a bug in Verdaccio **that isn't a security risk**, please file
-a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
+a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues), if you think a potential vulnerability please read the [security policy](https://verdaccio.org/community/security) .
 
 > **NOTE: Verdaccio still does not support all npm commands. Some were not
 > considered important and others have not been requested yet.**
 
-### Read the documentation
-
-Check whether you are using the software in the way is documented [documentation](http://www.verdaccio.org/docs/en/installation.html).
-
 ### What's is not considered a bug?
 
-- _Third party integrations_: proxies integrations, external plugins.
-- _Package managers_: If a package manager does not support a specific command or cannot be reproduced with another package manager.
-- _Features clearly flagged as not supported_.
-- _Node.js issues installation in any platform_: If you cannot install the global package ( this is considered external issue)
-- Any ticket which has the flagged as [external issue](https://github.com/verdaccio/verdaccio/labels/external-issue).
+- _Third party integrations_: proxies integrations, external plugins
+- _Package managers_: If a package manager does not support a specific command
+  or cannot be reproduced with another package manager
+- _Features clearly flagged as not supported_
+- _Node.js issues installation in any platform_: If you cannot install the
+  global package (this is considered external issue)
+- Any ticket which has been flagged as an [external issue
+  ](https://github.com/verdaccio/verdaccio/labels/external-issue)
 
-If you intent to report a **security** issue, please follow our [Security policy guidelines](https://github.com/verdaccio/verdaccio/security/policy).
+If you intend to report a **security** issue, please follow our [Security policy
+guidelines](https://github.com/verdaccio/verdaccio/security/policy).
 
-### Issue Search
+### Issues {#issues}
 
-Before consider report a bug, please follow this steps before:
+Before reporting a bug please:
 
-- Search if has already been reported via the issue search.
-- Look for the **question** label: we have labelled questions for easy follow-up as [questions](https://github.com/verdaccio/verdaccio/labels/question).
+- Search for existing issues to see if it has already been reported
+- Look for the **question** label: we have labelled questions for easy follow-up
+  as [questions](https://github.com/verdaccio/verdaccio/labels/question)
 
-In case any of those match with your search, up-vote it (using GitHub reactions) or add additional helpful details to the existing issue to show that it's affecting multiple people.
+In case any of those match with your search, up-vote it (using GitHub reactions)
+or add additional helpful details to the existing issue to show that it's
+affecting multiple people.
 
-### Chat
+### Contributing support
 
-Questions can be asked via [Discord](http://chat.verdaccio.org/)
+Questions can be asked via [Discord](https://discord.gg/7qWJxBf)
 
-**Please use the `#help` channel.**
+**Please use the `#contribute` channel.**
 
-## Request Features
+## Development Guidelines {#development-guidelines}
 
-New feature requests are welcome. Analyse whether the idea fits within scope of
-the project. Then, detail your request, ensuring context and use case is provided.
+It's recommended use a UNIX system for local development, Windows should works fine for development, but is not daily tested could not be perfect. To ensure a fast code review and merge, please follow the next guidelines:
 
-**Please provide:**
+Any contribution gives you the right to be part of this organization as _collaborator_ and your avatar will be automatically added to the [contributors page](https://verdaccio.org/contributors).
 
-- A detailed description the advantages of your request
-- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_](https://github.com/yarnpkg/yarn) or [_yarn berry_](https://github.com/yarnpkg/berry).
-- A potential implementation or design
-- Whatever else you have in your mind 🤓
+## Pull Request {#pull-request}
 
-## Contributing Guidelines
-
-This is the most exciting part, when you became a Verdaccio contributor 🙌🏼, to ensure a fast code review and merge, please follow the next guidelines:
-
-> Any contribution gives you the right to be part of this organization as _collaborator_.
-
-### Submitting a Pull Request
+### Submitting a Pull Request {#submit-pull-request}
 
 The following are the steps you should follow when creating a pull request.
 Subsequent pull requests only need to follow step 3 and beyond.
@@ -213,14 +250,14 @@ information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing)
 
 #### Caveats
 
-Feel free to commit as much times you want in your branch, but keep on mind on this repository we `git squash` on merge by default, any other way is forbidden since we intent to have a clean git history.
+Feel free to commit as much times you want in your branch, but keep on mind on
+this repository we `git squash` on merge by default, as we like to maintain a
+clean git history.
 
-#### Before Commit
+#### Before Push {#before-push}
 
-Before committing, **you must ensure there are no linting errors and
-all tests pass.**
-
-To do this, run these commands before create the PR:
+Before committing or push, **you must ensure there are no linting errors and
+all tests passes**. To do verify, run these commands before creating the PR:
 
 ```bash
 pnpm lint
@@ -229,52 +266,32 @@ pnpm build
 pnpm test
 ```
 
-> note: eslint and formatting are running separately, keep code formatting before push.
+> note: eslint and formatting are run separately, keep code formatting
+> before push.
 
-All good? perfect, then you should create the pull request.
+All good? Perfect! You should create the pull request.
 
-#### Commit Guidelines
+#### Commit Guidelines {#commits}
 
-For example:
+On a pull request, commit messages are not important, please focus on document properly the pull request content. The commit message will be taken from the pull request title, it is recommended to use lowercase format.
 
-- `feat: A new feature`
-- `fix: A bug fix`
+### Adding a changeset {#changeset}
 
-A commit of the type feat introduces a new feature to the codebase
-(this correlates with MINOR in semantic versioning).
+We use [changesets](https://github.com/atlassian/changesets) in order to
+generate a detailed Changelog as possible.
 
-e.g.:
-
-```
-feat: xxxxxxxxxx
-```
-
-A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
-
-e.g.:
-
-```
-fix: xxxxxxxxxxx
-```
-
-Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
-and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
-
-All commits message are going to be validated when they are created using husky hooks.
-
-> Please, try to provide one single commit to help a clean and easy merge process.
-
-### Adding a changeset
-
-We use [changesets](https://github.com/atlassian/changesets) in order to generate a detailed Changelog as possible.
-
-Add a changeset with your Pull Request is essential if you want your contribution get merged (unless is a change that does not affect library functionality, eg: typo, docs, readme, add additional test or linting code). To create a changeset please run:
+Adding a changeset with your Pull Request is essential if you want your
+contribution to get merged (unless it does not affect functionality or
+user-facing content, eg: docs, readme, adding test or typo/lint fixes). To
+create a changeset please run:
 
 ```
 pnpm changeset
 ```
 
-Then select the packages you want to include in your changeset navigating through them and press the spacebar to check it, on finish press enter to move to the next step.
+Then select the packages you want to include in your changeset navigating
+through them and press the spacebar to check it, on finish press enter to move
+to the next step.
 
 ```
 🦋  Which packages would you like to include? …
@@ -287,7 +304,9 @@ Then select the packages you want to include in your changeset navigating throug
   ✔ @verdaccio/commons-api
 ```
 
-The next question would be if you want a _major bump_, this is not the usual scenario, most likely would be a patch, in that case press enter 2 times (to skip minor)
+The next question would be if you want a _major bump_. This is not the usual
+scenario, most likely you want a patch, and in that case press enter 2 times
+(to skip minor)
 
 ```
 🦋  Which packages should have a major bump? …
@@ -295,7 +314,8 @@ The next question would be if you want a _major bump_, this is not the usual sce
   ✔ @verdaccio/config@5.0.0-alpha.0
 ```
 
-Once the desired bump you need, the CLI will ask for a summary, here you have fully freedom what to include.
+Once you have the desired bump you need, the CLI will ask for a summary. Here
+you have full freedom on what to include:
 
 ```
 🦋  Which packages would you like to include? · @verdaccio/config
@@ -307,7 +327,7 @@ Once the desired bump you need, the CLI will ask for a summary, here you have fu
 🦋  Summary ›
 ```
 
-The last step is confirm your changeset or abort the operation.
+The last step is to confirm your changeset or abort the operation:
 
 ```
 🦋  Is this your desired changeset? (Y/n) · true
@@ -317,9 +337,13 @@ The last step is confirm your changeset or abort the operation.
 🦋  info /Users/user/verdaccio.clone/.changeset/light-scissors-smell.md
 ```
 
-Once the changeset is added (all will have an unique name) you can freely edit using markdown, adding additional information, code snippets or what you consider is relevant.
+Once the changeset is added (all will have an unique name) you can freely edit
+using markdown, adding additional information, code snippets or whatever else
+you consider to be relevant.
 
-All that information will be part of the **changelog**, be concise but informative. It is considered a good option to add your nickname and GitHub link to your profile.
+All that information will be part of the **changelog**. Be concise but
+informative! It's recommended to add your nickname and GitHub link to your
+profile.
 
 **PRs that do not follow the commit message guidelines will not be merged.**
 
@@ -327,12 +351,31 @@ All that information will be part of the **changelog**, be concise but informati
 
 **Any change in source code must include test updates**.
 
-If you need help with how testing works, please [refer to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
+If you need help with how testing works, please [refer to the following guide
+](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
 
 **If you are introducing new features, you MUST include new tests. PRs for
 features without tests will not be merged.**
 
-## Develop Plugins
+## Translations {#translations}
+
+All translations are provided by the **[crowdin](http://crowdin.com)** platform,
+[https://translate.verdaccio.org/](https://translate.verdaccio.org/)
+
+If you want to contribute by adding translations, create an account (GitHub could be used as fast alternative), in the platform you can contribute to two areas, the website or improve User Interface translations.
+
+If a language is not listed, ask for it in the [Discord](https://discord.gg/7qWJxBf) channel #contribute channel.
+
+For adding a new **language** on the UI follow these steps:
+
+1. Ensure the **language** has been enabled, must be visible in the `crowdin` platform.
+2. Find in the explorer the file `en.US.json` in the path `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` and complete the translations, **not need to find approval on this**.
+3. Into the project, add a new field into `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` file, in the section `lng`, the new language, eg: `{ lng: {korean:"Korean"}}`. (This file is English based, once the PR has been merged, this string will be available in crowdin for translate to the targeted language).
+4. Add the language, [flag icon](https://www.npmjs.com/package/country-flag-icons), and the menu key fort he new language eg: `menuKey: 'lng.korean'` to the file `packages/plugins/ui-theme/src/i18n/enabledLanguages.ts`.
+5. For local testing, read `packages/plugins/ui-theme/src/i18n/ABOUT_TRANSLATIONS.md`.
+6. Add a `changeset` file, see more info below.
+
+## Develop Plugins {#develop-plugins}
 
 Plugins are add-ons that extend the functionality of the application.
 
@@ -340,6 +383,8 @@ If you want to develop your own plugin:
 
 1. Check whether there is a legacy Sinopia plugin for the feature that you need
    via [npmjs](https://www.npmjs.com/search?q=sinopia)
-2. Keep in mind the [life-cycle to load a plugin](https://verdaccio.org/docs/en/dev-plugins)
+2. Keep in mind the [life-cycle to load a plugin
+   ](https://verdaccio.org/docs/en/dev-plugins)
 3. You are free to host your plugin in your repository
-4. Provide a detailed description of your plugin to help users understand how to use it.
+4. Provide a detailed description of your plugin to help users understand how to
+   use it

CONTRIBUTORS.md

@@ -1,39 +0,0 @@
-<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
-<!-- markdownlint-disable -->
-<table>
-  <tr>
-    <td align="center"><a href="https://www.linkedin.com/in/jotadeveloper/"><img src="https://avatars0.githubusercontent.com/u/558752?v=4" width="100px;" alt=""/><br /><sub><b>Juan Picado</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Documentation">📖</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Code">💻</a> <a href="#infra-juanpicado" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#eventOrganizing-juanpicado" title="Event Organizing">📋</a> <a href="#blog-juanpicado" title="Blogposts">📝</a> <a href="#maintenance-juanpicado" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://github.com/sergiohgz"><img src="https://avatars3.githubusercontent.com/u/14012309?v=4" width="100px;" alt=""/><br /><sub><b>Sergio Herrera</b></sub></a><br /><a href="#infra-sergiohgz" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-sergiohgz" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://daniel-ruf.de/"><img src="https://avatars1.githubusercontent.com/u/827205?v=4" width="100px;" alt=""/><br /><sub><b>Daniel Ruf</b></sub></a><br /><a href="#security-DanielRuf" title="Security">🛡️</a> <a href="#infra-DanielRuf" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-DanielRuf" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://priscilawebdev.github.io/priscilaoliveira/"><img src="https://avatars1.githubusercontent.com/u/29228205?v=4" width="100px;" alt=""/><br /><sub><b>Priscila Oliveira</b></sub></a><br /><a href="#design-priscilawebdev" title="Design">🎨</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=priscilawebdev" title="Code">💻</a> <a href="#maintenance-priscilawebdev" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="http://ayusharma.github.io/"><img src="https://avatars0.githubusercontent.com/u/6918450?v=4" width="100px;" alt=""/><br /><sub><b>Ayush Sharma</b></sub></a><br /><a href="#infra-ayusharma" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ayusharma" title="Code">💻</a> <a href="#design-ayusharma" title="Design">🎨</a></td>
-    <td align="center"><a href="https://github.com/trentearl"><img src="https://avatars2.githubusercontent.com/u/802857?v=4" width="100px;" alt=""/><br /><sub><b>Trent Earl</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=trentearl" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jmwilkinson"><img src="https://avatars0.githubusercontent.com/u/17836030?v=4" width="100px;" alt=""/><br /><sub><b>jmwilkinson</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jmwilkinson" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/bufferoverflow"><img src="https://avatars2.githubusercontent.com/u/378909?v=4" width="100px;" alt=""/><br /><sub><b>Roger Meier</b></sub></a><br /><a href="#plugin-bufferoverflow" title="Plugin/utility libraries">🔌</a></td>
-    <td align="center"><a href="https://ghuser.io/jamesgeorge007"><img src="https://avatars2.githubusercontent.com/u/25279263?v=4" width="100px;" alt=""/><br /><sub><b>James George</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jamesgeorge007" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/AvailCat"><img src="https://avatars3.githubusercontent.com/u/19658647?v=4" width="100px;" alt=""/><br /><sub><b>AvailCat</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=AvailCat" title="Code">💻</a> <a href="#infra-AvailCat" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-AvailCat" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://www.luciusgaitan.com/"><img src="https://avatars0.githubusercontent.com/u/5970350?v=4" width="100px;" alt=""/><br /><sub><b>Lucius Gaitán</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lgaitan" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ramonornela"><img src="https://avatars1.githubusercontent.com/u/187946?v=4" width="100px;" alt=""/><br /><sub><b>Ramon Henrique Ornelas</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ramonornela" title="Code">💻</a></td>
-    <td align="center"><a href="https://people.freebsd.org/~mi/resume/"><img src="https://avatars1.githubusercontent.com/u/1486340?v=4" width="100px;" alt=""/><br /><sub><b>UnitedMarsupials-zz</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=UnitedMarsupials-zz" title="Code">💻</a></td>
-    <td align="center"><a href="http://www.codingintrigue.co.uk/"><img src="https://avatars0.githubusercontent.com/u/9048902?v=4" width="100px;" alt=""/><br /><sub><b>Ryan Graham</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ryan-codingintrigue" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/coolsp"><img src="https://avatars1.githubusercontent.com/u/1246647?v=4" width="100px;" alt=""/><br /><sub><b>coolsp</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=coolsp" title="Code">💻</a></td>
-    <td align="center"><a href="http://ashishsurana.in/"><img src="https://avatars0.githubusercontent.com/u/5610944?v=4" width="100px;" alt=""/><br /><sub><b>Ashish Surana</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ashishsurana" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/buffaybu"><img src="https://avatars3.githubusercontent.com/u/2025661?v=4" width="100px;" alt=""/><br /><sub><b>Wang Yifei</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=buffaybu" title="Code">💻</a></td>
-    <td align="center"><a href="https://twitter.com/liran_tal"><img src="https://avatars1.githubusercontent.com/u/316371?v=4" width="100px;" alt=""/><br /><sub><b>Liran Tal</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lirantal" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/brenordr"><img src="https://avatars2.githubusercontent.com/u/19731692?v=4" width="100px;" alt=""/><br /><sub><b>Breno Rodrigues</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=brenordr" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jachstet-sea"><img src="https://avatars0.githubusercontent.com/u/7993508?v=4" width="100px;" alt=""/><br /><sub><b>jachstet-sea</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jachstet-sea" title="Code">💻</a></td>
-    <td align="center"><a href="https://patrik.votocek.cz/"><img src="https://avatars1.githubusercontent.com/u/112567?v=4" width="100px;" alt=""/><br /><sub><b>Patrik Votoček</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=Vrtak-CZ" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/monkeywithacupcake"><img src="https://avatars3.githubusercontent.com/u/7316730?v=4" width="100px;" alt=""/><br /><sub><b>jess</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=monkeywithacupcake" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/toolsofraj"><img src="https://avatars0.githubusercontent.com/u/2507152?v=4" width="100px;" alt=""/><br /><sub><b>toolsofraj</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=toolsofraj" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ddhp"><img src="https://avatars1.githubusercontent.com/u/1715380?v=4" width="100px;" alt=""/><br /><sub><b>Jian-Chen Chen (jesse)</b></sub></a><br /><a href="#translation-ddhp" title="Translation">🌍</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ddhp" title="Code">💻</a></td>
-  </tr>
-</table>
-
-<!-- markdownlint-enable -->
-<!-- ALL-CONTRIBUTORS-LIST:END -->

Dockerfile

@@ -1,25 +1,26 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:18-alpine as builder
 
 ENV NODE_ENV=development \
-    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
+    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org
 
 RUN apk --no-cache add openssl ca-certificates wget && \
-    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
+    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python3 && \
     wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
-    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
-    apk add glibc-2.25-r0.apk
+    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.35-r0/glibc-2.35-r0.apk && \
+    apk add --force-overwrite glibc-2.35-r0.apk
 
 WORKDIR /opt/verdaccio-build
 COPY . .
-
-RUN npm -g i pnpm@latest && \
+RUN npm -g i pnpm@latest-8 && \
     pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
-    pnpm recursive install --frozen-lockfile --ignore-scripts && \
+    pnpm install --frozen-lockfile --ignore-scripts && \
+    rm -Rf test && \
     pnpm run build
-# FIXME: need to remove devDependencies from the build
+# FIXME: need to remove devDependencies from the build    
+# NODE_ENV=production pnpm install --frozen-lockfile --ignore-scripts
 # RUN pnpm install --prod --ignore-scripts
 
-FROM node:14.16.1-alpine
+FROM node:18-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

README.md

@@ -1,10 +1,19 @@
+[![BannerUK](https://cdn.verdaccio.dev/readme/banner-uk.svg)](https://donate.redcrossredcrescent.org/ua/donate/~my-donation?_cv=1)
+
+> Verdaccio stands for **peace**, stop the war, we will be yellow / blue 🇺🇦 until that happens.
+
 ![verdaccio logo](https://cdn.verdaccio.dev/readme/verdaccio@2x.png)
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version 6 (Development branch)
+# Version Next (Development branch)
 
-> Looking for Verdaccio 5? Check branch `5.x`.
+> Looking for Verdaccio 5 version? Check the branch `5.x`
+> The plugins for the `v5.x` that are hosted within this organization are located
+> at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository, while for the `next` version
+> are hosted on this project `./packages/plugins`, keep on mind `next` plugins will eventually would be
+> incompatible with `v5.x` versions.
+> Note that contributing guidelines might be different based on the branch.
 
 [Verdaccio](https://verdaccio.org/) is a simple, **zero-config-required local private npm registry**.
 No need for an entire database just to get started! Verdaccio comes out of the box with
@@ -26,20 +35,60 @@ Google Cloud Storage** or create your own plugin.
 
 [![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
+[![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
 ## Install
 
+> Latest Node.js v16 required
+
 Install with npm:
 
 ```bash
-npm install --global verdaccio@6-next --registry https://registry.verdaccio.org/
+npm install --location=global verdaccio@next
 ```
 
-> Published on a temporary registry while setup is ready to publish on npmjs
+With `yarn`
+
+```bash
+yarn global add verdaccio@next
+```
+
+With `pnpm`
+
+```bash
+pnpm i -g verdaccio@next
+```
+
+or
+
+```bash
+docker pull verdaccio/verdaccio:nightly-master
+```
+
+or with _helm_ [official chart](https://github.com/verdaccio/charts).
+
+```bash
+helm repo add verdaccio https://charts.verdaccio.org
+helm repo update
+helm install verdaccio/verdaccio
+```
+
+Furthermore, you can read the [**Debugging Guidelines**](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio) and the [**Docker Examples**](https://github.com/verdaccio/verdaccio/tree/master/docker-examples) for more advanced development.
+
+## Plugins
+
+You can develop your own [plugins](https://verdaccio.org/docs/plugins) with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin). Installing [Yeoman](https://yeoman.io/) is required.
+
+```
+npm install --location=global yo
+npm install --location=global generator-verdaccio-plugin
+```
+
+Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.
 
 ## Donations
 
-Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider making a donation - **your logo might end up in this readme.** 😉
+Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider do a long support donation - **and your logo will be on this section of the readme.**
 
 **[Donate](https://github.com/sponsors/verdaccio)** 💵👍🏻 starting from _$1/month_ or just one single contribution.
 
@@ -65,17 +114,31 @@ If you want to use a modified version of some 3rd-party package (for example, yo
 ### E2E Testing
 
 Verdaccio has proved to be a lightweight registry that can be
-booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **alfresco** or **eclipse theia**. You can read more in dedicated article to E2E in our blog.
+booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **babel.js**, **angular-cli** or **docusaurus**. You can read more in [here](https://verdaccio.org/docs/e2e).
 
-## Talks
+Furthermore, here few examples how to start:
 
-### **Node.js Dependency Confusion Attacks**.
+- [e2e-ci-example-gh-actions](https://github.com/juanpicado/e2e-ci-example-gh-actions)
+- [verdaccio-end-to-end-tests](https://github.com/juanpicado/verdaccio-end-to-end-tests)
+- [verdaccio-fork](https://github.com/juanpicado/verdaccio-fork)
 
-[![verdaccio Node.js Dependency Confusion Attacks](https://cdn.verdaccio.dev/readme/devseccon.png)](https://www.youtube.com/watch?v=qTRADSp3Hpo)
+## Watch our Videos
+
+**Node Congress 2022, February 2022, Online Free**
+
+<div>
+   <a href="https://portal.gitnation.org/contents/five-ways-of-taking-advantage-of-verdaccio-your-private-and-proxy-nodejs-registry">
+     <img src="https://cdn.verdaccio.dev/readme/nodejscongress2022.jpg" alt="nodejs" width="200"/>
+  </a>
+</div>
 
 You might want to check out as well our previous talks:
 
-- [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado\***](https://www.youtube.com/watch?v=oVCjDWeehAQ)
+- [Using Docker and Verdaccio to make Integration Testing Easy - **Docker All Hands #4 December - 2021**](https://www.youtube.com/watch?v=zRI0skF1f8I)
+- [**Juan Picado** – Testing the integrity of React components by publishing in a private registry - React Finland - 2021](https://www.youtube.com/watch?v=bRKZbrlQqLY&t=16s&ab_channel=ReactFinland)
+- [BeerJS Cba Meetup No. 53 May 2021 - **Juan Picado**](https://www.youtube.com/watch?v=6SyjqBmS49Y&ab_channel=BeerJSCba)
+- [Node.js Dependency Confusion Attacks - April 2021 - **Juan Picado**](https://www.youtube.com/watch?v=qTRADSp3Hpo)
+- [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado**](https://www.youtube.com/watch?v=oVCjDWeehAQ)
 - [ViennaJS Meetup - Introduction to Verdaccio by **Priscila Olivera** and **Juan Picado**](https://www.youtube.com/watch?v=hDIFKzmoCa)
 - [Open Source? trivago - Verdaccio (**Ayush** and **Juan Picado**) January 2020](https://www.youtube.com/watch?v=A5CWxJC9xzc)
 - [GitNation Open Source Stage - How we have built a Node.js Registry with React - **Juan Picado** December 2019](https://www.youtube.com/watch?v=gpjC8Qp9B9A)
@@ -92,7 +155,7 @@ verdaccio
 You would need set some npm configuration, this is optional.
 
 ```bash
-$ npm set registry http://localhost:4873/
+npm set registry http://localhost:4873/
 ```
 
 For one-off commands or to avoid setting the registry globally:
@@ -116,7 +179,7 @@ npm adduser --registry http://localhost:4873
 > if you use HTTPS, add an appropriate CA information ("null" means get CA list from OS)
 
 ```bash
-$ npm set ca null
+npm set ca null
 ```
 
 #### 2. publish your package
@@ -146,7 +209,7 @@ To run the docker container:
 docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio
 ```
 
-Docker examples are available [in this repository](https://github.com/verdaccio/docker-examples).
+Docker examples are available [in this repository](https://github.com/verdaccio/verdaccio/tree/master/docker-examples).
 
 ## Compatibility
 
@@ -184,7 +247,20 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 If you want to report a security vulnerability, please follow the steps which we have defined for you in our [security policy](https://github.com/verdaccio/verdaccio/security/policy).
 
-## Core Team
+## Special Thanks
+
+Thanks to the following companies to help us to achieve our goals providing free open source licenses. Every company provides enough resources to move this project forward.
+
+| Company      | Logo                                                                                                                            | License                                                                           |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
+| JetBrains    | [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)                                                     | JetBrains provides licenses for products for active maintainers, renewable yearly |
+| Crowdin      | [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)                                                              | Crowdin provides platform for translations                                        |
+| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                        | BrowserStack provides plan to run End to End testing for the UI                   |
+| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                      | Netlify provides pro plan for website deployment                                  |
+| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                     | Algolia provides search services for the website                                  |
+| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application) | Docker offers unlimited pulls and unlimited egress to any and all users           |
+
+## Maintainers
 
 | [Juan Picado](https://github.com/juanpicado)                                   | [Ayush Sharma](https://github.com/ayusharma)                             | [Sergio Hg](https://github.com/sergiohgz)                                 |
 | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------ | ------------------------------------------------------------------------- |
@@ -199,8 +275,10 @@ You can find and chat with then over Discord, click [here](http://chat.verdaccio
 ## Who is using Verdaccio?
 
 - [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#customizing-e2e-registry-configuration) _(+86.2k ⭐️)_
+- [Grafana](https://github.com/grafana/grafana/search?q=verdaccio) _(+54.9k ⭐️)_
 - [Gatsby](https://github.com/gatsbyjs/gatsby) _(+49.2k ⭐️)_
 - [Babel.js](https://github.com/babel/babel) _(+38.5k ⭐️)_
+- [Docusaurus](https://github.com/facebook/docusaurus) _(+34k ⭐️)_
 - [Vue CLI](https://github.com/vuejs/vue-cli) _(+27.4k ⭐️)_
 - [Angular CLI](https://github.com/angular/angular-cli) _(+24.3k ⭐️)_
 - [Uppy](https://github.com/transloadit/uppy) _(+23.8k ⭐️)_
@@ -208,14 +286,14 @@ You can find and chat with then over Discord, click [here](http://chat.verdaccio
 - [Aurelia Framework](https://github.com/aurelia/framework) _(+11.6k ⭐️)_
 - [pnpm](https://github.com/pnpm/pnpm) _(+10.1k ⭐️)_
 - [ethereum/web3.js](https://github.com/ethereum/web3.js) _(+9.8k ⭐️)_
+- [Webiny CMS](https://github.com/webiny/webiny-js) _(+6.6k ⭐️)_
 - [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
-- [webiny-js](https://github.com/webiny/webiny-js) _(+4.3k ⭐️)_
 - [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
 - [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
 - [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
 - [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)
 
-🤓 Don't be shy, you also can be in [the list](https://github.com/verdaccio/website/blob/master/docs/who-is-using.md).
+🤓 Don't be shy, add yourself to this readme.
 
 ## Open Collective Sponsors
 
@@ -238,16 +316,6 @@ Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com
 
 [![backers](https://opencollective.com/verdaccio/backers.svg?width=890)](https://opencollective.com/verdaccio#backers)
 
-## Special Thanks
-
-Thanks to the following companies to help us to achieve our goals providing free open source licenses.
-
-[![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)
-[![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)
-[![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)
-
-Verdaccio also is part of to the [Docker Open Source Program](https://www.docker.com/blog/expanded-support-for-open-source-software-projects/).
-
 ## Contributors
 
 This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
@@ -262,7 +330,7 @@ If you have any issue you can try the following options, do no desist to ask or
 - [Donations](https://github.com/sponsors/verdaccio)
 - [Reporting an issue](https://github.com/verdaccio/verdaccio/issues/new/choose)
 - [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
-- [Chat](http://chat.verdaccio.org/)
+- [Chat](https://discord.gg/7qWJxBf)
 - [Logos](https://verdaccio.org/docs/en/logo)
 - [Docker Examples](https://github.com/verdaccio/verdaccio/tree/master/docker-examples)
 - [FAQ](https://github.com/verdaccio/verdaccio/discussions/categories/q-a)

SECURITY.md

@@ -4,13 +4,13 @@
 
 The following table describes the versions of this project that are currently supported with security updates:
 
-| Version   | Supported                                |
-| --------- | ---------------------------------------- |
-| 2.x       | :x:                                      |
-| 3.x       | :x:                                      |
-| 4.x       | :white_check_mark: (until 1st July 2021) |
-| 5.x       | :white_check_mark:                       |
-| 6.x alpha | :x:                                      |
+| Version   | Supported          |
+| --------- | ------------------ |
+| 2.x       | :x:                |
+| 3.x       | :x:                |
+| 4.x       | :x:                |
+| 5.x       | :white_check_mark: |
+| 6.x alpha | :x:                |
 
 ## Responsible disclosure security policy
 
@@ -28,11 +28,11 @@ At Verdaccio, we consider the security of our systems a top priority. But no mat
 
 If you discover a security vulnerability, please use one of the following means of communications to report it to us:
 
-- Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
+- Report the security issue to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
 
 Note that time-frame and processes are subject to each program’s own policy.
 
-- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
+- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://cdn.verdaccio.dev/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
 
 Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
 

crowdin.yaml

@@ -0,0 +1,19 @@
+project_id: 295539
+api_token_env: CROWDIN_VERDACCIO_API_KEY
+# token local testing
+# api_token: token_secret
+
+preserve_hierarchy: true
+
+files:
+  - source: /packages/plugins/ui-theme/src/i18n/crowdin/*.json
+    translation: '/packages/plugins/ui-theme/src/i18n/download_translations/%locale%/%original_file_name%'
+  - source: /website/i18n/en/**/*
+    translation: '/website/i18n/%locale%/**/%original_file_name%'
+  - source: /website/docs/**/*
+    translation: '/website/i18n/%locale%/docusaurus-plugin-content-docs/current/**/%original_file_name%'
+    ignore: [/website/docs/api/**/*]
+  - source: /website/versioned_docs/**/*
+    translation: /website/i18n/%locale%/docusaurus-plugin-content-docs/**/%original_file_name%
+    ignore: [/website/versioned_docs/version-5.x/api/**/*, /website/versioned_docs/version-6.x/api/**/*]
+   

docker-examples/README.md

@@ -8,12 +8,14 @@ The following examples aim to be demonstrative and can be either improved or upd
 
 - [v4 examples](v4/README.md)
 - [v5 examples](v5/README.md)
+- [v6 examples](v6/README.md)
 
-## Aditional data
+## Additional data
 
 This folder aims to create a collection of Docker and Kubernetes examples.
 
 For more information about the **Helm** Chart, please check it [owns repo](https://github.com/verdaccio/charts).
+
 ### Kubernetes
 
 - Kubernetes (minikube) + Verdaccio (Basic Configuration)

docker-examples/v4/README.md

@@ -2,23 +2,23 @@
 
 #### Proxies
 
-- [Docker + Apache + Verdaccio](v4/apache-verdaccio/README.md)
-- [Docker + Nginx + Verdaccio](v4/reverse_proxy/nginx/README.md)
-- [Docker + https-portal Example](v4/https-portal-example/README.md)
+- [Docker + Apache + Verdaccio](apache-verdaccio/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
+- [Docker + https-portal Example](https-portal-example/README.md)
 
 #### Plugins
 
-- [Docker + Uplinks Multi Registry](v4/multi-registry-uplink/README.md)
-- [Docker + Local Storage](v4/docker-local-storage-volume/readme.md)
-- [Docker + External Plugins](v4/docker-plugin-external/README.md)
+- [Docker + Uplinks Multi Registry](multi-registry-uplink/README.md)
+- [Docker + Local Storage](docker-local-storage-volume/readme.md)
+- [Docker + External Plugins](docker-plugin-external/README.md)
 
 #### Auth
 
-- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](v4/ldap-verdaccio/readme.md) by **@kopax**
+- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](ldap-verdaccio/readme.md) by **@kopax**
 - [Docker + Gitlab](gitlab-verdaccio/README.md)
 - [Docker + Active Directory](https://github.com/Mateus-Oli/verdaccio-ad-docker)
 
 #### Storage
 
-- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](v4/amazon-s3-docker-example/v4/README.md)
+- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](amazon-s3-docker-example/README.md)
 - [Docker + Minio](https://github.com/barolab/verdaccio-minio/tree/master/example)

docker-examples/v4/amazon-s3-docker-example/README.md

@@ -4,6 +4,9 @@ Verdaccio running with [Localstack](https://github.com/localstack/localstack) pr
 
 ## Usage
 
+> You might need to create bucket manually here
+> aws --endpoint-url=http://localhost:4572 s3 mb s3://localstack.s3.plugin.test
+
 ```
 docker-compose up --force-recreate --build --always-recreate-deps
 ```

docker-examples/v4/amazon-s3-docker-example/conf/config.yaml

@@ -13,7 +13,6 @@ uplinks:
 
 packages:
   '@*/*':
-    # scoped packages
     access: $all
     publish: $all
     proxy: npmjs

docker-examples/v4/amazon-s3-docker-example/docker-compose.yaml

@@ -14,7 +14,7 @@ services:
     links:
       - localstack-s3
   localstack-s3:
-    image: localstack/localstack:latest
+    image: localstack/localstack:0.10.9
     container_name: localstack-s3-1
     environment:
       - DEBUG=0

docker-examples/v4/amazon-s3-docker-example/localStack-resources/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:2.7
+FROM python:3.7-alpine
 
 ENV AWS_ACCESS_KEY_ID='[something]'
 ENV AWS_SECRET_ACCESS_KEY='[something]'
@@ -7,4 +7,4 @@ ENV AWS_S3_ENDPOINT='http://localstack-s3:4572'
 RUN pip install awscli
 COPY entry.sh /entry.sh
 RUN chmod +x /entry.sh
-ENTRYPOINT ["/entry.sh"]
+ENTRYPOINT ["/entry.sh"]

docker-examples/v4/amazon-s3-docker-example/localStack-resources/entry.sh

@@ -1,3 +1,3 @@
 #!/bin/bash
 
-aws --endpoint-url http://localstack-s3:4572 s3 mb s3://localstack.s3.plugin.test --region eu-west-2
+aws --endpoint-url http://localstack-s3:4572 s3 mb s3://localstack.s3.plugin.test --region eu-west-2

docker-examples/v4/docker-local-storage-volume/conf/config.yaml

@@ -7,7 +7,7 @@
 # see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
 #
 # Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
+# https://github.com/verdaccio/verdaccio/tree/master/packages/config/src/conf
 #
 
 # path to a directory with all packages

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/index.js

@@ -10,7 +10,7 @@ let _localMemory = require('./local-memory');
 let _localMemory2 = _interopRequireDefault(_localMemory);
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : {default: obj};
+  return obj && obj.__esModule ? obj : { default: obj };
 }
 
 exports.LocalMemory = _localMemory2.default;

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/local-memory.js

@@ -9,7 +9,7 @@ let _memoryHandler = require('./memory-handler');
 let _memoryHandler2 = _interopRequireDefault(_memoryHandler);
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : {default: obj};
+  return obj && obj.__esModule ? obj : { default: obj };
 }
 
 const DEFAULT_LIMIT = 1000;
@@ -43,8 +43,8 @@ class LocalMemory {
       cb(null);
     } else {
       this.logger.info(
-          {limit: this.limit},
-          'Storage memory has reached limit of @{limit} packages',
+        { limit: this.limit },
+        'Storage memory has reached limit of @{limit} packages'
       );
       cb(new Error('Storage memory has reached limit of limit packages'));
     }

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/memory-handler.js

@@ -16,7 +16,7 @@ let _memoryFs2 = _interopRequireDefault(_memoryFs);
 let _streams = require('@verdaccio/streams');
 
 function _interopRequireDefault(obj) {
-  return obj && obj.__esModule ? obj : {default: obj};
+  return obj && obj.__esModule ? obj : { default: obj };
 }
 
 // $FlowFixMe
@@ -111,8 +111,8 @@ class MemoryHandler {
     const uploadStream = new _streams.UploadTarball();
     const temporalName = `/${name}`;
 
-    process.nextTick(function() {
-      fs.exists(temporalName, function(exists) {
+    process.nextTick(function () {
+      fs.exists(temporalName, function (exists) {
         if (exists) {
           return uploadStream.emit('error', fSError(fileExist));
         }
@@ -122,7 +122,7 @@ class MemoryHandler {
 
           uploadStream.pipe(file);
 
-          uploadStream.done = function() {
+          uploadStream.done = function () {
             const onEnd = function onEnd() {
               uploadStream.emit('success');
             };
@@ -130,7 +130,7 @@ class MemoryHandler {
             uploadStream.on('end', onEnd);
           };
 
-          uploadStream.abort = function() {
+          uploadStream.abort = function () {
             uploadStream.emit('error', fSError('transmision aborted', 400));
             file.end();
           };
@@ -150,8 +150,8 @@ class MemoryHandler {
 
     const readTarballStream = new _streams.ReadTarball();
 
-    process.nextTick(function() {
-      fs.exists(pathName, function(exists) {
+    process.nextTick(function () {
+      fs.exists(pathName, function (exists) {
         if (!exists) {
           readTarballStream.emit('error', noPackageFoundError());
         } else {
@@ -164,7 +164,7 @@ class MemoryHandler {
             readTarballStream.emit('error', error);
           });
 
-          readTarballStream.abort = function() {
+          readTarballStream.abort = function () {
             readStream.destroy(fSError('read has been aborted', 400));
           };
         }

docker-examples/v4/ldap-verdaccio/conf/config.yaml

@@ -7,7 +7,7 @@
 # see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
 #
 # Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
+# https://github.com/verdaccio/verdaccio/tree/master/packages/config/src/conf
 #
 
 # path to a directory with all packages

docker-examples/v4/multi-registry-uplink/server1/conf/config.yaml

@@ -7,7 +7,7 @@
 # see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
 #
 # Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
+# https://github.com/verdaccio/verdaccio/tree/master/packages/config/src/conf
 #
 
 # path to a directory with all packages

docker-examples/v4/multi-registry-uplink/server2/conf/config.yaml

@@ -7,7 +7,7 @@
 # see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
 #
 # Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
+# https://github.com/verdaccio/verdaccio/tree/master/packages/config/src/conf
 #
 
 # path to a directory with all packages

docker-examples/v4/multi-registry-uplink/server3/conf/config.yaml

@@ -7,7 +7,7 @@
 # see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
 #
 # Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
+# https://github.com/verdaccio/verdaccio/tree/master/packages/config/src/conf
 #
 
 # path to a directory with all packages

docker-examples/v4/plugins/docker-extend/Dockerfile

@@ -4,7 +4,7 @@ USER root
 
 ENV NODE_ENV=production
 
-RUN npm i && npm install verdaccio-aws-s3-storage
+RUN npm i && npm -g install verdaccio-aws-s3-storage
 
 USER verdaccio
 

docker-examples/v4/reverse_proxy/nginx/relative_path/conf/v4/config.yaml

@@ -19,7 +19,7 @@ security:
       expiresIn: 7d
 
 ## IMPORTANT
-## This setup is required for relative path 
+## This setup is required for relative path
 url_prefix: /verdaccio/
 server:
   behindProxy: true

docker-examples/v4/reverse_proxy/nginx/relative_path/nginx/Dockerfile

@@ -1,2 +1,2 @@
-FROM nginx:1.14.2-alpine
+FROM nginx:1.21-alpine
 COPY nginx/default.conf /etc/nginx/conf.d/default.conf

docker-examples/v4/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx
+FROM nginx:1
 
 COPY cert.crt /etc/nginx/cert.crt
 COPY cert.key /etc/nginx/cert.key