migrate vitest

legacy storages support

rebase

.changeset/blue-paws-cheer.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/server': patch
-'@verdaccio/middleware': patch
-'@verdaccio/core': patch
----
-
-chore: request header constants

.changeset/breezy-geckos-search.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/tarball': patch
-'@verdaccio/core': patch
-'@verdaccio/utils': patch
-'@verdaccio/middleware': patch
-'@verdaccio/store': patch
----
-
-chore: move tarball utils to core

.changeset/clean-beds-wash.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/logger-commons': patch
----
-
-chore(logger): avoid message if level remains the same

.changeset/clever-bees-happen.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/proxy': patch
----
-
-chore: move agent_options to config

.changeset/config.json

@@ -12,22 +12,6 @@
       "@verdaccio/ui-theme"
     ]
   ],
-  "ignoredPackages": [
-    "@verdaccio/test-cli-commons",
-    "@verdaccio/e2e-cli-npm6",
-    "@verdaccio/e2e-cli-npm7",
-    "@verdaccio/e2e-cli-npm8",
-    "@verdaccio/e2e-cli-npm9",
-    "@verdaccio/e2e-cli-npm10",
-    "@verdaccio/e2e-cli-npm-common",
-    "@verdaccio/e2e-cli-yarn1",
-    "@verdaccio/e2e-cli-yarn2",
-    "@verdaccio/e2e-cli-yarn3",
-    "@verdaccio/e2e-cli-yarn4",
-    "@verdaccio/e2e-cli-pnpm8",
-    "@verdaccio/e2e-cli-pnpm9",
-    "@verdaccio/e2e-cli-pnpm10"
-  ],
   "access": "public",
   "baseBranch": "master",
   "updateInternalDependencies": "patch"

.changeset/cool-seals-watch.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/loaders': patch
-'@verdaccio/config': patch
----
-
-chore(loader): fix types for plugin options

.changeset/curvy-rockets-camp.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/core': patch
----
-
-chore(core): typing, naming, and docs of parameters

.changeset/cyan-snakes-kiss.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/web': patch
----
-
-chore(web): fix syntax of test files

.changeset/early-eyes-float.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/types': patch
----
-
-chore: add `error` to log level enum

.changeset/fifty-falcons-design.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-fix(middleware): allow content-type with charset

.changeset/gentle-stingrays-repeat.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/local-storage': patch
-'@verdaccio/store': patch
----
-
-fix: code scan issues

.changeset/gold-squids-watch.md

@@ -1,8 +0,0 @@
----
-'@verdaccio/server': patch
-'@verdaccio/store': patch
-'@verdaccio/auth': patch
-'@verdaccio/web': patch
----
-
-chore: add info to log when audit, htpasswd, theme are used

.changeset/green-eagles-boil.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
----
-
-fix: E409 username is already registered (adduser)

.changeset/healthy-ducks-drive.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/config': patch
----
-
-chore: fix typedocs warnings

.changeset/healthy-zoos-lie.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/store': patch
----
-
-chore: add info to log when local storage is used

.changeset/hip-eggs-serve.md

@@ -1,5 +0,0 @@
----
-'verdaccio-htpasswd': patch
----
-
-chore: add debug code to htpasswd package

.changeset/hot-crews-live.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/core': patch
-'verdaccio': patch
-'@verdaccio/store': patch
-'@verdaccio/api': patch
----
-
-fix: unpublish a package on storage package

.changeset/long-singers-drive.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-chore(ui): vitest follow-ups

.changeset/lucky-crabs-enjoy.md

@@ -1,8 +0,0 @@
----
-'@verdaccio/api': patch
-'@verdaccio/core': patch
-'@verdaccio/middleware': patch
-'@verdaccio/proxy': patch
----
-
-fix(middleware): error 404 when getting scoped tarballs

.changeset/nine-countries-remember.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-fix(middleware): encoding of scope package name

.changeset/pre.json

@@ -55,48 +55,7 @@
     "@verdaccio/utils": "7.0.0",
     "verdaccio": "7.0.0",
     "@verdaccio/web": "7.0.0",
-    "@verdaccio/website": "6.0.0",
-    "@verdaccio/e2e-cli-npm-common": "1.0.0",
-    "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
-    "@verdaccio/e2e-cli-pnpm10": "1.0.0"
+    "@verdaccio/website": "6.0.0"
   },
-  "changesets": [
-    "angry-doors-tan",
-    "beige-lions-type",
-    "blue-paws-cheer",
-    "breezy-geckos-search",
-    "chatty-apricots-report",
-    "clean-beds-wash",
-    "clever-bees-happen",
-    "cool-seals-watch",
-    "curvy-rockets-camp",
-    "cyan-snakes-kiss",
-    "early-eyes-float",
-    "fifty-falcons-design",
-    "gentle-stingrays-repeat",
-    "gold-squids-watch",
-    "green-eagles-boil",
-    "healthy-ducks-drive",
-    "healthy-zoos-lie",
-    "hip-eggs-serve",
-    "hot-crews-live",
-    "long-eyes-drum",
-    "long-singers-drive",
-    "lucky-crabs-enjoy",
-    "nine-countries-remember",
-    "quick-seas-deny",
-    "rotten-melons-notice",
-    "rude-birds-design",
-    "rude-socks-walk",
-    "serious-apes-rule",
-    "silent-bags-listen",
-    "slow-cars-guess",
-    "smooth-games-share",
-    "stupid-camels-build",
-    "sweet-crabs-deliver",
-    "thirty-comics-trade",
-    "tricky-impalas-shake",
-    "violet-boxes-float",
-    "weak-cherries-serve"
-  ]
+  "changesets": ["angry-doors-tan", "beige-lions-type", "chatty-apricots-report", "long-eyes-drum"]
 }

.changeset/quick-seas-deny.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/loaders': minor
----
-
-chore: remove logger as dependency

.changeset/rotten-melons-notice.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-chore(middleware): fix syntax of test files

.changeset/rude-birds-design.md

@@ -1,5 +0,0 @@
----
-'verdaccio': patch
----
-
-chore: encode parts of URL

.changeset/rude-socks-walk.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/store': patch
----
-
-feat: keep_readmes option when publishing packages

.changeset/serious-apes-rule.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-chore(ui): replace react-json-view

.changeset/silent-bags-listen.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/logger-commons': patch
-'@verdaccio/local-storage': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/core': patch
-'verdaccio': patch
----
-
-chore(tests): temp folder naming

.changeset/slow-cars-guess.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': minor
----
-
-support packages with multiple module types

.changeset/smooth-games-share.md

@@ -1,11 +0,0 @@
----
-'@verdaccio/server': patch
-'verdaccio-audit': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/middleware': patch
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
-'@verdaccio/web': patch
----
-
-fix: crashes with path-to-regexp v0.1.12 express

.changeset/stupid-camels-build.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/api': patch
----
-
-chore(api): fix void return for some tests

.changeset/sweet-crabs-deliver.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-chore(ui): typing for Theme

.changeset/thirty-comics-trade.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/local-storage': patch
----
-
-chore: local storage debug messages

.changeset/tricky-impalas-shake.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/local-storage': patch
-'@verdaccio/store': patch
----
-
-chore: tweak error logging messages

.changeset/violet-boxes-float.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/tarball': patch
----
-
-fix(api): add logging when requesting tarball

.changeset/weak-cherries-serve.md

@@ -1,18 +0,0 @@
----
-'@verdaccio/logger-commons': patch
-'@verdaccio/file-locking': patch
-'@verdaccio/ui-theme': patch
-'@verdaccio/search-indexer': patch
-'@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/middleware': patch
-'verdaccio': patch
-'@verdaccio/node-api': patch
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
-'@verdaccio/cli': patch
-'@verdaccio/web': patch
----
-
-chore: auth package requires logger as parameter

.eslintignore

@@ -14,6 +14,10 @@ test/functional/store/*
 docker-examples/**/lib/**/*.js
 test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
 yarn.js
+
+#  used for unit tests
+packages/store/test/fixtures/plugins/**/*
+
 # storybook
 packages/ui-components/storybook-static
 dist.js

.github/actions/build-app/action.yml

@@ -1,22 +0,0 @@
-name: 'Build app'
-description: 'build verdaccio application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  node-version:
-    description: 'Node.js version to use'
-    required: true
-
-runs:
-  using: composite
-  steps:
-    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
-      uses: ./.github/actions/install-app-node
-      with:
-        node-version: ${{ inputs.node_version }}
-    - name: build
-      run: pnpm build
-      shell: bash

.github/actions/cache-packages/action.yml

@@ -1,12 +0,0 @@
-name: 'Cache packages'
-description: 'get or set cache packages'
-
-runs:
-  using: composite
-  steps:
-    - name: Cache Packages
-      id: cache-packages
-      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
-      with:
-        path: ./packages/
-        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -1,15 +0,0 @@
-name: 'Cache build'
-description: 'get or set cache build'
-
-runs:
-  using: composite
-  steps:
-    - name: Cache .pnpm-store
-      id: cache-npm
-      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
-      with:
-        path: ~/.pnpm-store
-        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
-        restore-keys: |
-          pnpm-
-

.github/actions/install-app-node/action.yml

@@ -1,50 +0,0 @@
-name: 'Install app with Node specific version'
-description: 'install application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  reporter:
-    description: 'Reporter for pnpm'
-    required: false
-    default: 'silent'
-  loglevel:
-    description: 'Log level for pnpm'
-    required: false
-    default: 'error'
-  node-version:
-    description: 'Node.js version to use'
-    required: true
-
-runs:
-  using: composite
-  steps:
-    - name: Use Node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
-      with:
-        node-version: ${{ inputs.node-version }}
-    - name: Install pnpm
-      run: |
-        corepack enable
-        corepack prepare
-      shell: bash
-    - name: set store
-      run: |
-        if [ ! -d "$HOME/.pnpm-store" ]; then
-          mkdir -p $HOME/.pnpm-store
-          pnpm config set store-dir $HOME/.pnpm-store
-        else
-          echo "Store directory already exists. Skipping configuration."
-        fi
-      shell: bash
-    - name: Restore cache pnpm store
-      uses: ./.github/actions/cache-store
-    - name: Install
-      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }} --loglevel=${{ inputs.loglevel }}
-      shell: bash
-    - name: Save cache pnpm store
-      if: steps.cache-npm.outputs.cache-hit == 'false'
-      uses: ./.github/actions/cache-store
-

.github/actions/install-app/action.yml

@@ -1,39 +0,0 @@
-name: 'Install app'
-description: 'install application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  reporter:
-    description: 'Reporter for pnpm'
-    required: false
-    default: 'silent'
-
-runs:
-  using: composite
-  steps:
-    - name: Use Node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
-      with:
-        node-version-file: '.nvmrc'
-    - name: Install pnpm
-      run: |
-        corepack enable
-        corepack prepare
-      shell: bash
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store
-      shell: bash
-    - name: Restore cache pnpm store
-      uses: ./.github/actions/cache-store
-    - name: Install
-      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }}
-      shell: bash
-    - name: Save cache pnpm store
-      if: steps.cache-npm.outputs.cache-hit == 'false'
-      uses: ./.github/actions/cache-store
-

.github/workflows/changesets.yml

@@ -20,12 +20,12 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
 
       - name: setup node.js
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version-file: '.nvmrc'
         env:

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ permissions:
   contents: read
 concurrency:
   group: ci-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: true  
 
 jobs:
   prepare:
@@ -24,30 +24,57 @@ jobs:
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:6
+        image: verdaccio/verdaccio:5
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
-          options: >-
-            --health-cmd="curl -f http://0.0.0.0:4873/-/ping || exit 1"
-            --health-interval=10s   
-            --health-timeout=20s    
-            --health-retries=6
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install  --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-
   lint:
     runs-on: ubuntu-latest
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-            reporter: 'default'
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm lint
   format:
@@ -55,11 +82,24 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          reporter: 'default'
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm format:check
   test:
@@ -68,15 +108,30 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [18, 20, 21, 22, 23]
+        node_version: [18, 20, 21, 22]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: ${{ matrix.node_version }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts --registry http://localhost:4873
+      - name: build
+        run: pnpm build
       - name: Test
         run: pnpm test
   sync-translations:
@@ -85,15 +140,15 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
           corepack enable
           corepack install
-      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -1,10 +1,6 @@
-name: 'CodeQL Analysis'
+name: 'Code scanning - action'
 
 on:
-  push:
-    paths:
-      - .github/workflows/codeql-analysis.yml
-      - 'packages/**'
   pull_request:
     paths:
       - .github/workflows/codeql-analysis.yml
@@ -17,7 +13,7 @@ permissions:
 
 concurrency:
   group: code-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: true    
 
 jobs:
   CodeQL-Build:
@@ -29,20 +25,20 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
           fetch-depth: 2
 
+      # If this run was triggered by a pull request event, then checkout
+      # the head of the pull request instead of the merge commit.
+      - run: git checkout HEAD^2
+        if: ${{ github.event_name == 'pull_request' }}
+
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
-        with:
-          config: |
-            paths-ignore:
-              - packages/config/test/partials/config/js/invalid.js
-              - packages/middleware/test/static/js
+        uses: github/codeql-action/init@be8b74c09c1778bcdbea38e1a45efea2cb73e18c # v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -50,7 +46,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/autobuild@be8b74c09c1778bcdbea38e1a45efea2cb73e18c # v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +60,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/analyze@be8b74c09c1778bcdbea38e1a45efea2cb73e18c # v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -20,13 +20,13 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -18,13 +18,13 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-publish.yml

@@ -24,8 +24,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/e2e-ci.yml

@@ -18,24 +18,72 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            pnpm-
   build:
     needs: [prepare]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node 16
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: ${{ matrix.node_version }}
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm recursive install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
       - name: Cache packages
-        uses: ./.github/actions/cache-packages
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        id: cache-packages
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            packages-
+      # - name: Cache test
+      #   uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   id: cache-test
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      #     restore-keys: |
+      #       test-
   e2e-cli-npm:
     needs: [prepare, build]
     strategy:
-      fail-fast: false
+      fail-fast: false      
       matrix:
         pkg:
           [
@@ -45,19 +93,37 @@ jobs:
             npm9,
             npm10
           ]
-        node: [18, 23]
+        node: [20, 21]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
-        uses: ./.github/actions/install-app-node
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: ${{ inputs.node_version }}
-          reporter: 'default'
-          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run: pnpm --filter @verdaccio/test-cli-commons build
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
 
@@ -70,21 +136,38 @@ jobs:
           [
             pnpm8,
             pnpm9,
-            pnpm10,
           ]
-        node: [18, 23]
+        node: [20, 21]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
-        uses: ./.github/actions/install-app-node
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: ${{ inputs.node_version }}
-          reporter: 'default'
-          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --loglevel debug --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run: pnpm --filter @verdaccio/test-cli-commons build
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
   e2e-cli-yarn:
@@ -93,25 +176,43 @@ jobs:
       fail-fast: false
       matrix:
         pkg:
-          [
+          [           
             yarn1,
             yarn2,
             yarn3,
             yarn4
           ]
-        node: [18, 23]
+        node: [20, 21]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
-        uses: ./.github/actions/install-app-node
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: ${{ inputs.node_version }}
-          reporter: 'default'
-          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run: pnpm --filter @verdaccio/test-cli-commons build
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
-
+      

.github/workflows/e2e-ui.yml

@@ -1,32 +1,39 @@
 name: E2E UI
 
 on: [pull_request]
-
 permissions:
   contents: read
 concurrency:
   group: e2e-ui-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: true  
 jobs:
   test:
     runs-on: ubuntu-latest
     name: UI Test E2E
     services:
       verdaccio:
-        image: verdaccio/verdaccio:6
+        image: verdaccio/verdaccio:5
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node 20
-        uses: ./.github/actions/build-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: 20
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare
+      - name: Install
+        run: pnpm install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/plugin-generator-e2e.yaml

@@ -3,26 +3,38 @@ name: E2E Generator Verdaccio Plugin
 on:
   pull_request:
   workflow_dispatch:
-#  push:
-#    branches:
-#      - 'master'
+  push:
+    branches:
+      - 'master'
 
 concurrency:
   group: generator-plugin-${{ github.ref }}
-  cancel-in-progress: true
+  cancel-in-progress: true  
 
 jobs:
   e2e-plugin-generator:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22, 23]
+        node-version: [18,20, 21]
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: ${{ matrix.node_version }}
+          node-version: ${{ matrix.node-version }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: install
+        run: pnpm install
+      - name: build
+        run: pnpm build
       - name: install verdaccio
         run: npm install -g verdaccio@5
       - name: Start server
@@ -37,4 +49,4 @@ jobs:
         run: npm install -g yo@4 --loglevel=info
       - name: install generator
         run: npm install -g generator-verdaccio-plugin --loglevel=info --registry http://localhost:4873
-# Future: add a test to verify the plugin is working with prompt
+# Future: add a test to verify the plugin is working with prompt 

.github/workflows/shared-docker-publish.yml

@@ -23,8 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/static-data.yml

@@ -3,7 +3,6 @@ name: static data
 
 on:
   workflow_dispatch:
-#  pull_request:
   schedule:
     # twice peer week
     - cron: '0 0 * * 1,4'
@@ -21,14 +20,17 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
           fetch-depth: 0
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          reporter: 'default'
+          node-version: 18.x
+      - name: install pnpm
+        run: sudo npm i pnpm@latest-8 -g
+      - name: install dependencies
+        run: pnpm install
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/crowdin-translations build
       - name: update contributors
@@ -40,7 +42,7 @@ jobs:
       - name: update translations
         run: pnpm run translations
         env:
-          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}          
       - name: format
         run: pnpm format
       - name: Commit & Push changes

.github/workflows/test-docker-build.yml

@@ -6,7 +6,7 @@ jobs:
     name: Test Docker Build
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Build
       run: docker build .
       env:

.github/workflows/test-publish-package.yml

@@ -6,7 +6,7 @@ jobs:
     name: Test Verdaccio Publish
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Publish
       uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
       with:

.github/workflows/ui-components.yml

@@ -1,10 +1,9 @@
 name: UI Components
 
 on:
-#  pull_request:
   workflow_dispatch:
-#  schedule:
-#    - cron: '0 0 * * *'
+  schedule:
+    - cron: '0 0 * * *' 
 
 permissions:
   contents: read  #  to fetch code (actions/checkout)
@@ -24,17 +23,29 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
-      - name: Install dependencies with a custom registry
-        uses: ./.github/actions/install-app
+      - name: Use Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache pnpm modules
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        env:
+          cache-name: cache-pnpm-modules
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
 
       - name: Install pnpm
         run: |
           corepack enable
-            corepack prepare
+            corepack prepare --activate pnpm@8.9.0
       - name: Install
-        run: pnpm install
+        run: pnpm install  
       - name: Build storybook
         run: pnpm ui:storybook:build
       - name: Copy public content

.github/workflows/website.yml

@@ -2,6 +2,7 @@ name: Verdaccio Website CI
 
 on:
   workflow_dispatch:
+
 permissions:
   contents: read  #  to fetch code (actions/checkout)
 
@@ -21,7 +22,7 @@ jobs:
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:6
+        image: verdaccio/verdaccio:5
         ports:
           - 4873:4873
         env:
@@ -29,15 +30,35 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node 20
-        uses: ./.github/actions/build-app
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+
+      - name: Node
+        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
-          node-version: 20
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install  --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-
+      - name: Build
+        run: pnpm build
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/crowdin-translations build
       - name: Cache Docusaurus Build
-        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -44,10 +44,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -80,10 +80,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-audit-workflow.yml

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 9'
@@ -42,10 +42,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 10'

.github/workflows/x-e2e-jest-workflow.yml

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -38,10 +38,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -72,10 +72,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -105,10 +105,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -138,10 +138,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'
@@ -171,10 +171,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest pnpm'
@@ -204,10 +204,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest pnpm'

.github/workflows/x-release-snapshot.yml

@@ -6,9 +6,9 @@ jobs:
     name: Release Snapshot
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Use Node (latest)
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
       with:
         node-version-file: '.nvmrc'
     - name: Install
@@ -25,4 +25,4 @@ jobs:
       run: sh scripts/publish-prerelease.sh
       env:
         REGISTRY_AUTH_TOKEN: ${{ secrets.VERDACCIO_REGISTRY_TOKEN_CANARY }}
-        REGISTRY_URL: rg.verdaccio.org
+        REGISTRY_URL: registry.verdaccio.org

.github/workflows/x-release.yml

@@ -6,9 +6,9 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Use Node (latest)
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/x-smok-test-docker.yml

@@ -16,7 +16,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/x-smok-test-module.yml

@@ -10,9 +10,9 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0    
       - name: Use Node (latest)
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/yarn-ci-lint.yml

@@ -6,9 +6,9 @@ jobs:
     name: Node Lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Use Node 
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/yarn-ci.yml

@@ -9,9 +9,9 @@ jobs:
     name: Node ${{ inputs.node_version }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: Use Node ${{ inputs.node_version }}
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
       with:
         node-version: ${{ inputs.node_version }}
     - name: Install

.npmignore

@@ -29,6 +29,10 @@ coverage/
 test-storage*
 test/
 __mocks__/
+jestEnvironment.js
+test/jest.e2e.config.js
+test/jest.config.functional.js
+jest.config.js
 
 # misc
 contrib/

.npmrc

@@ -1 +1,2 @@
+always-auth = true
 fetch-retries="10"

README.md

@@ -6,11 +6,12 @@
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version Next (Development Branch)
+# Version Next (Development branch)
 
-> Looking for Verdaccio version 5 or 6? Version 6 is the latest version and successor to version 5. Version 6 requires Node.js 18 or higher and is maintained in the `6.x` branch.
-
-> The plugins for versions 5 and 6 are located at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository. Plugins for the `next-8` version are hosted in this project under the `./packages/plugins` folder.
+> Looking for Verdaccio 6 version? Check the branch `6.x`
+> The plugins for the `v6.x` that are hosted within this organization are located
+> at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository, while for the `next` version
+> are hosted on this project `./packages/plugins`.
 
 > Note that contributing guidelines might be different based on the branch.
 
@@ -35,10 +36,6 @@ Google Cloud Storage** or create your own plugin.
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 [![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
-## Versions
-
-You can find more details about the different versions of Verdaccio, minimum requirements, as well as links to associated npm packages and docker images in the [version history](VERSIONS.md).
-
 ## Install
 
 > Node.js v18 as minimum version required
@@ -46,19 +43,19 @@ You can find more details about the different versions of Verdaccio, minimum req
 Install with npm:
 
 ```bash
-npm install -g verdaccio@next-8
+npm install -g verdaccio@next
 ```
 
 With `yarn`
 
 ```bash
-yarn global add verdaccio@next-8
+yarn global add verdaccio@next
 ```
 
 With `pnpm`
 
 ```bash
-pnpm i -g verdaccio@next-8
+pnpm i -g verdaccio@next
 ```
 
 or
@@ -97,28 +94,18 @@ Our goal is to give you the confidence to use your preferred package manager wit
 
 ### Commands
 
-| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | pnpm8 | pnpm9 | pnpm10 | yarn1 | yarn2 | yarn3 | yarn4 |
-| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ------ | ----- | ----- | ----- | ----- |
-| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| unpublish | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ❌     | ❌    | ❌    | ❌    | ❌    |
-| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ❌    |
-| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ❌    | ❌    | ❌    |
-
-> notes:
->
-> - yarn search cmd exist in _modern_ but, it do not uses the search registry endpoint.
-> - yarn _modern_ has two info commands, the one used here is `yarn npm info`
-
-❌ = no tested
-✅ = tested
-⛔ = no supported
+| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | pnpm8 | pnpm9 (beta) | yarn1 | yarn2 | yarn3 | yarn4 |
+| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ------------ | ----- | ----- | ----- | ----- |
+| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ✅    | ✅    | ✅    | ✅    |
+| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ✅    | ✅    | ✅    | ✅    |
+| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ✅    | ✅    | ✅    | ❌    |
+| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ✅    | ✅    | ✅    | ✅    |
+| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ⛔    | ⛔    | ⛔    | ⛔    |
+| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ⛔    | ⛔    | ⛔    | ⛔    |
+| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ⛔    | ⛔    | ⛔    | ⛔    |
+| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ⛔    | ⛔    | ⛔    | ⛔    |
+| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ⛔    | ⛔    | ⛔    | ⛔    |
+| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅           | ✅    | ❌    | ❌    | ❌    |
 
 ## Donations
 

SECURITY.md

@@ -2,7 +2,15 @@
 
 ## Supported versions
 
-You can find details about the supported versions of Verdaccio in the [version history](https://github.com/verdaccio/verdaccio/blob/master/VERSIONS.md).
+The following table describes the versions of this project that are currently supported with security updates:
+
+| Version   | Supported          |
+| --------- | ------------------ |
+| 2.x       | :x:                |
+| 3.x       | :x:                |
+| 4.x       | :x:                |
+| 5.x       | :white_check_mark: |
+| 6.x alpha | :x:                |
 
 ## Responsible disclosure security policy
 

VERSIONS.md

@@ -1,23 +0,0 @@
-# Versions
-
-The following table describes the versions of this project:
-
-| Version          | Supported          | Minimum Node.js | Branch | Npm Tag          | Docker Images           | Helm Charts |
-| ---------------- | ------------------ | --------------- | ------ | ---------------- | ----------------------- | ----------- |
-| 4.x              | :x: (deprecated)   | 10              | 4.x    | latest-4         | 4, 4.x, 4.x.x, 4.x-next | 3.x         |
-| 5.x previous     | :x: (deprecated)   | 14              | 5.x    | latest-5         | 5, 5.x, 5.x.x, 5.x-next | 4.0 - 4.18  |
-| 6.x current      | :white_check_mark: | 18              | 6.x    | latest-6, latest | 6, 6.x, 6.x.x, 6.x-next | 4.19 - ...  |
-| 7.x next         | :x:                | 18              | 7.x    | next-7           | 7.x-next                | n/a         |
-| 8.x experimental | :x:                | 18              | master | next-8           | nightly-master          | n/a         |
-
-## Npm Registry
-
-The official Verdaccio npm packages are located at https://www.npmjs.com/package/verdaccio.
-
-## Docker Hub
-
-The official Verdaccio Docker Images are found at https://hub.docker.com/r/verdaccio/verdaccio.
-
-## Helms Charts
-
-The official Verdaccio Helm Charts are found at https://artifacthub.io/packages/helm/verdaccio/verdaccio.

e2e/cli/cli-commons/package.json

@@ -2,21 +2,25 @@
   "private": true,
   "name": "@verdaccio/test-cli-commons",
   "version": "2.0.0-next-8.0",
-  "main": "src/index.ts",
+  "main": "./build/index.js",
+  "types": "./build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.7",
-    "@verdaccio/core": "workspace:8.0.0-next-8.7",
-    "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "debug": "4.4.0",
+    "@verdaccio/config": "workspace:8.0.0-next-8.2",
+    "@verdaccio/core": "workspace:8.0.0-next-8.2",
+    "@verdaccio/types": "workspace:13.0.0-next-8.1",
+    "debug": "4.3.7",
     "fs-extra": "11.2.0",
     "get-port": "5.1.1",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.7"
+    "verdaccio": "workspace:8.0.0-next-8.2"
   },
   "scripts": {
-    "test": "echo no test",
-    "build": "echo no build"
+    "test": "jest",
+    "type-check": "tsc --noEmit -p tsconfig.build.json",
+    "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
+    "build:js": "babel src/ --out-dir build/ --copy-files --extensions \".ts,.tsx\" --source-maps",
+    "build": "pnpm run build:js && pnpm run build:types"
   }
 }

e2e/cli/cli-commons/src/npm-utils.ts

@@ -1,31 +1,22 @@
-import buildDebug from 'debug';
-
 import { addRegistry } from './utils';
 
-const debug = buildDebug('verdaccio:e2e:npm-utils');
 export async function bumbUp(cmd, tempFolder, registry) {
   await cmd({ cwd: tempFolder }, 'version', 'minor', ...addRegistry(registry.getRegistryUrl()));
 }
 
-export async function bumpUpPackage(cmd, tempFolder, pkgName, registry, arg: string[] = []) {
-  debug('bump up package %o', pkgName);
-  await cmd(
+export async function publish(cmd, tempFolder, pkgName, registry, arg: string[] = []) {
+  const resp = await cmd(
     { cwd: tempFolder },
-    'version',
+    'publish',
     ...arg,
-    '--no--git-tag-version',
-    '--loglevel=info',
+    '--json',
     ...addRegistry(registry.getRegistryUrl())
   );
-}
-
-export async function publish(cmd, tempFolder, pkgName, registry, arg: string[] = []) {
-  debug('publishing %o', pkgName);
-  await cmd({ cwd: tempFolder }, 'publish', ...arg, ...addRegistry(registry.getRegistryUrl()));
+  const parsedBody = JSON.parse(resp.stdout as string);
+  expect(parsedBody.name).toEqual(pkgName);
 }
 
 export async function getInfoVersions(cmd, pkgName, registry) {
-  debug('getting info %o', pkgName);
   const infoResp = await cmd(
     {},
     'info',
@@ -34,6 +25,5 @@ export async function getInfoVersions(cmd, pkgName, registry) {
     ...addRegistry(registry.getRegistryUrl())
   );
   const infoBody = JSON.parse(infoResp.stdout as string);
-  debug('info %o', infoBody);
   return infoBody;
 }

e2e/cli/cli-commons/src/process.ts

@@ -4,7 +4,6 @@ import buildDebug from 'debug';
 import { createInterface } from 'readline';
 
 const debug = buildDebug('verdaccio:e2e:process');
-const debugRead = buildDebug('verdaccio:e2e:line');
 
 export type ExecOutput = {
   stdout: string;
@@ -12,7 +11,7 @@ export type ExecOutput = {
 };
 
 export async function exec(options: SpawnOptions, cmd, args): Promise<ExecOutput> {
-  debug('start _exec %o %o %o', options, cmd, args ? args.join(' ') : '');
+  debug('start _exec %o %o %o', options, cmd, args);
   let stdout = '';
   let stderr;
   const env = options.env;
@@ -33,17 +32,9 @@ export async function exec(options: SpawnOptions, cmd, args): Promise<ExecOutput
 
   const childProcess = spawn(cmd, args, spawnOptions);
   if (childProcess.stdout) {
-    childProcess.stdout.on('data', (data) => {
-      debugRead('data %o', data.toString());
-    });
-    const rl = createInterface({
-      input: childProcess.stdout,
-      output: process.stdout,
-      terminal: false,
-    });
+    const rl = createInterface({ input: childProcess.stdout });
 
     rl.on('line', function (line) {
-      debugRead('line %o', line);
       stdout += line;
     });
   }
@@ -51,7 +42,6 @@ export async function exec(options: SpawnOptions, cmd, args): Promise<ExecOutput
   const err = new Error(`Running "${cmd} ${args.join(' ')}" returned error code `);
   return new Promise((resolve, reject) => {
     childProcess.on('exit', (error) => {
-      debugRead('exit %o', error);
       if (!error) {
         resolve({ stdout, stderr });
       } else {

e2e/cli/cli-commons/src/registry.ts

@@ -17,7 +17,7 @@ export type Setup = {
 const log =
   process.env.NODE_ENV === 'production'
     ? { type: 'stdout', format: 'json', level: 'warn' }
-    : { type: 'stdout', format: 'pretty', level: 'debug' };
+    : { type: 'stdout', format: 'pretty', level: 'info' };
 
 const defaultConfig = {
   ...getDefaultConfig(),

e2e/cli/cli-commons/src/utils.ts

@@ -1,12 +1,9 @@
-import buildDebug from 'debug';
 import fs from 'fs-extra';
 import { cp, readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 
 import { fileUtils } from '@verdaccio/core';
 
-const debug = buildDebug('verdaccio:e2e:utils');
-
 export function createProject(projectName: string) {
   const tempRootFolder = global.__namespace.getItem('dir-suite-root');
   const verdaccioInstall = join(tempRootFolder, projectName);
@@ -16,14 +13,12 @@ export function createProject(projectName: string) {
 }
 export function copyConfigFile(rootFolder, configTemplate): string {
   const configPath = join(rootFolder, 'config.yaml');
-  debug('copying config file %o', configPath);
   copyTo(join(__dirname, configTemplate), configPath);
 
   return configPath;
 }
 
 export async function createTempFolder(prefix: string) {
-  debug('creating temp folder %o', prefix);
   return fileUtils.createTempFolder(prefix);
 }
 
@@ -36,12 +31,10 @@ export function cleanUpTemp(tmpFolder) {
 }
 
 export function addRegistry(registryUrl) {
-  debug('adding registry %o', registryUrl);
   return ['--registry', registryUrl];
 }
 
 export function addNpmPrefix(installFolder) {
-  debug('adding prefix %o', installFolder);
   return ['--prefix', installFolder];
 }
 
@@ -57,7 +50,6 @@ export async function prepareYarnModernProject(
   registryDomain: string,
   yarnPath: string
 ) {
-  debug('preparing yarn project %o', projectName);
   const tempFolder = await createTempFolder(projectName);
   // FUTURE: native copy folder instead fs-extra
   fs.copySync(templatePath, tempFolder);
@@ -75,7 +67,6 @@ export const getPackageJSON = (
   dependencies = {},
   devDependencies = {}
 ) => {
-  debug('creating package.json %o', packageName);
   const json = {
     name: packageName,
     version,
@@ -112,7 +103,6 @@ export async function prepareGenericEmptyProject(
   dependencies: any = {},
   devDependencies: any = {}
 ) {
-  debug('preparing generic project %o', packageName);
   const getNPMrc = (port, token, registry) => `//localhost:${port}/:_authToken=${token}
   registry=${registry}`;
   const tempFolder = await createTempFolder('temp-folder');

e2e/cli/e2e-npm-commons/.babelrc

@@ -1,3 +0,0 @@
-{
-  "extends": "../../../.babelrc"
-}

e2e/cli/e2e-npm-commons/.eslintrc

@@ -1,7 +0,0 @@
-{
-  "rules": {
-    "no-console": 0,
-    "@typescript-eslint/no-var-requires": 0,
-    "@typescript-eslint/explicit-member-accessibility": 0
-  }
-}

e2e/cli/e2e-npm-commons/audit.ts

@@ -1,45 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
-
-export function runAudit(npm) {
-  describe('audit a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['verdaccio-memory', '@verdaccio/cli']])(
-      'should audit a package %s',
-      async (pkgName) => {
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0-patch',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl(),
-          { jquery: '3.6.1' }
-        );
-        // install is required to create package lock file
-        await npm({ cwd: tempFolder }, 'install', ...addRegistry(registry.getRegistryUrl()));
-        const resp = await npm(
-          { cwd: tempFolder },
-          'audit',
-          '--json',
-          ...addRegistry(registry.getRegistryUrl())
-        );
-        const parsedBody = JSON.parse(resp.stdout as string);
-        expect(parsedBody.metadata).toBeDefined();
-        expect(parsedBody.auditReportVersion).toBeDefined();
-        expect(parsedBody.vulnerabilities).toBeDefined();
-      }
-    );
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/deprecate.ts

@@ -1,119 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import {
-  addRegistry,
-  initialSetup,
-  npmUtils,
-  prepareGenericEmptyProject,
-} from '@verdaccio/test-cli-commons';
-
-export function runDeprecate(npm) {
-  describe('deprecate a package', () => {
-    let registry;
-
-    async function deprecate(tempFolder, packageVersion, registry, message) {
-      await npm(
-        { cwd: tempFolder },
-        'deprecate',
-        packageVersion,
-        message,
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-    }
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['@verdaccio/deprecated-1']])(
-      'should deprecate a single package %s',
-      async (pkgName) => {
-        const message = 'some message';
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // deprecate one version
-        await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
-        // verify is deprecated
-        const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
-        expect(infoBody.name).toEqual(pkgName);
-        expect(infoBody.deprecated).toEqual(message);
-      }
-    );
-
-    test.each([['@verdaccio/deprecated-2']])(
-      'should un-deprecate a package %s',
-      async (pkgName) => {
-        const message = 'some message';
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // deprecate one version
-        await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
-        // verify is deprecated
-        const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
-        expect(infoBody.deprecated).toEqual(message);
-        // empty string is same as undeprecate
-        await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, '');
-        const infoBody2 = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
-        expect(infoBody2.deprecated).toBeUndefined();
-      }
-    );
-
-    test.each([['@verdaccio/deprecated-3']])(
-      'should deprecate a multiple packages %s',
-      async (pkgName) => {
-        const message = 'some message';
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        // publish 1.0.0
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // publish 1.1.0
-        await npmUtils.bumbUp(npm, tempFolder, registry);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // publish 1.2.0
-        await npmUtils.bumbUp(npm, tempFolder, registry);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // publish 1.3.0
-        await npmUtils.bumbUp(npm, tempFolder, registry);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        // // deprecate all version
-        await deprecate(tempFolder, pkgName, registry, message);
-        // verify is deprecated
-        for (let v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {
-          const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@${v}`, registry);
-          expect(infoResp.deprecated).toEqual(message);
-        }
-        // publish normal version
-        // publish 1.4.0
-        await npmUtils.bumbUp(npm, tempFolder, registry);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@1.4.0`, registry);
-        // must be not deprecated
-        expect(infoResp.deprecated).toBeUndefined();
-      }
-    );
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/dist-tags.ts

@@ -1,92 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import {
-  addRegistry,
-  initialSetup,
-  npmUtils,
-  prepareGenericEmptyProject,
-} from '@verdaccio/test-cli-commons';
-
-export function runDistTag(npm) {
-  describe('dist-tag a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['@foo/foo', 'foo']])('should list dist-tags for %s', async (pkgName) => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      await npmUtils.bumbUp(npm, tempFolder, registry);
-      await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
-      const resp2 = await npm(
-        { cwd: tempFolder },
-        'dist-tag',
-        'ls',
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
-    });
-
-    test.each([['@verdaccio/bar']])('should remove tag with dist-tags for %s', async (pkgName) => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      await npmUtils.bumbUp(npm, tempFolder, registry);
-      await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
-      const resp2 = await npm(
-        { cwd: tempFolder },
-        'dist-tag',
-        'rm',
-        `${pkgName}@1.1.0`,
-        'beta',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp2.stdout).toEqual('-beta: @verdaccio/bar@1.1.0');
-    });
-
-    test.each([['@verdaccio/five']])(
-      'should add tag to package and version with dist-tags for %s',
-      async (pkgName) => {
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumbUp(npm, tempFolder, registry);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        const resp2 = await npm(
-          { cwd: tempFolder },
-          'dist-tag',
-          'add',
-          `${pkgName}@1.1.0`,
-          'alfa',
-          ...addRegistry(registry.getRegistryUrl())
-        );
-        expect(resp2.stdout).toEqual(`+alfa: ${pkgName}@1.1.0`);
-      }
-    );
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/index.ts

@@ -1,10 +0,0 @@
-export { runAudit } from './audit';
-export { runDeprecate } from './deprecate';
-export { runInstall } from './install';
-export { runInfo } from './info';
-export { runPing } from './ping';
-export { runPublish } from './publish';
-export { runSearch } from './search';
-export { runStar } from './star';
-export { runUnpublish } from './unpublish';
-export { runDistTag } from './dist-tags';

e2e/cli/e2e-npm-commons/info.ts

@@ -1,32 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
-
-export function runInfo(npm) {
-  describe('install a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test('should run npm info json body', async () => {
-      const resp = await npm(
-        {},
-        'info',
-        'verdaccio',
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      const parsedBody = JSON.parse(resp.stdout as string);
-      expect(parsedBody.name).toEqual('verdaccio');
-      expect(parsedBody.dependencies).toBeDefined();
-    });
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/install.ts

@@ -1,39 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
-
-export function runInstall(npm) {
-  describe('install a project packages', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test('should run npm install json body', async () => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        'something',
-        '1.0.0-patch',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl(),
-        { react: '18.2.0' }
-      );
-      const resp = await npm(
-        { cwd: tempFolder },
-        'install',
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      const parsedBody = JSON.parse(resp.stdout as string);
-      expect(parsedBody.added).toBeDefined();
-      expect(parsedBody.audit).toBeDefined();
-    });
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/package.json

@@ -1,11 +0,0 @@
-{
-  "private": true,
-  "name": "@verdaccio/e2e-cli-npm-common",
-  "version": "1.0.0",
-  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0"
-  },
-  "scripts": {
-    "test": "echo no test"
-  }
-}

e2e/cli/e2e-npm-commons/ping.ts

@@ -1,25 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
-
-export function runPing(npm) {
-  describe('ping registry', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test('should ping registry', async () => {
-      const resp = await npm({}, 'ping', '--json', ...addRegistry(registry.getRegistryUrl()));
-      const parsedBody = JSON.parse(resp.stdout as string);
-      expect(parsedBody.registry).toEqual(registry.getRegistryUrl() + '/');
-    });
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/publish.ts

@@ -1,42 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
-
-export function runPublish(npm) {
-  describe('publish a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
-      'should publish a package %s',
-      async (pkgName) => {
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0-patch',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        const resp = await npm(
-          { cwd: tempFolder },
-          'publish',
-          '--json',
-          ...addRegistry(registry.getRegistryUrl())
-        );
-        const parsedBody = JSON.parse(resp.stdout as string);
-        expect(parsedBody.name).toEqual(pkgName);
-        expect(parsedBody.files).toBeDefined();
-        expect(parsedBody.files).toBeDefined();
-      }
-    );
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/search.ts

@@ -1,34 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
-
-export function runSearch(npm) {
-  describe('search a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test('should search a package', async () => {
-      const resp = await npm(
-        {},
-        'search',
-        '@verdaccio/cli',
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      const parsedBody = JSON.parse(resp.stdout as string);
-      const pkgFind = parsedBody.find((item) => {
-        return item.name === '@verdaccio/cli';
-      });
-      expect(pkgFind.name).toEqual('@verdaccio/cli');
-    });
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/star.ts

@@ -1,90 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import {
-  addRegistry,
-  initialSetup,
-  npmUtils,
-  prepareGenericEmptyProject,
-} from '@verdaccio/test-cli-commons';
-
-export function runStar(npm) {
-  describe('star a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0-patch',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      const resp = await npm(
-        { cwd: tempFolder },
-        'star',
-        pkgName,
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp.stdout).toEqual(`★  ${pkgName}`);
-    });
-
-    test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0-patch',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      const resp = await npm(
-        { cwd: tempFolder },
-        'star',
-        pkgName,
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp.stdout).toEqual(`★  ${pkgName}`);
-
-      const resp1 = await npm(
-        { cwd: tempFolder },
-        'unstar',
-        pkgName,
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp1.stdout).toEqual(`☆  ${pkgName}`);
-    });
-
-    test('should list stars of a user %s', async () => {
-      const pkgName = '@verdaccio/stars';
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0-patch',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      await npm({ cwd: tempFolder }, 'star', pkgName, ...addRegistry(registry.getRegistryUrl()));
-      const resp = await npm(
-        { cwd: tempFolder },
-        'stars',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      // side effects: this result is affected the the package published in the previous step
-      expect(resp.stdout).toEqual(`@verdaccio/foo@verdaccio/stars`);
-    });
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm-commons/tsconfig.json

@@ -1,8 +0,0 @@
-{
-  "extends": "../../../tsconfig.reference.json",
-  "references": [
-    {
-      "path": "../cli-commons"
-    }
-  ]
-}

e2e/cli/e2e-npm-commons/unpublish.ts

@@ -1,86 +0,0 @@
-import { afterAll, beforeAll, describe, expect, test } from 'vitest';
-
-import {
-  addRegistry,
-  initialSetup,
-  npmUtils,
-  prepareGenericEmptyProject,
-} from '@verdaccio/test-cli-commons';
-
-export function runUnpublish(npm) {
-  describe('unpublish a package', () => {
-    let registry;
-
-    beforeAll(async () => {
-      const setup = await initialSetup();
-      registry = setup.registry;
-      await registry.init();
-    });
-
-    test.each([['@verdaccio/test1', 'super-package-do-not-exist-spam']])(
-      'should unpublish a full package %s',
-      async (pkgName) => {
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0-beta',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['minor']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['minor']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['major']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-
-        const resp2 = await npm(
-          { cwd: tempFolder },
-          'unpublish',
-          pkgName,
-          '--force',
-          '--loglevel=info',
-          '--json',
-          ...addRegistry(registry.getRegistryUrl())
-        );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1');
-      }
-    );
-
-    test.each([['@verdaccio/test1', 'super-package-do-not-exist-spam']])(
-      'should unpublish a package %s version',
-      async (pkgName) => {
-        const { tempFolder } = await prepareGenericEmptyProject(
-          pkgName,
-          '1.0.0-beta',
-          registry.port,
-          registry.getToken(),
-          registry.getRegistryUrl()
-        );
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['minor']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['minor']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-        await npmUtils.bumpUpPackage(npm, tempFolder, pkgName, registry, ['major']);
-        await npmUtils.publish(npm, tempFolder, pkgName, registry);
-
-        const resp2 = await npm(
-          { cwd: tempFolder },
-          'unpublish',
-          `${pkgName}@1.0.0-beta`,
-          '--force',
-          '--loglevel=info',
-          '--json',
-          ...addRegistry(registry.getRegistryUrl())
-        );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0-beta');
-      }
-    );
-
-    afterAll(async () => {
-      registry.stop();
-    });
-  });
-}

e2e/cli/e2e-npm10/audit.spec.ts

@@ -1,9 +1,44 @@
-import { describe } from 'vitest';
-
-import { runAudit } from '@verdaccio/e2e-cli-npm-common';
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
 describe('audit a package', () => {
-  runAudit(npm);
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', '@verdaccio/cli']])(
+    'should audit a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl(),
+        { jquery: '3.6.1' }
+      );
+      // install is required to create package lock file
+      await npm({ cwd: tempFolder }, 'install', ...addRegistry(registry.getRegistryUrl()));
+      const resp = await npm(
+        { cwd: tempFolder },
+        'audit',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.metadata).toBeDefined();
+      expect(parsedBody.auditReportVersion).toBeDefined();
+      expect(parsedBody.vulnerabilities).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/deprecate.spec.ts

@@ -1,9 +1,115 @@
-import { describe } from 'vitest';
-
-import { runDeprecate } from '@verdaccio/e2e-cli-npm-common';
+import {
+  addRegistry,
+  initialSetup,
+  npmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
 describe('deprecate a package', () => {
-  runDeprecate(npm);
+  jest.setTimeout(20000);
+  let registry;
+
+  async function deprecate(tempFolder, packageVersion, registry, message) {
+    await npm(
+      { cwd: tempFolder },
+      'deprecate',
+      packageVersion,
+      message,
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+  }
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@verdaccio/deprecated-1']])(
+    'should deprecate a single package %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // deprecate one version
+      await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+      // verify is deprecated
+      const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+      expect(infoBody.name).toEqual(pkgName);
+      expect(infoBody.deprecated).toEqual(message);
+    }
+  );
+
+  test.each([['@verdaccio/deprecated-2']])('should un-deprecate a package %s', async (pkgName) => {
+    const message = 'some message';
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    // deprecate one version
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+    // verify is deprecated
+    const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+    expect(infoBody.deprecated).toEqual(message);
+    // empty string is same as undeprecate
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, '');
+    const infoBody2 = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+    expect(infoBody2.deprecated).toBeUndefined();
+  });
+
+  test.each([['@verdaccio/deprecated-3']])(
+    'should deprecate a multiple packages %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      // publish 1.0.0
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.1.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.2.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.3.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // // deprecate all version
+      await deprecate(tempFolder, pkgName, registry, message);
+      // verify is deprecated
+      for (let v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {
+        const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@${v}`, registry);
+        expect(infoResp.deprecated).toEqual(message);
+      }
+      // publish normal version
+      // publish 1.4.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@1.4.0`, registry);
+      // must be not deprecated
+      expect(infoResp.deprecated).toBeUndefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/dist-tags.spec.ts

@@ -1,9 +1,91 @@
-import { describe } from 'vitest';
-
-import { runDistTag } from '@verdaccio/e2e-cli-npm-common';
+import {
+  addRegistry,
+  initialSetup,
+  npmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
-describe('dist-tags a package', () => {
-  runDistTag(npm);
+describe('publish a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@foo/foo', 'foo']])('should list dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    await npmUtils.bumbUp(npm, tempFolder, registry);
+    await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await npm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'ls',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
+  });
+
+  test.each([['@verdaccio/bar']])('should remove tag with dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    await npmUtils.bumbUp(npm, tempFolder, registry);
+    await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await npm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'rm',
+      `${pkgName}@1.1.0`,
+      'beta',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('-beta: @verdaccio/bar@1.1.0');
+  });
+
+  test.each([['@verdaccio/five']])(
+    'should add tag to package and version with dist-tags for %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      const resp2 = await npm(
+        { cwd: tempFolder },
+        'dist-tag',
+        'add',
+        `${pkgName}@1.1.0`,
+        'alfa',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      expect(resp2.stdout).toEqual(`+alfa: ${pkgName}@1.1.0`);
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/info.spec.ts

@@ -1,9 +1,31 @@
-import { describe } from 'vitest';
-
-import { runInfo } from '@verdaccio/e2e-cli-npm-common';
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
-describe('info a package', () => {
-  runInfo(npm);
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run npm info json body', async () => {
+    const resp = await npm(
+      {},
+      'info',
+      'verdaccio',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.name).toEqual('verdaccio');
+    expect(parsedBody.dependencies).toBeDefined();
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/install.spec.ts

@@ -1,9 +1,38 @@
-import { describe } from 'vitest';
-
-import { runInstall } from '@verdaccio/e2e-cli-npm-common';
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
 describe('install a project packages', () => {
-  runInstall(npm);
+  jest.setTimeout(100000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run npm install json body', async () => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      'something',
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl(),
+      { react: '18.2.0' }
+    );
+    const resp = await npm(
+      { cwd: tempFolder },
+      'install',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.added).toBeDefined();
+    expect(parsedBody.audit).toBeDefined();
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/jest.config.js

@@ -0,0 +1,3 @@
+const config = require('../jest.config');
+
+module.exports = { ...config };

e2e/cli/e2e-npm10/package.json

@@ -4,10 +4,9 @@
   "version": "1.0.1",
   "dependencies": {
     "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
-    "@verdaccio/e2e-cli-npm-common": "workspace:*",
-    "npm": "10.9.0"
+    "npm": "10.8.2"
   },
   "scripts": {
-    "test": "vitest run --testTimeout 50000"
+    "test": "jest"
   }
 }

e2e/cli/e2e-npm10/ping.spec.ts

@@ -1,9 +1,24 @@
-import { describe } from 'vitest';
-
-import { runPing } from '@verdaccio/e2e-cli-npm-common';
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
 describe('ping registry', () => {
-  runPing(npm);
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should ping registry', async () => {
+    const resp = await npm({}, 'ping', '--json', ...addRegistry(registry.getRegistryUrl()));
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.registry).toEqual(registry.getRegistryUrl() + '/');
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });

e2e/cli/e2e-npm10/publish.spec.ts

@@ -1,9 +1,41 @@
-import { describe } from 'vitest';
-
-import { runPublish } from '@verdaccio/e2e-cli-npm-common';
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
 
 import { npm } from './utils';
 
-describe('publish a package', () => {
-  runPublish(npm);
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
+    'should publish a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      const resp = await npm(
+        { cwd: tempFolder },
+        'publish',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.name).toEqual(pkgName);
+      expect(parsedBody.files).toBeDefined();
+      expect(parsedBody.files).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
 });