chore(release): 3.5.1

Fix website issues

.babelrc

@@ -0,0 +1,76 @@
+{
+  "env": {
+    "ui": {
+      "presets": [
+        "react",
+        ["env",{
+          "targets": {
+            "browsers": [
+              "last 5 versions",
+              "FireFox >= 44",
+              "Safari >= 7",
+              "Explorer 11",
+              "last 4 Edge versions"
+            ],
+            "loose": true
+          }
+        }],
+        "stage-2",
+        "stage-3"
+      ],
+      "plugins": [
+        "react-hot-loader/babel",
+        "transform-runtime",
+        "transform-object-rest-spread",
+        "transform-decorators-legacy",
+        "syntax-dynamic-import"
+      ]
+    },
+    "test": {
+      "presets": [["env", {
+        "targets": {
+          "node": "6.10"
+        }
+      }], "flow", "react"],
+      "plugins": [
+        "transform-class-properties",
+        "transform-object-rest-spread"
+      ]
+    },
+    "testOldEnv": {
+      "presets": [ "es2015-node4", "flow"],
+      "plugins": [
+        "transform-class-properties",
+        "transform-object-rest-spread"
+      ]
+    },
+    "registry": {
+      "presets": [
+        ["env", {
+          "targets": {
+            "node": "6.10"
+          }
+        }], "stage-3", "flow"],
+      "plugins": [
+        "transform-object-rest-spread",
+        "transform-class-properties"
+      ]
+    },
+    "registry-docker": {
+      "presets": [
+        ["env", {
+          "targets": {
+            "node": "10"
+          }
+        }], "flow"],
+      "plugins": [
+        "transform-object-rest-spread",
+        "transform-class-properties"
+      ]
+    },
+    "development": {
+      "presets": ["flow"],
+      "plugins": ["flow-runtime"]
+    }
+  }
+}

.circleci/config.yml

@@ -0,0 +1,256 @@
+version: 2
+
+aliases:
+  - &defaults
+    working_directory: ~/verdaccio
+  - &node6_executor
+    docker:
+      - image: circleci/node:6
+  - &node8_executor
+    docker:
+      - image: circleci/node:8
+  - &node9_executor
+    docker:
+      - image: circleci/node:9
+  - &node9_browser_executor
+    docker:
+      - image: circleci/node:9-browsers
+  - &node10_executor
+    docker:
+      - image: circleci/node:10
+  - &default_executor
+    <<: *node9_executor
+  - &repo_key
+    repo-{{ .Branch }}-{{ .Revision }}
+  - &coverage_key
+    coverage-{{ .Branch }}-{{ .Revision }}
+  - &base_config_key
+    base-config-{{ .Branch }}-{{ .Revision }}
+  - &yarn_cache_key
+    yarn-sha-{{ checksum "yarn.lock" }}
+  - &restore_repo
+    restore_cache:
+      keys:
+        - *repo_key
+  - &ignore_non_dev_branches
+    filters:
+      tags:
+        only: /.*/
+      branches:
+        ignore:
+          - gh-pages
+          - l10n_master
+          - /release\/.*/
+  - &execute_on_release
+    filters:
+      tags:
+        only: /(v)?[0-9]+(\.[0-9]+)*/
+      branches:
+        ignore:
+          - /.*/
+
+jobs:
+  prepare:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - checkout
+      - restore_cache:
+          key: *base_config_key
+      - run:
+          name: 'Base environment setup'
+          command: |
+            git config --global user.email "verdacciobot@users.noreply.github.com"
+            git config --global user.name "Verdaccio bot for Deployments"
+            echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
+            echo "machine github.com login verdacciobot password $GITHUB_TOKEN" > ~/.netrc
+      - save_cache:
+          key: *base_config_key
+          paths:
+            - ~/.npmrc
+            - ~/.gitconfig
+            - ~/.netrc
+      - restore_cache:
+          key: *yarn_cache_key
+      - run:
+          name: Install Js dependencies
+          command: yarn install --no-progress
+      - run:
+          name: Prepare CI
+          command:  yarn run pre:ci
+      - run:
+          name: Build project
+          command: yarn run code:build
+      - save_cache:
+          key: *yarn_cache_key
+          paths:
+            - ~/.yarn
+            - ~/.cache/yarn
+            - node_modules
+      - save_cache:
+          key: *repo_key
+          paths:
+            - ~/verdaccio
+
+  test_node6:
+    <<: *defaults
+    <<: *node6_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test with Node 6
+          command: yarn run test
+
+  test_node8:
+    <<: *defaults
+    <<: *node8_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test with Node 8
+          command: |
+            yarn test
+            yarn test:functional
+
+  test_node9:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test with Node 9
+          command: |
+            yarn test
+            yarn test:functional
+      - save_cache:
+          key: *coverage_key
+          paths:
+            - coverage
+
+  test_node10:
+    <<: *defaults
+    <<: *node10_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test with Node 10
+          command: |
+            yarn run test
+            yarn test:functional
+
+  test_e2e:
+    <<: *defaults
+    <<: *node9_browser_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test End-to-End
+          command: yarn run test:e2e
+
+  test_size:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - run:
+          name: Test size
+          command: yarn test:size
+
+  coverage:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - restore_cache:
+          key: *coverage_key
+      - run:
+          name: Publish coverage
+          command: yarn run coverage:publish
+      - store_artifacts:
+          path: coverage/clover.xml
+          prefix: tests
+      - store_artifacts:
+          path: coverage
+          prefix: coverage
+      - store_test_results:
+          path: coverage/clover.xml
+
+  publish_gh_pages:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - restore_cache:
+          key: *base_config_key
+      - run:
+          name: Publish gh-pages
+          command: |
+            cd website
+            yarn install
+            GIT_USER=verdacciobot USE_SSH=false yarn run publish-gh-pages
+
+  publish_package:
+    <<: *defaults
+    <<: *default_executor
+    steps:
+      - *restore_repo
+      - restore_cache:
+          key: *base_config_key
+      - run:
+          name: Publish
+          command: scripts/publish.sh
+
+workflows:
+  version: 2
+  workflow:
+    jobs:
+      - prepare:
+          <<: *ignore_non_dev_branches
+      - test_node6:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - test_node8:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - test_node9:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - test_node10:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - test_e2e:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - test_size:
+          requires:
+            - prepare
+          <<: *ignore_non_dev_branches
+      - coverage:
+          requires:
+            - test_node6
+            - test_node8
+            - test_node9
+            - test_node10
+            - test_e2e
+            - test_size
+          <<: *ignore_non_dev_branches
+      - publish_gh_pages:
+          requires:
+            - test_node6
+            - test_node8
+            - test_node9
+            - test_node10
+            - test_e2e
+            - test_size
+          <<: *execute_on_release
+      - publish_package:
+          requires:
+            - coverage
+            - publish_gh_pages
+          <<: *execute_on_release

.dockerignore

@@ -0,0 +1,33 @@
+# we try to aoid adding files to the docker images that change often
+# or that are not needed for running the docker image
+# tis greatly reduces the amount of times we need to rerun `npm install` when building image locally
+# https://codefresh.io/blog/not-ignore-dockerignore/
+# https://docs.docker.com/engine/reference/builder/#dockerignore-file
+
+# consider them hidden
+.*
+# you can add exceptions like in .gitignore to maintain a whitelist:
+# e.g.
+!.babelrc
+!.eslintrc
+!.eslintignore
+!.stylelintrc
+!.flowconfig
+!.jest.config.js
+!.jestEnvironment.js
+
+# do not copy over node_modules we will run `npm install` anyway
+node_modules
+
+# output from test runs and similar things
+*.log
+coverage/
+.vscode/
+
+# IDE config files
+jsconfig.json
+*.iml
+
+# let's not get to recursive ;)
+Dockerfile*
+docker-compose*.yaml

.editorconfig

@@ -0,0 +1,12 @@
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+end_of_line = lf
+insert_final_newline = true
+
+# 2 space indentation
+[{.,}*.{js,jsx,yml,yaml}]
+indent_style = space
+indent_size = 2

.env

@@ -0,0 +1,2 @@
+# default values for docker-compose
+PORT=4873

.eslint.yaml

@@ -1,275 +0,0 @@
-env:
-  node: true
-
-#
-# 0 - disable
-#     Rules that more harmful than useful, or just buggy.
-#
-# 1 - warning
-#     Rules that we didn't encounter yet. You can safely ignore them,
-#     but I'd like to know any interesting use-cases they forbid.
-#
-# 2 - error
-#     Rules that have proven to be useful, please follow them.
-#
-
-rules:
-  # didn't understand what it does, but it fails a good code
-  block-scoped-var: 0
-
-  # fails where newlines are used to format pretty big "if":
-  # if (
-  #    name.charAt(0) === "." ||
-  #    name.match(/[\/@\s\+%:]/) ||
-  #    name !== encodeURIComponent(name) ||
-  #    name.toLowerCase() === "node_modules"
-  # ) {
-  brace-style: 1
-
-  # snake_case is more readable, what's up with you guys?
-  camelcase: 0
-
-  # if some functions are complex, they are for a good reason,
-  # ain't worth it
-  complexity: [0, 10]
-
-  # never saw it, but self is preferred
-  consistent-this: [1, self]
-
-  # fails good code
-  curly: [0, multi]
-
-  # fails good code, where this notation is used for consistency:
-  #   something['foo-bar'] = 123
-  #   something['blahblah'] = 234
-  dot-notation: 0
-
-  # pointless in many cases (like indexOf() == -1), harmful in a few
-  # cases (when you do want to ignore types), fails good code
-  eqeqeq: 0
-
-  # if someone is changing prototype and makes properties enumerable,
-  # it's their own fault
-  guard-for-in: 0
-
-  # if some functions are complex, they are for a good reason,
-  # ain't worth it
-  max-depth: [0, 4]
-  max-nested-callbacks: [0, 2]
-
-  # should it really throw for every long URL?
-  max-len: [0, 80, 4]
-
-  # that's obvious by just looking at the code, you don't need lint for that
-  max-params: [0, 3]
-
-  # if some functions are complex, they are for a good reason,
-  # ain't worth it
-  max-statements: [0, 10]
-
-  # that one makes sense
-  new-cap: 2
-
-  # I'm writing javascript, not some weird reduced version of it
-  no-bitwise: 0
-
-  # not working around IE bugs, sorry
-  no-catch-shadow: 0
-
-  # see above, IE is useful for downloading other browsers only
-  no-comma-dangle: 0
-
-  # good for removing debugging code
-  no-console: 2
-
-  # good for removing debugging code
-  no-debugger: 2
-
-  # why would anyone need to check against that?
-  no-else-return: 0
-
-  # sometimes empty statement contains useful comment
-  no-empty: 0
-
-  # stupid rule
-  # "x == null" is "x === null || x === undefined"
-  no-eq-null: 0
-
-  # fails good code, when parens are used for grouping:
-  #   (req && req.headers['via']) ? req.headers['via'] + ', ' : ''
-  # not everyone remembers priority tables, you know
-  no-extra-parens: 0
-
-  # fails defensive semicolons:
-  #   ;['foo', 'bar'].forEach(function(x) {})
-  no-extra-semi: 0
-
-  # fails good code:
-  #   var fs   = require('fs'),
-  #     , open = fs.open
-  no-mixed-requires: [0, false]
-
-  # new Array(12) is used to pre-allocate arrays
-  no-new-array: 0
-
-  # fails good code:
-  #   fs.open('/file', 0666, function(){})
-  no-octal: 0
-
-  # fails good code:
-  #   console.log('\033[31m' + str + '\033[39m')
-  # also fails \0 which is not octal escape
-  no-octal-escape: 0
-
-  # I'm writing javascript, not some weird reduced version of it
-  no-plusplus: 0
-
-  # fails good code:
-  #   if (a) {
-  #      var x = 'foo'
-  #   } else {
-  #      var x = bar
-  #   }
-  no-redeclare: 0
-
-  # sometimes useful, often isn't
-  # probably worth enforcing
-  no-shadow: 2
-
-  no-sync: 2
-
-  # I'm writing javascript, not some weird reduced version of it
-  no-ternary: 0
-
-  # the single most important rule in the entire ruleset
-  no-undef: 2
-
-  # it is failing our own underscores
-  no-underscore-dangle: 0
-
-  # fails function hoisting
-  no-unreachable: 0
-
-  # fails npm-style code, it's good once you get used to it:
-  #   if (typeof(options) === 'function') callback = options, options = {}
-  no-unused-expressions: 0
-
-  # fails (function(_err) {}) where named argument is used to show what
-  # nth function argument means
-  no-unused-vars: [0, local]
-
-  # fails function hoisting
-  no-use-before-define: 0
-
-  # fails foobar( (function(){}).bind(this) )
-  # parens are added for readability
-  no-wrap-func: 0
-
-  # fails good code:
-  #   var x
-  #   if (something) {
-  #      var y
-  one-var: 0
-
-  quote-props: 0
-
-  # fails situation when different quotes are used to avoid escaping
-  quotes: [2, single, avoid-escape]
-
-  # http:#blog.izs.me/post/2353458699/an-open-letter-to-javascript-leaders-regarding
-  semi: [2, never]
-
-  # fails good code where spaces are used for grouping:
-  #   (x+y * y+z)
-  space-infix-ops: 0
-
-  # typeof(something) should have braces to look like a function
-  # a matter of taste I suppose
-  space-unary-word-ops: 0
-
-  # strict mode is just harmful,
-  # can I have a check to enforce not using it?
-  strict: 0
-
-  sort-vars: 0
-  no-path-concat: 0
-  func-names: 0
-
-  # how can you set a return code without process.exit?
-  no-process-exit: 0
-
-  # both styles are useful
-  func-style: [0, declaration]
-
-  # fails while(1) {...}
-  no-constant-condition: 0
-
-  # fails good code:
-  # https://github.com/rlidwka/jju/blob/eb52ee72e5f21d48963798f9bda8ac8d68082148/lib/parse.js#L732
-  no-ex-assign: 0
-
-  wrap-iife: [2, inside]
-
-  # doesn't always make sense
-  consistent-return: 0
-  no-sequences: 0
-
-  # fails defensive semicolons
-  no-space-before-semi: 0
-
-  new-parens: 1
-  no-alert: 1
-  no-array-constructor: 1
-  no-caller: 1
-  no-cond-assign: 1
-  no-control-regex: 1
-  no-delete-var: 1
-  no-div-regex: 1
-  no-dupe-keys: 1
-  no-empty-class: 1
-  no-empty-label: 1
-  no-eval: 1
-  no-extend-native: 1
-  no-extra-boolean-cast: 1
-  no-extra-strict: 1
-  no-fallthrough: 1
-  no-floating-decimal: 1
-  no-func-assign: 1
-  no-global-strict: 1
-  no-implied-eval: 1
-  no-invalid-regexp: 1
-  no-iterator: 1
-  no-labels: 1
-  no-label-var: 1
-  no-lone-blocks: 1
-  no-loop-func: 1
-  no-multi-str: 1
-  no-native-reassign: 1
-  no-negated-in-lhs: 1
-  no-nested-ternary: 1
-  no-new: 1
-  no-new-func: 1
-  no-new-object: 1
-  no-new-wrappers: 1
-  no-obj-calls: 1
-  no-octal: 1
-  no-proto: 1
-  no-regex-spaces: 1
-  no-return-assign: 1
-  no-script-url: 1
-  no-self-compare: 1
-  no-shadow: 1
-  no-shadow-restricted-names: 1
-  no-spaced-func: 1
-  no-sparse-arrays: 1
-  no-sync: 1
-  no-undef: 1
-  no-undef-init: 1
-  no-unreachable: 1
-  no-with: 1
-  no-yoda: 1
-  radix: 1
-  space-return-throw-case: 1
-  use-isnan: 1
-  valid-jsdoc: 1
-  wrap-regex: 1

.eslintignore

@@ -0,0 +1,7 @@
+node_modules
+coverage/
+wiki/
+static/
+flow-typed/
+website/
+build/

.eslintrc

@@ -0,0 +1,48 @@
+{
+  "plugins": [
+    "react",
+    "flowtype",
+    "jest"
+  ],
+  "extends": [
+    "eslint:recommended",
+    "google",
+    "plugin:react/recommended",
+    "plugin:flowtype/recommended",
+    "plugin:jest/recommended"
+  ],
+  "parser": "babel-eslint",
+  "parserOptions": {
+    "sourceType": "module",
+    "ecmaVersion": 7,
+    "ecmaFeatures": {
+      "impliedStrict": true,
+      "jsx": true
+    }
+  },
+  "env": {
+    "browser": true,
+    "node": true,
+    "es6": true,
+    "jest": true
+  },
+  "globals": {
+    "__APP_VERSION__": true
+  },
+  "rules": {
+    "no-useless-escape": 2,
+    "react/no-deprecated": 1,
+    "react/jsx-no-target-blank": 1,
+    "handle-callback-err": 2,
+    "no-fallthrough": 2,
+    "no-new-require": 2,
+    "max-len": [2, 160],
+    "camelcase": 0,
+    "require-jsdoc": 0,
+    "valid-jsdoc": 0,
+    "prefer-spread": 1,
+    "prefer-rest-params": 1,
+    "linebreak-style": 0,
+    "quote-props":["error", "as-needed"]
+  }
+}

.flowconfig

@@ -0,0 +1,25 @@
+[ignore]
+.*/node_modules/.*
+.*/test/**/*.json
+.*/static/.*
+.*/test/unit/partials/.*
+.*/.nyc_output/.*
+.*/coverage/.*
+.*/.vscode/.*
+.*/build/.*
+.*/docs/.*
+.*/scripts/.*
+.*/assets/.*
+.*/bin/.*
+.*/systemd/.*
+.*/website/.*
+.*/wiki/.*
+.*/docs/.*
+.*/tools/.*
+
+[libs]
+node_modules/@verdaccio/types/lib/
+
+[options]
+suppress_comment= \\(.\\|\n\\)*\\$FlowFixMe
+module.ignore_non_literal_requires=true

.github/ISSUE_TEMPLATE/Bug_report.md

@@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Create a report to help us improve
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Docker || Kubernetes (please complete the following information):**
+ - Docker verdaccio tag: [e.g. verdaccio:beta]
+ - Docker commands [e.g. docker pull ...]
+ - Docker Version [e.g. v18.05.0-ce-rc1]
+
+**Configuration File (cat ~/.config/verdaccio/config.yaml)** 
+
+**Debugging output**
+ - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
+ - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+ - `$ npm -ddd` prints:
+ - `$ npm config get registry` prints:
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/Feature_request.md

@@ -0,0 +1,17 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/issue_template.md

@@ -0,0 +1,32 @@
+<!--
+First of all, please read this section
+
+https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md#reporting-a-bug
+
+Some advices before file an issue
+  * Give a brief explanation of the issue, suggestion or feature to request.
+  * If the issue is a question, provide as much information you have available.
+  * How can I do in order to reproduce it? What environment?
+  * Define which version the issue happens and whether previous version the behaviour is correct.
+  * Provide your config file is really helpful. Please be aware to hide sensisive data (passwords, server IP, etc) before post.
+-->
+
+#### My reason:
+#### Steps to reproduce:
+#### App Version:
+#### Config file:
+#### Additional information:
+
+ - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
+ - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+ - `$ npm -ddd` prints:
+ - `$ npm config get registry` prints:
+ - Verdaccio terminal output
+ - Which (Windows, OS X/macOS, or Linux) environment are you running verdaccio?:
+ - Verdaccio configuration file, eg: `cat ~/.config/verdaccio/config.yaml`
+  - Container Options:
+   - Docker?:
+   - Kubernetes?:
+
+#### Additional verbose log:
+

.github/lock.yml

@@ -0,0 +1,28 @@
+# Configuration for lock-threads - https://github.com/dessant/lock-threads
+
+# Number of days of inactivity before a closed issue or pull request is locked
+daysUntilLock: 365
+
+# Issues and pull requests with these labels will not be locked. Set to `[]` to disable
+exemptLabels: []
+
+# Label to add before locking, such as `outdated`. Set to `false` to disable
+lockLabel: false
+
+# Comment to post before locking. Set to `false` to disable
+lockComment: >
+  This thread has been automatically locked since there has not been
+  any recent activity after it was closed. Please open a new issue for
+  related bugs.
+
+# Limit to only `issues` or `pulls`
+# only: issues
+
+# Optionally, specify configuration settings just for `issues` or `pulls`
+issues:
+ exemptLabels:
+   - help-wanted
+ lockLabel: outdated
+
+pulls:
+ daysUntilLock: 180

.github/pull_request_template.md

@@ -0,0 +1,27 @@
+<!--
+
+Before Pull Request check whether your commits follow this convention
+
+https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md#git-commit-guidelines
+
+  * If your PR fix an issue don't forget to update the unit test and documentation in /docs folder
+  * If your PR delivers a new feature, please, provide examples and why such feature should be considered.
+  * Document your changes /docs
+  * Add unit test
+  * Follow the commit guidelines in order to get a quick approval
+
+Pick one/multiple type, if none apply please suggest one, we might be included it by default
+
+eg: bug / feature / documentation / unit test / build
+
+-->
+**Type:**
+
+The following has been addressed in the PR:
+
+*  There is a related issue?
+*  Unit or Functional tests are included in the PR
+
+**Description:**
+
+<!-- Resolves #??? -->

.gitignore

@@ -1,9 +1,32 @@
-node_modules
-package.json
 npm-debug.log
-sinopia-*.tgz
+verdaccio-*.tgz
+.DS_Store
+build/
 
 ###
-bin/storage*
-bin/*.yaml
+!bin/verdaccio
 test-storage*
+access-storage*
+.verdaccio_test_env
+node_modules
+package-lock.json
+build/
+npm_test-fails-add-tarball*
+yarn-error.log
+
+
+# Istanbul
+coverage/
+.nyc*
+
+.idea/
+
+
+# React
+bundle.js
+bundle.js.map
+__tests__
+
+# Compiled script
+static/*
+

.npmignore

@@ -1,11 +1,45 @@
-node_modules
-package.json
+
+## npm
 npm-debug.log
-sinopia-*.tgz
+yarn-error.log
+node_modules
+verdaccio-*.tgz
 
-###
-bin/storage*
-bin/*.yaml
+renovate.json
+docker-compose.yaml
+Dockerfile.rpi
+Dockerfile
+crowdin.yaml
+scripts/
+src/
+/.*
+.vscode/
+.circleci/
+debug/
+
+# build ui
+tools/
+
+## assets and website
+assets/
+website/
+
+## docs
+docs/
+wiki/
+
+## flow
+flow-typed/
+types/
+
+# jest
+coverage/
 test-storage*
+test/
+__mocks__/
+jestEnvironment.js
+test/jest.e2e.config.js
+test/jest.config.functional.js
+jest.config.unit.js
+
 
-/.eslint*

.stylelintrc

@@ -0,0 +1,8 @@
+{
+  "extends": "stylelint-config-recommended-scss",
+  "rules": {
+    "selector-pseudo-class-no-unknown": [true, {
+        "ignorePseudoClasses": ["/global/"]
+    }]
+  }
+}

.vscode/launch.json

@@ -0,0 +1,60 @@
+{
+	// Use IntelliSense to learn about possible Node.js debug attributes.
+	// Hover to view descriptions of existing attributes.
+	// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+	"version": "0.2.0",
+	"configurations": [
+		{
+			"type": "node",
+			"request": "attach",
+			"name": "Attach to Process",
+			"processId": "${command:PickProcess}",
+			"port": 5858
+		},
+		{
+			"name": "Tests",
+			"type": "node",
+			"request": "launch",
+			"program": "${workspaceRoot}/node_modules/jest-cli/bin/jest.js",
+			"stopOnEntry": false,
+			"args": ["--runInBand"],
+			"cwd": "${workspaceRoot}",
+			"preLaunchTask": null,
+			"runtimeExecutable": null,
+			"runtimeArgs": [
+					"--nolazy"
+			],
+			"env": {
+					"NODE_ENV": "test"
+			},
+			"externalConsole": false,
+			"sourceMaps": false,
+			"outDir": null
+		},
+		{
+			"type": "node",
+			"request": "launch",
+			"name": "Mocha Tests",
+			"stopOnEntry": false,
+      "runtimeExecutable": null,
+			"program": "${workspaceRoot}/node_modules/mocha/bin/_mocha",
+			"args": [
+				"--no-timeouts",
+				"${workspaceRoot}/test/unit"
+			]
+		},
+		{
+			"type": "node",
+			"request": "launch",
+			"name": "Verdaccio",
+			"program": "${workspaceRoot}/bin/verdaccio"
+		},
+		{
+			"type": "node",
+			"request": "attach",
+			"name": "Attach to Process",
+			"address": "localhost",
+			"port": 5858
+		}
+	]
+}

.vscode/settings.json

@@ -0,0 +1,9 @@
+// Place your settings in this file to overwrite default and user settings.
+{
+	"files.exclude": {
+		"**/.idea": false,
+		"**/.nyc_output": true,
+		"**/build": true,
+		"**/coverage": true
+	}
+}

.yarnrc

@@ -0,0 +1,2 @@
+save-prefix ""
+registry "http://registry.npmjs.org/"

AUTHORS

@@ -0,0 +1,141 @@
+030 <chocolatey030@gmail.com>
+Aaron Lozier <aaron@potenzainnovations.com>
+Adam Szmyd <szmydadam@gmail.com>
+Alex Kocharin <alex@kocharin.ru>
+Alex Kocharin <rlidwka@kocharin.ru>
+Alex Vernacchia <avernacchia@exacttarget.com>
+Alexander Makarenko <estliberitas@gmail.com>
+Alexander Remishevsky <aremishevsky@chegg.com>
+Alexandre-io <Alexandre-io@users.noreply.github.com>
+Amir Mohsen Abdolrazaghi <amirmohsen@users.noreply.github.com>
+Anmol <anmol@i0157.local>
+Aram Drevekenin <grimsniffer@gmail.com>
+Ayush Sharma <ayush.sharma@innovaccer.com>
+Bart Dubois <dubcio@o2.pl>
+Barthélemy Vessemont <bvessemont@gmail.com>
+Bo Chen <bochen2014@yahoo.com>
+Bogdan Alexandru Marginean <bogdanmarginean@ymail.com>
+Brandon Nicholls <brandon.nicholls@gmail.com>
+Bren Norris <bnorris@enterrasolutions.com>
+Breno <breno@inspr.com>
+Breno Rodrigues <brenorodrigues@me.com>
+Brett Trotter <brett.trotter@webfilings.com>
+Brian Muenzenmeyer <brian.muenzenmeyer@gmail.com>
+Brian Peacock <bpeacock@fastfig.com>
+Carlos Galarza <carloslfu@gmail.com>
+Cedric Darne <cdarne@hibernum.com>
+Chad Killingsworth <chad.killingsworth@banno.com>
+Chomba Ng'ang'a <choeringa@gmail.com>
+Chris Breneman <crispy@cluenet.org>
+Christian Bewernitz <coder@karfau.de>
+Christoph Rohrer <crohrer@users.noreply.github.com>
+Christopher Kelley <000@cranlabs.io>
+Cody Droz <cody-geest@uiowa.edu>
+Conor Hastings <hastings.conorm@gmail.com>
+Corey Jewett <coreyjewett@users.noreply.github.com>
+Daniel Rodríguez Rivero <rdanielo@gmail.com>
+David Broadhurst <david@union25.com>
+David Rubin <davidrub@gmail.com>
+Denis Babineau <denis.babineau@gmail.com>
+Emmanuel Narh <narhe@advisory.com>
+Etienne Tremel <etienne.tremel@container-solutions.com>
+Fabio Poloni <fabio@APP-roved.com>
+Facundo Chambó <fchambo@despegar.com>
+Geoffroy Empain <empaingeo@hotmail.com>
+Guilherme Bernal <dev@lbguilherme.com>
+Gustavo Cruz <gecruz.dev@gmail.com>
+Håkan Canberger <hakan.canberger@thomascook.se>
+Idan Gozlan <idangozlan@gmail.com>
+J. Russell Smyth <jrussell.smyth@gmail.com>
+Jakub Jirutka <jakub@jirutka.cz>
+James Newell <j.newell@nib.com.au>
+Jan <king-jan1999@hotmail.de>
+Jan Vansteenkiste <jan@vstone.eu>
+Jannis Achstetter <jannis.achstetter@schneider-electric.com>
+Jeff Mixon <jeff@altdroid.com>
+Jeremy Moritz <jeremy@jeremymoritz.com>
+Jess <jessachandler@gmail.com>
+John Case <john.case@ge.com>
+John Gozde <johng@pandell.com>
+Jon de la Motte <jondlm@gmail.com>
+Joseph Gentle <me@josephg.com>
+José De Paz <josedepaz@users.noreply.github.com>
+Juan Carlos Picado <juan@encuestame.org>
+Juan Carlos Picado <juanpicado19@gmail.com>
+Juan Picado <juanpicado19@gmail.com>
+Juan Picado @jotadeveloper <juanpicado19@gmail.com>
+Jérôme Tamarelle <jerome@tamarelle.net>
+Kalman Speier <kalman.speier@gmail.com>
+Karl Wiggisser <karl@onebytezero.com>
+Keyvan Fatehi <keyvanfatehi@gmail.com>
+Kody J. Peterson <kodypeterson@users.noreply.github.com>
+Konstantin Baierer <unixprog@gmail.com>
+Lucius Gaitán <lucius@luciusgaitan.com>
+Madison Grubb <madison.grubb@itential.com>
+Manuel de Brito Fontes <aledbf@gmail.com>
+Mark Doeswijk <mark.doeswijk@marviq.com>
+Mathieu Savy <mathieu.savy@gmail.com>
+Meeeeow <Meeeeow@users.noreply.github.com>
+Meeeeow <i@aka.mn>
+Meeeeow <me@async.sh>
+Metaa <metaa@users.noreply.github.com>
+Michael Arnel <michael.arnel@gmail.com>
+Michael Crowe <michael@developrise.com>
+Miguel Mejias <miguelangelmejias@dorna.com>
+Mikhail T <Mikhail.Teterin@Refinery29.com>
+Miroslav Bajtoš <miroslav@strongloop.com>
+Miroslav Pokorný <m.pokorny@gmc.net>
+Nate Ziarek <natez@OSX12-L-NATEZ.local>
+Nicholas Farley <ohcrap524@gmail.com>
+Nick <nick.edelenbos@trimm.nl>
+Nicolas Bazille <oltodo@msn.com>
+Noah Prail <nprail@filiosoft.com>
+Oleg Korobenko <oleg.korobenko@gmail.com>
+Oliver Maskery <omaskery@googlemail.com>
+Patrik Votocek <patrik@votocek.cz>
+Piotr Synowiec <psynowiec@gmail.com>
+Rafael Cesar <rafa.cesar@gmail.com>
+Rafael Pinheiro <moriarty.pinheiro@gmail.com>
+Ramon Henrique Ornelas <ramon.ornela@gmail.com>
+Renovate Bot <bot@renovateapp.com>
+Robert Ewald <r3wald@gmail.com>
+Robert Groh <robert.groh@medesso.de>
+Robin Persson <rprssn@gmail.com>
+RodrigoBalest <r.balest@gmail.com>
+Roger Meier <roger@bufferoverflow.ch>
+Romain Lai-King <romain.laiking@opentrust.com>
+Ryan Graham <r.m.graham@gmail.com>
+Ryan Graham <ryan@codingintrigue.co.uk>
+Sam Day <sday@atlassian.com>
+Tarun Garg <tarun1793@users.noreply.github.com>
+Thomas Cort <thomasc@ssimicro.com>
+Tom McKenzie <tom@chillidonut.com>
+Tom Vincent <git@tlvince.com>
+Trent Earl <trent@trentearl.com>
+Waldemar Reusch <lordvlad@users.noreply.github.com>
+Wilfredo Porta <wporta@gmail.com>
+Willi Pasternak <willi.pasternak@gmail.com>
+Yannick Croissant <yannick.croissant@gmail.com>
+Yannick Galatol <ygalatol@teads.tv>
+Yuuki Tada <yuuki.tada@jp.fujitsu.com>
+cklein <trancesilken@gmail.com>
+danielo515 <rdanielo@gmail.com>
+firegrind <firegrind@gmail.com>
+jharris4 <harris.jb@gmail.com>
+jjaakola <jjaakola@users.noreply.github.com>
+jmwilkinson <j.wilkinson@f5.com>
+jotadeveloper <juanpicado19@gmail.com>
+jotadeveloper <juanpicado@users.noreply.github.com>
+karl wiggisser <karl.wiggisser@dachenstein.at>
+karl wiggisser <karl@dachenstein.at>
+markpeterfejes <fejes.mark@gmail.com>
+maxlaverse <max@laverse.net>
+osher <osher.filter@gmail.com>
+renovate[bot] <renovate[bot]@users.noreply.github.com>
+robi-wan <robi-wan@users.noreply.github.com>
+saheba <saheba@users.noreply.github.com>
+snyk-bot <snyk-bot@snyk.io>
+steve-p-com <github@steve-p.com>
+trent.earl <trent.earl@malauzai.com>
+verdacciobot <35213902+verdacciobot@users.noreply.github.com>
+丸子 <princeb4d@gmail.com>

CHANGELOG.md

@@ -0,0 +1,942 @@
+# Change Log
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+<a name="3.5.1"></a>
+## [3.5.1](https://github.com/verdaccio/verdaccio/compare/v3.5.0...v3.5.1) (2018-08-02)
+
+
+### Bug Fixes
+
+* remove version page ([8a0e8ab](https://github.com/verdaccio/verdaccio/commit/8a0e8ab))
+
+
+
+<a name="3.5.0"></a>
+# [3.5.0](https://github.com/verdaccio/verdaccio/compare/v3.4.1...v3.5.0) (2018-08-02)
+
+
+### Bug Fixes
+
+* fix docker python issue [#883](https://github.com/verdaccio/verdaccio/issues/883) ([ec744ea](https://github.com/verdaccio/verdaccio/commit/ec744ea))
+* unpublish version does not remove it from timeline ([61e62bd](https://github.com/verdaccio/verdaccio/commit/61e62bd))
+
+
+### Features
+
+* adds gravatar support for maintainers ([4df6b3b](https://github.com/verdaccio/verdaccio/commit/4df6b3b))
+* adds option to set scope in webui instructions header ([f9e9383](https://github.com/verdaccio/verdaccio/commit/f9e9383)), closes [#593](https://github.com/verdaccio/verdaccio/issues/593)
+
+
+<a name="3.4.1"></a>
+## [3.4.1](https://github.com/verdaccio/verdaccio/compare/v3.4.0...v3.4.1) (2018-07-27)
+
+
+### Bug Fixes
+
+* solves dependency bug for one dependency ([#857](https://github.com/verdaccio/verdaccio/issues/857)) ([f9c9c44](https://github.com/verdaccio/verdaccio/commit/f9c9c44))
+
+
+
+<a name="3.4.0"></a>
+# [3.4.0](https://github.com/verdaccio/verdaccio/compare/v3.3.0...v3.4.0) (2018-07-27)
+
+
+### Bug Fixes
+
+* Authentication Plugins / plugin[method] is not a function ([0a3870e](https://github.com/verdaccio/verdaccio/commit/0a3870e))
+
+
+### Features
+
+* adds base64 support in webui token ([#840](https://github.com/verdaccio/verdaccio/issues/840)) ([4a7a94a](https://github.com/verdaccio/verdaccio/commit/4a7a94a))
+
+
+
+<a name="3.3.0"></a>
+# [3.3.0](https://github.com/verdaccio/verdaccio/compare/v3.2.0...v3.3.0) (2018-07-22)
+
+
+### Bug Fixes
+
+* add RemoteUser type for auth ([2f4dbe8](https://github.com/verdaccio/verdaccio/commit/2f4dbe8))
+* adds webpack banner plugin to tag bundles with version ([#784](https://github.com/verdaccio/verdaccio/issues/784)) ([dac28d3](https://github.com/verdaccio/verdaccio/commit/dac28d3))
+* dynamic date generation for <Package /> component test ([e5ea0c2](https://github.com/verdaccio/verdaccio/commit/e5ea0c2))
+* ignores http_proxy and https_proxy ([d04dc8d](https://github.com/verdaccio/verdaccio/commit/d04dc8d))
+* improves regex for ascii and test ([#461](https://github.com/verdaccio/verdaccio/issues/461)) ([be3968f](https://github.com/verdaccio/verdaccio/commit/be3968f))
+* license field alignment on web ui ([#761](https://github.com/verdaccio/verdaccio/issues/761)) ([9fa523a](https://github.com/verdaccio/verdaccio/commit/9fa523a))
+* open external tabs in new tabs ([25e8e60](https://github.com/verdaccio/verdaccio/commit/25e8e60))
+* package.json to reduce vulnerabilities ([389e306](https://github.com/verdaccio/verdaccio/commit/389e306))
+* solve seo issue [#760](https://github.com/verdaccio/verdaccio/issues/760) ([62d3033](https://github.com/verdaccio/verdaccio/commit/62d3033))
+* wrong auth plugin signature ([5c2c414](https://github.com/verdaccio/verdaccio/commit/5c2c414))
+
+
+### Features
+
+* adds support for ascii-doc preview in readme ([#464](https://github.com/verdaccio/verdaccio/issues/464)) ([29bb57a](https://github.com/verdaccio/verdaccio/commit/29bb57a))
+* adds support for external plugin directory ([#532](https://github.com/verdaccio/verdaccio/issues/532)) ([11dcf79](https://github.com/verdaccio/verdaccio/commit/11dcf79))
+* capitalises logged in username ([#752](https://github.com/verdaccio/verdaccio/issues/752)) ([0e21e35](https://github.com/verdaccio/verdaccio/commit/0e21e35))
+
+
+
+<a name="3.2.0"></a>
+# [3.2.0](https://github.com/verdaccio/verdaccio/compare/v3.1.2...v3.2.0) (2018-06-15)
+
+
+### Bug Fixes
+
+* allowing to allow replace static enpoint in case of reverse proxy ([90803c7](https://github.com/verdaccio/verdaccio/commit/90803c7))
+* fixed linebreaks lint issue ([9e3ab09](https://github.com/verdaccio/verdaccio/commit/9e3ab09))
+* normalize package was broken [#758](https://github.com/verdaccio/verdaccio/issues/758) ([3717ad4](https://github.com/verdaccio/verdaccio/commit/3717ad4))
+
+
+### Features
+
+* Add basic package infos and resource links to sidebar. ([7bd3a4f](https://github.com/verdaccio/verdaccio/commit/7bd3a4f))
+* add published package support to template ([4245636](https://github.com/verdaccio/verdaccio/commit/4245636))
+* added information about package publisher for notifications ([1ca5298](https://github.com/verdaccio/verdaccio/commit/1ca5298))
+
+
+
+<a name="3.1.2"></a>
+## [3.1.2](https://github.com/verdaccio/verdaccio/compare/v3.1.1...v3.1.2) (2018-06-11)
+
+
+### Bug Fixes
+
+* configure fetch to send cookies ([98ac855](https://github.com/verdaccio/verdaccio/commit/98ac855))
+* search implementation depends now of each plugin ([8f0508f](https://github.com/verdaccio/verdaccio/commit/8f0508f))
+
+
+
+<a name="3.1.1"></a>
+## [3.1.1](https://github.com/verdaccio/verdaccio/compare/v3.1.0...v3.1.1) (2018-06-07)
+
+
+### Bug Fixes
+
+* migration issue with old storage [#740](https://github.com/verdaccio/verdaccio/issues/740) ([e977d50](https://github.com/verdaccio/verdaccio/commit/e977d50))
+
+
+
+<a name="3.1.0"></a>
+# [3.1.0](https://github.com/verdaccio/verdaccio/compare/v3.0.2...v3.1.0) (2018-06-05)
+
+
+### Bug Fixes
+
+* groups are not array were not handled ([a62688f](https://github.com/verdaccio/verdaccio/commit/a62688f))
+* improve bundle size ([a79d87b](https://github.com/verdaccio/verdaccio/commit/a79d87b))
+
+
+### Features
+
+* add published date and license on ui ([ecbe616](https://github.com/verdaccio/verdaccio/commit/ecbe616))
+* using code splitting on routers ([0af6f5a](https://github.com/verdaccio/verdaccio/commit/0af6f5a))
+
+
+
+<a name="3.0.2"></a>
+## [3.0.2](https://github.com/verdaccio/verdaccio/compare/v3.0.1...v3.0.2) (2018-05-31)
+
+
+### Bug Fixes
+
+* enable audit by default ([8df186c](https://github.com/verdaccio/verdaccio/commit/8df186c))
+* skip problematic unit test ([c920fa3](https://github.com/verdaccio/verdaccio/commit/c920fa3))
+
+
+
+<a name="3.0.1"></a>
+## [3.0.1](https://github.com/verdaccio/verdaccio/compare/v3.0.0...v3.0.1) (2018-05-31)
+
+
+### Bug Fixes
+
+* ui fails to render whether time is missing ([f575b48](https://github.com/verdaccio/verdaccio/commit/f575b48))
+
+
+
+<a name="3.0.0"></a>
+# [3.0.0](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.12...v3.0.0) (2018-05-30)
+
+
+### Bug Fixes
+
+* favicon refers to .png while only .ico exists [#681](https://github.com/verdaccio/verdaccio/issues/681) ([11e6f9f](https://github.com/verdaccio/verdaccio/commit/11e6f9f))
+* web-ui css were not being minimized ([3168a76](https://github.com/verdaccio/verdaccio/commit/3168a76))
+
+
+### Features
+
+* new verdaccio skin to webui ([b8b2612](https://github.com/verdaccio/verdaccio/commit/b8b2612))
+
+
+
+<a name="3.0.0-beta.12"></a>
+# [3.0.0-beta.12](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.11...v3.0.0-beta.12) (2018-05-23)
+
+
+### Features
+
+* add node 10 support for test and docker ([cee2564](https://github.com/verdaccio/verdaccio/commit/cee2564))
+* support for npm audit fix [#689](https://github.com/verdaccio/verdaccio/issues/689) ([f9f180d](https://github.com/verdaccio/verdaccio/commit/f9f180d))
+
+
+
+<a name="3.0.0-beta.11"></a>
+# [3.0.0-beta.11](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.10...v3.0.0-beta.11) (2018-05-20)
+
+
+### Bug Fixes
+
+* **docs:** clarify usage of uplink auth property ([01f7969](https://github.com/verdaccio/verdaccio/commit/01f7969))
+* remove useless warning ignoring tag ([0aeac06](https://github.com/verdaccio/verdaccio/commit/0aeac06))
+
+
+
+<a name="3.0.0-beta.10"></a>
+# [3.0.0-beta.10](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.9...v3.0.0-beta.10) (2018-05-14)
+
+
+### Bug Fixes
+
+* avoid issues with missing token [#693](https://github.com/verdaccio/verdaccio/issues/693) ([08f6a64](https://github.com/verdaccio/verdaccio/commit/08f6a64))
+
+
+### Features
+
+* return latest dis-tag readme whether main metadata readme is emtpy ([e75376b](https://github.com/verdaccio/verdaccio/commit/e75376b))
+
+
+
+<a name="3.0.0-beta.9"></a>
+# [3.0.0-beta.9](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.8...v3.0.0-beta.9) (2018-05-13)
+
+
+### Bug Fixes
+
+* update dependencies [#691](https://github.com/verdaccio/verdaccio/issues/691) ([d07bfc5](https://github.com/verdaccio/verdaccio/commit/d07bfc5))
+* vulnerabilities dependencies ([d4722d6](https://github.com/verdaccio/verdaccio/commit/d4722d6))
+* vulnerabilities with lodash ([bcf128e](https://github.com/verdaccio/verdaccio/commit/bcf128e))
+
+
+
+<a name="3.0.0-beta.8"></a>
+# [3.0.0-beta.8](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.7...v3.0.0-beta.8) (2018-05-09)
+
+
+### Bug Fixes
+
+* allow do not include storage if uses a storage plugin ([4332ffc](https://github.com/verdaccio/verdaccio/commit/4332ffc))
+* disable autocomplete on search so it doesn't default to username ([2e41d9f](https://github.com/verdaccio/verdaccio/commit/2e41d9f))
+* make enter key submit the login modal form ([f89b498](https://github.com/verdaccio/verdaccio/commit/f89b498))
+
+
+
+<a name="3.0.0-beta.7"></a>
+# [3.0.0-beta.7](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.6...v3.0.0-beta.7) (2018-04-30)
+
+
+### Bug Fixes
+
+* beta header ([102fa22](https://github.com/verdaccio/verdaccio/commit/102fa22))
+* enforce maximum amount of users for new users only ([4d19d7d](https://github.com/verdaccio/verdaccio/commit/4d19d7d))
+* package command build:webui breaks on non-unix platforms ([4ec81d4](https://github.com/verdaccio/verdaccio/commit/4ec81d4))
+* restore plugin loader ([3c1c3ca](https://github.com/verdaccio/verdaccio/commit/3c1c3ca))
+* should fix flow performance issues ([453891b](https://github.com/verdaccio/verdaccio/commit/453891b))
+* update memory plugin ([a7aa77a](https://github.com/verdaccio/verdaccio/commit/a7aa77a))
+* update memory plugin for e2e ([df418a8](https://github.com/verdaccio/verdaccio/commit/df418a8))
+* update memory storage plugin ([a75b7bd](https://github.com/verdaccio/verdaccio/commit/a75b7bd))
+* update types ([4d5e8aa](https://github.com/verdaccio/verdaccio/commit/4d5e8aa))
+* update uplinks auth header ([3f6eeb4](https://github.com/verdaccio/verdaccio/commit/3f6eeb4)), closes [#670](https://github.com/verdaccio/verdaccio/issues/670)
+* upgrade webpack to v4. fixes [[#544](https://github.com/verdaccio/verdaccio/issues/544)] ([b1c631c](https://github.com/verdaccio/verdaccio/commit/b1c631c))
+
+
+
+<a name="3.0.0-beta.6"></a>
+# [3.0.0-beta.6](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.5...v3.0.0-beta.6) (2018-04-03)
+
+
+### Bug Fixes
+
+* api login use case when user already exist ([6491db4](https://github.com/verdaccio/verdaccio/commit/6491db4))
+
+
+### Features
+
+* update verdaccio-htpasswd plugin ([3a9c994](https://github.com/verdaccio/verdaccio/commit/3a9c994))
+
+
+
+<a name="3.0.0-beta.5"></a>
+# [3.0.0-beta.5](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.4...v3.0.0-beta.5) (2018-03-26)
+
+
+### Bug Fixes
+
+* adds debounce to search api call ([aa60e1d](https://github.com/verdaccio/verdaccio/commit/aa60e1d))
+* **test:** replaces LocaleString with date-nfs/format ([0d3cf84](https://github.com/verdaccio/verdaccio/commit/0d3cf84))
+* correct linter errors and warnings ([5c5af27](https://github.com/verdaccio/verdaccio/commit/5c5af27))
+* display logo ([cbf4b9c](https://github.com/verdaccio/verdaccio/commit/cbf4b9c))
+* login with fetch ([f338ee4](https://github.com/verdaccio/verdaccio/commit/f338ee4))
+* unit test and better error handling ([2022a30](https://github.com/verdaccio/verdaccio/commit/2022a30))
+
+
+### Features
+
+* remove web logout endpoint ([badc707](https://github.com/verdaccio/verdaccio/commit/badc707))
+
+
+
+<a name="3.0.0-beta.4"></a>
+# [3.0.0-beta.4](https://github.com/verdaccio/verdaccio/compare/v3.0.0-beta.2...v3.0.0-beta.4) (2018-03-18)
+
+
+### Bug Fixes
+
+* add teardown for unit test ([036120b](https://github.com/verdaccio/verdaccio/commit/036120b))
+
+
+### Features
+
+* add strict_ssl_option, fixes [#587](https://github.com/verdaccio/verdaccio/issues/587) ([f0fef44](https://github.com/verdaccio/verdaccio/commit/f0fef44))
+
+<a name="3.0.0-alpha.0"></a>
+# [3.0.0-alpha.0](https://github.com/verdaccio/verdaccio/compare/v3.0.0-0...v3.0.0-alpha.0) (2018-01-07)
+
+
+<a name="2.7.2"></a>
+## [2.7.2](https://github.com/verdaccio/verdaccio/compare/v2.7.1...v2.7.2) (2018-01-05)
+
+
+### Bug Fixes
+
+* marked dependency to latest ([75bf2a8](https://github.com/verdaccio/verdaccio/commit/75bf2a8))
+
+
+
+<a name="2.7.1"></a>
+## [2.7.1](https://github.com/verdaccio/verdaccio/compare/v2.7.0...v2.7.1) (2017-12-20)
+
+
+### Bug Fixes
+
+* notification for multiple endpoints ([b605d1e](https://github.com/verdaccio/verdaccio/commit/b605d1e))
+
+
+
+<a name="2.7.0"></a>
+# [2.7.0](https://github.com/verdaccio/verdaccio/compare/v2.6.6...v2.7.0) (2017-12-05)
+
+
+### Features
+
+* Add middleware plugins from fl4re/sinopia ([374a5e8](https://github.com/verdaccio/verdaccio/commit/374a5e8))
+* Log-rotation used to require a full restart of the application  ([baa4763](https://github.com/verdaccio/verdaccio/commit/baa4763)
+* Add Kubernetes instructions ([ef1bd34](https://github.com/verdaccio/verdaccio/commit/ef1bd34)
+* Match shell title with web title ([ddcc493](https://github.com/verdaccio/verdaccio/commit/ddcc493)
+
+
+<a name="2.6.6"></a>
+## [2.6.6](https://github.com/verdaccio/verdaccio/compare/v2.6.5...v2.6.6) (2017-11-08)
+
+
+### Bug Fixes
+
+* :bug: incorrect logo url with slash at the end of `url_prefix` ([859eccb](https://github.com/verdaccio/verdaccio/commit/859eccb))
+
+
+
+<a name="2.6.5"></a>
+## [2.6.5](https://github.com/verdaccio/verdaccio/compare/v2.6.4...v2.6.5) (2017-11-05)
+
+
+### Bug Fixes
+
+* upgrade node to fix long standing socket timeout issue ([bcc13ac](https://github.com/verdaccio/verdaccio/commit/bcc13ac))
+
+
+
+<a name="2.6.4"></a>
+## [2.6.4](https://github.com/verdaccio/verdaccio/compare/v2.6.3...v2.6.4) (2017-10-31)
+
+
+### Bug Fixes
+
+* :bug: incorrect resource and registry url while install on sub directory ([67e97a1](https://github.com/verdaccio/verdaccio/commit/67e97a1))
+
+
+
+<a name="2.6.3"></a>
+## [2.6.3](https://github.com/verdaccio/verdaccio/compare/v2.6.2...v2.6.3) (2017-10-21)
+
+
+### Bug Fixes
+
+* Check if socket exists before removing ([e916a0f](https://github.com/verdaccio/verdaccio/commit/e916a0f))
+
+
+
+<a name="2.6.2"></a>
+## [2.6.2](https://github.com/verdaccio/verdaccio/compare/v2.6.1...v2.6.2) (2017-10-21)
+
+
+### Bug Fixes
+
+* Remove unix socket before listen ([d42a41e](https://github.com/verdaccio/verdaccio/commit/d42a41e))
+
+
+
+<a name="2.6.1"></a>
+## [2.6.1](https://github.com/verdaccio/verdaccio/compare/v2.6.0...v2.6.1) (2017-10-19)
+
+
+
+<a name="2.6.0"></a>
+# [2.6.0](https://github.com/verdaccio/verdaccio/compare/v2.5.1...v2.6.0) (2017-10-18)
+
+
+### Bug Fixes
+
+* plugin loader with logs ([d6ed202](https://github.com/verdaccio/verdaccio/commit/d6ed202))
+
+
+### Features
+
+* add pfx support for https ([c84d567](https://github.com/verdaccio/verdaccio/commit/c84d567))
+
+
+
+<a name="2.5.1"></a>
+## [2.5.1](https://github.com/verdaccio/verdaccio/compare/v2.5.0...v2.5.1) (2017-10-01)
+
+
+### Bug Fixes
+
+* fix docker build failure due breaking changes in yarn ([c62e90f](https://github.com/verdaccio/verdaccio/commit/c62e90f))
+
+
+
+<a name="2.5.0"></a>
+# [2.5.0](https://github.com/verdaccio/verdaccio/compare/v2.3.6...v2.5.0) (2017-10-01)
+
+
+### Bug Fixes
+
+* :bug: check error code to prevent data loss ([5d73dca](https://github.com/verdaccio/verdaccio/commit/5d73dca)) fix [#329](https://github.com/verdaccio/verdaccio/issues/329)
+* Fix  [#334](https://github.com/verdaccio/verdaccio/issues/334) UI failure on IE 11, add suppor for old browsers. ([f1f15be](https://github.com/verdaccio/verdaccio/commit/f1f15be))
+
+
+### Features
+
+* header authorization uplink ([7baf7cb](https://github.com/verdaccio/verdaccio/commit/7baf7cb))
+
+
+<a name="2.4.0"></a>
+# [2.4.0](https://github.com/verdaccio/verdaccio/compare/v2.3.6...v2.4.0) (2017-09-23)
+
+
+### Bug Fixes
+
+* :bug: check error code to prevent data loss ([5d73dca](https://github.com/verdaccio/verdaccio/commit/5d73dca))
+* :bug: check error code to prevent data loss ([93aae05](https://github.com/verdaccio/verdaccio/commit/93aae05))
+* :bug: Package metadata cache not work ([4d6a447](https://github.com/verdaccio/verdaccio/commit/4d6a447))
+* Fixed bug with Maximum call stack size exceeded on packages web API ([#326](https://github.com/verdaccio/verdaccio/pull/326))
+* fix: :bug: Package metadata cache does not work ([#317](https://github.com/verdaccio/verdaccio/pull/317))
+* Debug log color in terminal is too dark ([#311](https://github.com/verdaccio/verdaccio/pull/311))
+* docs: Add new sections to documentation ([#308](https://github.com/verdaccio/verdaccio/pull/308))
+* Remove from web section not longer valid properties ([#307](https://github.com/verdaccio/verdaccio/pull/307)) ([#309](https://github.com/verdaccio/verdaccio/pull/309))
+* Fix possible data loss upstream ([#306](https://github.com/verdaccio/verdaccio/pull/306)) ([#300](https://github.com/verdaccio/verdaccio/pull/300))
+
+
+### Features
+
+* Update node alpine version to 8.4.0 ([3f96ce3](https://github.com/verdaccio/verdaccio/commit/3f96ce3))
+
+
+
+<a name="2.3.6"></a>
+## [2.3.6](https://github.com/verdaccio/verdaccio/compare/v2.3.5...v2.3.6) (2017-08-17)
+
+
+### Bug Fixes
+
+* link was broken ([a9481cc](https://github.com/verdaccio/verdaccio/commit/a9481cc))
+* Correct accept header set for registry requests ([#295](https://github.com/verdaccio/verdaccio/pull/295))
+* Update SSL documentation ([#296](https://github.com/verdaccio/verdaccio/pull/296))
+* Fix auth process to check against username also and not just groups ([#293](https://github.com/verdaccio/verdaccio/pull/293))
+
+
+
+<a name="2.3.5"></a>
+## [2.3.5](https://github.com/verdaccio/verdaccio/compare/v2.3.4...v2.3.5) (2017-08-14)
+
+
+### Bug Fixes
+
+* configuration files inconsistencies, add unit test ([644c098](https://github.com/verdaccio/verdaccio/commit/644c098))
+* Remove accept header that seems cause issues [#285](https://github.com/verdaccio/verdaccio/issues/285) [#289](https://github.com/verdaccio/verdaccio/issues/289) and npm search fails ([fab8391](https://github.com/verdaccio/verdaccio/commit/fab8391))
+
+
+
+<a name="2.3.4"></a>
+## [2.3.4](https://github.com/verdaccio/verdaccio/compare/v2.3.3...v2.3.4) (2017-07-29)
+
+
+### Bug Fixes
+
+* Docker image fails due lock file localhost references ([901a7be](https://github.com/verdaccio/verdaccio/commit/901a7be))
+
+
+
+<a name="2.3.3"></a>
+## [2.3.3](https://github.com/verdaccio/verdaccio/compare/v2.3.2...v2.3.3) (2017-07-29)
+
+
+### Bug Fixes
+
+* refactor [#268](https://github.com/verdaccio/verdaccio/issues/268) in a better way, amended to elegant way ([94fb6ad](https://github.com/verdaccio/verdaccio/commit/94fb6ad))
+
+
+
+<a name="2.3.2"></a>
+## [2.3.2](https://github.com/verdaccio/verdaccio/compare/v2.3.0...v2.3.2) (2017-07-28)
+
+
+### Bug Fixes
+
+* :bug: detail page can't handle scoped package ([1c9fbfc](https://github.com/verdaccio/verdaccio/commit/1c9fbfc))
+* [#268](https://github.com/verdaccio/verdaccio/issues/268) remove the accept header that avoids request with some regiestries ([e7dcf3c](https://github.com/verdaccio/verdaccio/commit/e7dcf3c))
+* [#78](https://github.com/verdaccio/verdaccio/issues/78) add new setting to allow publish when uplinks are offline ([430425c](https://github.com/verdaccio/verdaccio/commit/430425c))
+* broken link ([9fb0e14](https://github.com/verdaccio/verdaccio/commit/9fb0e14))
+* lint warning ([d0afe78](https://github.com/verdaccio/verdaccio/commit/d0afe78))
+* Param web.title from config.yaml does not work on docker image [#265](https://github.com/verdaccio/verdaccio/issues/265) ([b1a396d](https://github.com/verdaccio/verdaccio/commit/b1a396d))
+* undefined check ([ff96d2e](https://github.com/verdaccio/verdaccio/commit/ff96d2e))
+
+
+
+## 2.3.1 (July 25, 2017)
+
+- bug: Detail page can't handle scoped package - [#261](https://github.com/verdaccio/verdaccio/pull/261)
+- bug: can't publish a private package to verdaccio while offline - [#223](https://github.com/verdaccio/verdaccio/pull/223)
+- refactor: use light version of syntax highlighter - [#260](https://github.com/verdaccio/verdaccio/pull/260)
+
+## 2.3.0 (July 22, 2017)
+
+- feature: Refactor User Interface - [#220](https://github.com/verdaccio/verdaccio/pull/220)
+
+## 2.2.7 (July 18, 2017)
+
+- bug: fix running behind of loadbalancer with TLS termination - [#254](https://github.com/verdaccio/verdaccio/pull/254)
+
+
+## 2.2.6 (July 13, 2017)
+
+- build: update node version due security update announcement - [#251](https://github.com/verdaccio/verdaccio/pull/251)
+
+## 2.2.5 (July 4, 2017)
+
+- Fixed adding the verdaccio user into the group - [#241](https://github.com/verdaccio/verdaccio/pull/241)
+
+## 2.2.3 (July 4, 2017)
+
+- Updated Dockerfile & added proper signal handling - [#239](https://github.com/verdaccio/verdaccio/pull/239)
+
+## 2.2.2 (July 2, 2017)
+
+- Improve Docker Build - [#181](https://github.com/verdaccio/verdaccio/pull/181)
+- Bugfix #73 `npm-latest` support - [#228](https://github.com/verdaccio/verdaccio/pull/228)
+- Add [documentation](https://github.com/verdaccio/verdaccio/tree/master/wiki) - [#229](https://github.com/verdaccio/verdaccio/pull/229)   
+
+## 2.2.1 (June 17, 2017)
+
+- config section moved up, some keywords added - [#211](https://github.com/verdaccio/verdaccio/pull/211)
+- docs: update docs with behind reverse proxy - [#214](https://github.com/verdaccio/verdaccio/pull/214)
+- Add remote ip to request log - [#216](https://github.com/verdaccio/verdaccio/pull/216)
+
+## 2.2.0 (June 8, 2017)
+- Allow url_prefix to be only the path - ([@BartDubois ]((https://github.com/BartDubois))) in [#197](https://github.com/verdaccio/verdaccio/pull/197)
+- Apache reverse proxy configuration - ([@mysiar ]((https://github.com/mysiar))) in [#198](https://github.com/verdaccio/verdaccio/pull/198)
+- don't blindly clobber local dist-tags - ([@rmg ]((https://github.com/rmg))) in [#206](https://github.com/verdaccio/verdaccio/pull/206)
+- Adds cache option to uplinks - ([@silkentrance ]((https://github.com/silkentrance))) in [#132](https://github.com/verdaccio/verdaccio/pull/132)
+
+## 2.1.7 (May 14, 2017)
+- Fixed publish fail in YARN - ([@W1U02]((https://github.com/W1U02)) in [#183](https://github.com/verdaccio/verdaccio/pull/183)
+
+## 2.1.6 (May 12, 2017)
+- Fix https certificates safety check - ([@juanpicado]((https://github.com/juanpicado))) in [#189](https://github.com/verdaccio/verdaccio/pull/189)
+- Fix upstream search not work with gzip - ([@Meeeeow](https://github.com/Meeeeow) in [#170](https://github.com/verdaccio/verdaccio/pull/170))
+- Add additional requirement to output message - ([@marnel ](https://github.com/marnel) in [#184](https://github.com/verdaccio/verdaccio/pull/184))
+- Implement npm ping endpoint - ([@juanpicado]((https://github.com/juanpicado))) in [#179](https://github.com/verdaccio/verdaccio/pull/179)
+- Add support for multiple notification endpoints to existing webhook - ([@ryan-codingintrigue]((https://github.com/ryan-codingintrigue))) 
+in [#108](https://github.com/verdaccio/verdaccio/pull/108)
+
+
+
+## 2.1.5 (April 22, 2017)
+- fix upstream search - ([@Meeeeow](https://github.com/Meeeeow) in [#166](https://github.com/verdaccio/verdaccio/pull/166))
+- Fix search feature - ([@Meeeeow](https://github.com/Meeeeow) in [#163](https://github.com/verdaccio/verdaccio/pull/163))
+- add docs about run behind proxy - ([@Meeeeow](https://github.com/Meeeeow) in [#160](https://github.com/verdaccio/verdaccio/pull/160))
+
+## 2.1.4 (April 13, 2017)
+- Added Nexus Repository OSS as similar existing software - ([@nedelenbos030](https://github.com/nedelenbos) in [#147](https://github.com/verdaccio/verdaccio/pull/147))
+- Increase verbose on notify request - ([@juanpicado](https://github.com/juanpicado) in [#153](https://github.com/verdaccio/verdaccio/pull/153))
+- Add fallback support to previous config files - ([@juanpicado](https://github.com/juanpicado) in [#155](https://github.com/verdaccio/verdaccio/pull/155))
+- Allows retrieval of all local package contents via http://server/-/search/* - ([@Verikon](https://github.com/Verikon) in [#152](https://github.com/verdaccio/verdaccio/pull/155))
+
+## 2.1.3 (March 29, 2017)
+- [GH-83] create systemd service - ([@030](https://github.com/030) in [#89](https://github.com/verdaccio/verdaccio/pull/89))
+- optional scope in the readme package name. - ([@psychocode](https://github.com/psychocode) in [#136](https://github.com/verdaccio/verdaccio/pull/136))
+- Added docker image for rpi - ([@danielo515](https://github.com/danielo515) in [#137](https://github.com/verdaccio/verdaccio/pull/137))
+- Allow configuring a tagline that is displayed on the webpage between. ([@jachstet-sea](https://github.com/jachstet-sea) in [#143](https://github.com/verdaccio/verdaccio/pull/143))
+
+## 2.1.2 (March 9, 2017)
+- Contribute guidelines - ([@juanpicado](https://github.com/juanpicado) in [#133](https://github.com/verdaccio/verdaccio/pull/133))
+- fix(plugin-loader): plugins verdaccio-* overwrite by sinopia- ([@Alexandre-io](https://github.com/Alexandre-io) in [#129](https://github.com/verdaccio/verdaccio/pull/129))
+
+## 2.1.1 (February 7, 2017)
+
+- [GH-86] updated readme to point to new chef cookbook ([@kgrubb](https://github.com/kgrubb) in [#117](https://github.com/verdaccio/verdaccio/pull/117))
+- [GH-88] rename to Verdaccio instead of Sinopia ([@kgrubb](https://github.com/kgrubb) in [#93](https://github.com/verdaccio/verdaccio/pull/93))
+- Unit testing coverage ([@juanpicado](https://github.com/juanpicado) in [#116](https://github.com/verdaccio/verdaccio/issues/116))
+- Allow htpasswd-created users to log in [@imsnif](https://github.com/imsnif) in [#112](https://github.com/verdaccio/verdaccio/issues/112))
+- remove travis io.js support ([@juanpicado](https://github.com/juanpicado) in [#115](https://github.com/verdaccio/verdaccio/issues/115))
+- rename clean up ([@juanpicado](https://github.com/juanpicado) in [#114](https://github.com/verdaccio/verdaccio/issues/114))
+- _npmUser / author not showing up ([@juanpicado](https://github.com/juanpicado) in [#65](https://github.com/verdaccio/verdaccio/issues/65))
+- Docs: correct config attribute `proxy_access` ([@robertgroh](https://github.com/robertgroh) in [#96](https://github.com/verdaccio/verdaccio/pull/96))
+- Problem with docker.yaml ([@josedepaz](https://github.com/josedepaz) in [#72](https://github.com/verdaccio/verdaccio/pull/72)) 
+- Prevent logging of user and password ([@tlvince](https://github.com/tlvince) in [#94](https://github.com/verdaccio/verdaccio/pull/94))
+- Updated README.md to reflect the availability of the docker image ([@jmwilkinson](https://github.com/jmwilkinson)) in [#71](https://github.com/verdaccio/verdaccio/pull/71)) 
+
+## 2.1.0 (October 11, 2016)
+
+- Use __dirname to resolve local plugins ([@aledbf](https://github.com/aledbf) in [#25](https://github.com/verdaccio/verdaccio/pull/25))
+- Fix npm cli logout ([@plitex](https://github.com/plitex) in [#47](https://github.com/verdaccio/verdaccio/pull/47))
+- Add log format: pretty-timestamped ([@jachstet-sea](https://github.com/jachstet-sea) in [#68](https://github.com/verdaccio/verdaccio/pull/68))
+- Allow adding/overriding HTTP headers of uplinks via config ([@jachstet-sea](https://github.com/jachstet-sea) in [#67](https://github.com/verdaccio/verdaccio/pull/67))
+- Update Dockerfile to fix failed start ([@denisbabineau](https://github.com/denisbabineau) in [#62](https://github.com/verdaccio/verdaccio/pull/62))
+- Update the configs to fully support proxying scoped packages ([@ChadKillingsworth](https://github.com/ChadKillingsworth) in [#60](https://github.com/verdaccio/verdaccio/pull/60))
+- Prevent the server from crashing if a repo is accessed that the user does not have access to ([@crowebird](https://github.com/crowebird) in [#58](https://github.com/verdaccio/verdaccio/pull/58))
+- Hook system, for integration into things like slack
+- Register entry partial even if custom template is provided ([@plitex](https://github.com/plitex) in [#46](https://github.com/verdaccio/verdaccio/pull/46))
+- Rename process to verdaccio ([@juanpicado](https://github.com/juanpicado) in [#57](https://github.com/verdaccio/verdaccio/pull/57))
+
+
+## 7 Jun 2015, version 1.4.0
+
+- avoid sending X-Forwarded-For through proxies (issues [#19](https://github.com/rlidwka/sinopia/issues/19), [#254](https://github.com/rlidwka/sinopia/issues/254))
+- fix multiple issues in search (issues [#239](https://github.com/rlidwka/sinopia/issues/239), [#253](https://github.com/rlidwka/sinopia/pull/253))
+- fix "maximum stack trace exceeded" errors in auth (issue [#258](https://github.com/rlidwka/sinopia/issues/258))
+
+## 10 May 2015, version 1.3.0
+
+- add dist-tags endpoints (issue [#211](https://github.com/rlidwka/sinopia/issues/211))
+
+## 22 Apr 2015, version 1.2.2
+
+- fix access control regression in `1.2.1` (issue [#238](https://github.com/rlidwka/sinopia/issues/238))
+- add a possibility to bind on unix sockets (issue [#237](https://github.com/rlidwka/sinopia/issues/237))
+
+## 11 Apr 2015, version 1.2.1
+
+- added more precise authorization control to auth plugins (issue [#207](https://github.com/rlidwka/sinopia/pull/207))
+
+## 29 Mar 2015, version 1.1.0
+
+- add a possibility to listen on multiple ports (issue [#172](https://github.com/rlidwka/sinopia/issues/172))
+- added https support (issues [#71](https://github.com/rlidwka/sinopia/issues/71), [#166](https://github.com/rlidwka/sinopia/issues/166))
+- added an option to use a custom template for web UI (issue [#208](https://github.com/rlidwka/sinopia/pull/208))
+- remove "from" and "resolved" fields from shrinkwrap (issue [#204](https://github.com/rlidwka/sinopia/issues/204))
+- fix hanging when rendering readme (issue [#206](https://github.com/rlidwka/sinopia/issues/206))
+- fix logger-related crash when using sinopia as a library
+- all requests to uplinks should now have proper headers
+
+## 12 Feb 2015, version 1.0.1
+
+- fixed issue with `max_users` option (issue [#184](https://github.com/rlidwka/sinopia/issues/184))
+- fixed issue with not being able to disable the web interface (issue [#195](https://github.com/rlidwka/sinopia/pull/195))
+- fixed 500 error while logging in with npm (issue [#200](https://github.com/rlidwka/sinopia/pull/200))
+
+## 26 Jan 2015, version 1.0.0
+
+- switch markdown parser from `remarkable` to `markdown-it`
+- update `npm-shrinkwrap.json`
+- now downloading tarballs from upstream using the same protocol as for metadata (issue [#166](https://github.com/rlidwka/sinopia/issues/166))
+
+## 22 Dec 2014, version 1.0.0-beta.2
+
+- fix windows behavior when `$HOME` isn't set (issue [#177](https://github.com/rlidwka/sinopia/issues/177))
+- fix sanitization for highlighted code blocks in readme (issue [render-readme/#1](https://github.com/rlidwka/render-readme/issues/1))
+
+## 15 Dec 2014, version 1.0.0-beta
+
+- Markdown rendering is now a lot safer (switched to remarkable+sanitizer).
+- Header in web interface is now static instead of fixed.
+- `GET /-/all?local` now returns list of all local packages (issue [#179](https://github.com/rlidwka/sinopia/pull/179))
+
+## 5 Dec 2014, version 1.0.0-alpha.3
+
+- Fixed an issue with scoped packages in tarballs
+
+## 25 Nov 2014, version 1.0.0-alpha
+
+- Config file is now created in `$XDG_CONFIG_HOME` instead of current directory. 
+
+  It is printed to stdout each time sinopia starts, so you hopefully won't have any trouble locating it.
+
+  The change is made so sinopia will pick up the same config no matter which directory it is started from.
+
+- Default config file is now a lot shorter, and it is very permissive by default. You could use sinopia without modifying it on your own computer, but definitely should change it on production.
+
+- Added auth tokens. For now, auth token is just a username+password encrypted for security reasons, so it isn't much different from basic auth, but allows to avoid "always-auth" npm setting.
+
+- Added scoped packages.
+
+  Please note that default `*` mask won't apply to them. You have to use masks like `@scope/*` to match scoped packages, or `**` to match everything.
+
+- Enabled web interface by default. Wow, it looks almost ready now!
+
+- All dependencies are bundled now, so uncompatible changes in 3rd party stuff in the future won't ruin the day.
+
+## 1 Nov 2014, version 0.13.2
+
+- fix `EPERM`-related crashes on windows (issue [#67](https://github.com/rlidwka/sinopia/issues/67))
+
+## 22 Oct 2014, version 0.13.0
+
+- web interface:
+  - web page layout improved (issue [#141](https://github.com/rlidwka/sinopia/pull/141))
+  - latest version is now displayed correctly (issues [#120](https://github.com/rlidwka/sinopia/issues/120), [#123](https://github.com/rlidwka/sinopia/issues/123), [#143](https://github.com/rlidwka/sinopia/pull/143))
+  - fixed web interface working behind reverse proxy (issues [#145](https://github.com/rlidwka/sinopia/issues/145), [#147](https://github.com/rlidwka/sinopia/issues/147))
+
+## 2 Oct 2014, version 0.12.1
+
+- web interface:
+  - update markdown CSS (issue [#137](https://github.com/rlidwka/sinopia/pull/137))
+  - jquery is now served locally (issue [#133](https://github.com/rlidwka/sinopia/pull/133))
+
+- bugfixes:
+  - fix "offset out of bounds" issues (issue [sinopia-htpasswd/#2](https://github.com/rlidwka/sinopia-htpasswd/issues/2))
+  - "max_users" in htpasswd plugin now work correctly (issue [sinopia-htpasswd/#3](https://github.com/rlidwka/sinopia-htpasswd/issues/3))
+  - fix `ENOTDIR, open '.sinopia-db.json'` error in npm search (issue [#122](https://github.com/rlidwka/sinopia/issues/122))
+
+## 25 Sep 2014, version 0.12.0
+
+- set process title to `sinopia`
+
+- web interface bugfixes:
+  - save README data for each package (issue [#100](https://github.com/rlidwka/sinopia/issues/100))
+  - fix crashes related to READMEs (issue [#128](https://github.com/rlidwka/sinopia/issues/128))
+
+## 18 Sep 2014, version 0.11.3
+
+- fix 500 error in adduser function in sinopia-htpasswd (issue [#121](https://github.com/rlidwka/sinopia/issues/121))
+- fix fd leak in authenticate function in sinopia-htpasswd (issue [#116](https://github.com/rlidwka/sinopia/issues/116))
+
+## 15 Sep 2014, version 0.11.1
+
+- mark crypt3 as optional (issue [#119](https://github.com/rlidwka/sinopia/issues/119))
+
+## 15 Sep 2014, version 0.11.0
+
+- Added auth plugins (issue [#99](https://github.com/rlidwka/sinopia/pull/99))
+
+  Now you can create your own auth plugin based on [sinopia-htpasswd](https://github.com/rlidwka/sinopia-htpasswd) package.
+
+- WIP: web interface (issue [#73](https://github.com/rlidwka/sinopia/pull/73))
+
+  It is disabled by default, and not ready for production yet. Use at your own risk. We will enable it in the next major release.
+
+- Some modules are now bundled by default, so users won't have to install stuff from git. We'll see what issues it causes, maybe all modules will be bundled in the future like in npm.
+
+## 14 Sep 2014, version 0.10.x
+
+*A bunch of development releases that are broken in various ways. Please use 0.11.x instead.*
+
+## 7 Sep 2014, version 0.9.3
+
+- fix several bugs that could cause "can't set headers" exception
+
+## 3 Sep 2014, version 0.9.2
+
+- allow "pretty" format for logging into files (issue [#88](https://github.com/rlidwka/sinopia/pull/88))
+- remove outdated user existence check (issue [#115](https://github.com/rlidwka/sinopia/pull/115))
+
+## 11 Aug 2014, version 0.9.1
+
+- filter falsey _npmUser values (issue [#95](https://github.com/rlidwka/sinopia/pull/95))
+- option not to cache third-party files (issue [#85](https://github.com/rlidwka/sinopia/issues/85))
+
+## 26 Jul 2014, version 0.9.0
+
+- new features:
+  - add search functionality (issue [#65](https://github.com/rlidwka/sinopia/pull/65))
+  - allow users to authenticate using .htpasswd (issue [#44](https://github.com/rlidwka/sinopia/issues/44))
+  - allow user registration with "npm adduser" (issue [#44](https://github.com/rlidwka/sinopia/issues/44))
+
+- bugfixes:
+  - avoid crashing when res.socket is null (issue [#89](https://github.com/rlidwka/sinopia/issues/89))
+
+## 20 Jun 2014, version 0.8.2
+
+- allow '@' in package/tarball names (issue [#75](https://github.com/rlidwka/sinopia/issues/75))
+- other minor fixes (issues [#77](https://github.com/rlidwka/sinopia/issues/77), [#80](https://github.com/rlidwka/sinopia/issues/80))
+
+## 14 Apr 2014, version 0.8.1
+
+- "latest" tag is now always present in any package (issue [#63](https://github.com/rlidwka/sinopia/issues/63))
+- tags created with new npm versions (>= 1.3.19) can now be published correctly
+
+## 1 Apr 2014, version 0.8.0
+
+- use gzip compression whenever possible (issue [#54](https://github.com/rlidwka/sinopia/issues/54))
+- set `ignore_latest_tag` to false, it should now be more compatible with npm registry
+- make `fs-ext` optional (issue [#61](https://github.com/rlidwka/sinopia/issues/61))
+
+## 29 Mar 2014, version 0.7.1
+
+- added `ignore_latest_tag` config param (issues [#55](https://github.com/rlidwka/sinopia/issues/55), [#59](https://github.com/rlidwka/sinopia/issues/59))
+- reverted PR [#56](https://github.com/rlidwka/sinopia/issues/56) (see discussion in [#57](https://github.com/rlidwka/sinopia/issues/57))
+
+## 13 Mar 2014, version 0.7.0
+
+- config changes:
+  - breaking change: all time intervals are now specified in *seconds* instead of *milliseconds* for the sake of consistency. Change `timeout` if you have one!
+  - all time intervals now can be specified in [nginx notation](http://wiki.nginx.org/ConfigNotation), for example `1m 30s` will specify a 90 seconds timeout
+  - added `maxage` option to avoid asking public registry for the same data too often (issue [#47](https://github.com/rlidwka/sinopia/issues/47))
+  - added `max_fails` and `fail_timeout` options to reduce amount of requests to public registry when it's down (issue [#7](https://github.com/rlidwka/sinopia/issues/7))
+
+- bug fixes:
+  - fix crash when headers are sent twice (issue [#52](https://github.com/rlidwka/sinopia/issues/52))
+  - all tarballs are returned with `Content-Length`, which allows [yapm](https://github.com/rlidwka/yapm) to estimate download time
+  - when connection to public registry is interrupted when downloading a tarball, we no longer save incomplete tarball to the disk
+
+- other changes:
+  - 404 errors are returned in couchdb-like manner (issue [#56](https://github.com/rlidwka/sinopia/issues/56))
+
+## 5 Mar 2014, version 0.6.7
+
+- pin down express@3 version, since sinopia doesn't yet work with express@4
+
+## 28 Feb 2014, version 0.6.5
+
+- old SSL keys for npm are removed, solves `SELF_SIGNED_CERT_IN_CHAIN` error
+
+## 3 Feb 2014, version 0.6.3
+
+- validate tags and versions (issue [#40](https://github.com/rlidwka/sinopia/issues/40))
+- don't crash when process.getuid doesn't exist (issue [#41](https://github.com/rlidwka/sinopia/issues/41))
+
+## 18 Jan 2014, version 0.6.2
+
+- adding config param to specify upload limits (issue [#39](https://github.com/rlidwka/sinopia/issues/39))
+- making loose semver versions work (issue [#38](https://github.com/rlidwka/sinopia/issues/38))
+
+## 13 Jan 2014, version 0.6.1
+
+- support setting different storage paths for different packages (issue [#35](https://github.com/rlidwka/sinopia/issues/35))
+
+## 30 Dec 2013, version 0.6.0
+
+- tag support (issue [#8](https://github.com/rlidwka/sinopia/issues/8))
+- adding support for npm 1.3.19+ behaviour (issue [#31](https://github.com/rlidwka/sinopia/issues/31))
+- removing all support for proxying publish requests to uplink (too complex)
+
+## 26 Dec 2013, version 0.5.9
+
+- fixing bug with bad Accept header (issue [#32](https://github.com/rlidwka/sinopia/issues/32))
+
+## 20 Dec 2013, version 0.5.8
+
+- fixed a warning from js-yaml
+- don't color multiline strings in logs output
+- better error messages in various cases
+- test format changed
+
+## 15 Dec 2013, version 0.5.7
+
+- try to fetch package from uplinks if user requested a tarball we don't know about (issue [#29](https://github.com/rlidwka/sinopia/issues/29))
+- security fix: set express.js to production mode so we won't return stack traces to the user in case of errors
+
+## 11 Dec 2013, version 0.5.6
+
+- fixing a few crashes related to tags
+
+## 8 Dec 2013, version 0.5.4
+
+- latest tag always shows highest version available (issue [#8](https://github.com/rlidwka/sinopia/issues/8))
+- added a configurable timeout for requests to uplinks (issue [#18](https://github.com/rlidwka/sinopia/issues/18))
+- users with bad authentication header are considered not logged in (issue [#17](https://github.com/rlidwka/sinopia/issues/17))
+
+## 24 Nov 2013, version 0.5.3
+
+- added proxy support for requests to uplinks (issue [#13](https://github.com/rlidwka/sinopia/issues/13))
+- changed license from default BSD to WTFPL
+
+## 26 Oct 2013, version 0.5.2
+
+- server now supports unpublishing local packages
+- added fs-ext dependency (flock)
+- fixed a few face conditions
+
+## 20 Oct 2013, version 0.5.1
+
+- fixed a few errors related to logging
+
+## 12 Oct 2013, version 0.5.0
+
+- using bunyan as a log engine
+- pretty-formatting colored logs to stdout by default
+- ask user before creating any config files
+
+## 5 Oct 2013, version 0.4.3
+
+- basic tags support for npm (read-only)
+- npm star/unstar calls now return proper error
+
+## 29 Sep 2013, version 0.4.2
+
+## 28 Sep 2013, version 0.4.1
+
+- using mocha for tests now
+- making use of streams2 api, doesn't work on 0.8 anymore
+- basic support for uploading packages to other registries
+
+## 27 Sep 2013, version 0.4.0
+
+- basic test suite
+- storage path in config is now relative to config file location, not cwd
+- proper cleanup for temporary files
+
+## 12 Jul 2013, version 0.3.2
+
+## 4 Jul 2013, version 0.3.1
+
+- using ETag header for all json output, based on md5
+
+## 20 Jun 2013, version 0.3.0
+
+- compression for http responses
+- requests for files to uplinks are now streams (no buffering)
+- tarballs are now cached locally
+
+## 19 Jun 2013, version 0.2.0
+
+- config file changed, packages is now specified with minimatch
+- ability to retrieve all packages from another registry (i.e. npmjs)
+
+## 14 Jun 2013, version 0.1.1
+
+- config is now autogenerated
+- tarballs are now read/written from fs using streams (no buffering)
+
+## 9 Jun 2013, version 0.1.0
+
+- first npm version
+- ability to publish packages and retrieve them locally
+- basic authentication/access control
+
+## 22 May 2013, version 0.0.0
+
+- first commits

CODE_OF_CONDUCT.md

@@ -0,0 +1,46 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at verdaccio.npm@gmail.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+[version]: http://contributor-covenant.org/version/1/4/

CONTRIBUTING.md

@@ -0,0 +1,124 @@
+# Contributing to Verdaccio
+
+We are happy you wish to contribute this project, for that reason we want to board you with this guide.
+
+## How I contribute?
+
+
+### Ways to contribute
+
+There are many ways to contribute to the Verdaccio Project. Here’s a list of technical contributions with increasing levels of involvement and required knowledge of Verdaccio's code and operations.
+
+* [Reporting a Bug](CONTRIBUTING.md#reporting-a-bug)
+* [Request Features](CONTRIBUTING.md#request-features)
+* [Plugins](CONTRIBUTING.md#plugins)
+* [Improve the Documentation](http://www.verdaccio.org/docs/en/installation.html)
+
+Please read carefully this document. It will guide you to provide maintainers and readers valuable information to boots the process solve the issue or evaluate your proposal.
+
+## Reporting a Bug
+
+We welcome clear bug reports. If you've found a bug in Verdaccio that isn't a security risk, please file a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues). Before you file your issue, search to see if it has already been reported. If so, up-vote (using GitHub reactions) or add additional helpful details to the existing issue to show that it's affecting multiple people.
+ 
+### Check if there's a simple solution in the website.
+
+Some of the most popular topics can be found in our website(http://www.verdaccio.org/docs/en/installation.html)
+
+### Questions & Chat
+
+We have tagged questions for easy follow up under the tag [questions](https://github.com/verdaccio/verdaccio/labels/question). Additionaly, I'd recommend to deliver questions in the new chat as **#questions/#development** channels at  [gitter](https://gitter.im/verdaccio/). 
+
+### Using the issue tracker
+
+The issue tracker is a channel were mostly users/developers post.
+
+#### I want to report a bug
+
+We considere a bug a feature that is not working as is described in the documentation. Before reporting a bug follow the next steps:
+
+1. Use the GitHub issue search — check if the issue has already been reported.
+
+2. Check if the issue has been fixed — try to reproduce it using the latest master or development branch in the repository.
+
+Verdaccio still does not support all npm commands due either in the initial design were not considered important or nobody has request it yet.
+
+## Request Features
+
+A new feature is always welcome, thus, analyse whether your idea fits in the scope of the project and elaborate your request providing enough context, for instance:
+
+* A wide description the advantages of your request.
+* It's compatible with `npm` and `yarn`?
+* You might implement your feature and provide a forked repository as example.
+* Whatever you have on mind 🤓.
+
+### Submitting a Pull Request
+The following are the general steps you should follow in creating a pull request.  Subsequent pull requests only need
+to follow step 3 and beyond:
+
+1. Fork the repository on GitHub
+2. Clone the forked repository to your machine
+3. Make your changes and commit them to your local repository
+4. Rebase and push your commits to your GitHub remote fork/repository
+5. Issue a Pull Request to the official repository
+6. Your Pull Request is reviewed by a committer and merged into the repository
+
+*Note*: While there are other ways to accomplish the steps using other tools, the examples here will assume the most
+actions will be performed via the `git` command line.
+
+For more information on maintaining a fork, please see the GitHub Help article [Fork a Repo](https://help.github.com/articles/fork-a-repo/) and information on
+[rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing) from git.
+
+### Make Changes and Commit
+
+#### Before commit
+
+At this point you have ready your changes, your new feature it's ready to be shipped, but, to avoid delays to merge, please be aware the build must past.
+
+Before commit, run the test command:
+
+```bash
+yarn test
+```
+It won't have **eslint** errors and **all test must past**. Then, and only then, you should push and ship your **PR**.
+
+#### Git Commit Guidelines
+
+We follow the [conventional commit messages](https://conventionalcommits.org/) convention in order to automate Changelog generation and auto semantic versioning based on commit messages. 
+
+* feat: A new feature
+* fix: A bug fix
+
+A commit of the type feat introduces a new feature to the codebase (this correlates with MINOR in semantic versioning).
+
+eg: 
+```
+feat: xxxxxxxxxx
+````
+
+A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
+
+eg: 
+```
+fix: xxxxxxxxxx
+````
+
+Commits types as `docs:`,`style:`,`refactor:`,`perf:`,`test:` and `chore:` are valid but has no effect on versioning, but, it would be great if you use them.
+
+Use `npm run commitmsg` to check your commit message.
+
+> All PR that does not follow the commit guidelines will be hold until messages are fixed. 
+
+## Update Test
+
+Any change in the sour code **must to include test update**, if you need support about how test works, please [refers to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests). Please include test whether is a new feature, otherwise will be hold and never be merged.
+
+> Documentation, website, build, deployment, assets  or flow types are excluded in this section
+
+## Plugins
+
+Plugins are Add-ons that extend the functionality of the application. Whether you want develop your own plugin I'd suggest do the following:
+
+1. Check whether there is a legacy sinopia plugin for the feature that you need at [npmjs](https://www.npmjs.com/search?q=sinopia).
+2. There is a [life-cycle to load a plugin](https://github.com/verdaccio/verdaccio/blob/master/lib/plugin-loader.js#L22) you should keep on mind.
+3. You are free to host your plugin in your repository, whether you want to host within in our organization, feel free to ask, we'll happy to host it.
+4. Try a describe widely your plugin to provide a deeply understanding to your users.

Dockerfile

@@ -0,0 +1,50 @@
+FROM node:10.7-alpine
+LABEL maintainer="https://github.com/verdaccio/verdaccio"
+
+RUN apk --no-cache add wget openssl && \
+    wget -O /usr/local/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v1.2.0/dumb-init_1.2.0_amd64 && \
+    chmod +x /usr/local/bin/dumb-init && \
+    apk del openssl && \
+    apk --no-cache add ca-certificates wget && \
+    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
+    wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://raw.githubusercontent.com/sgerrand/alpine-pkg-glibc/master/sgerrand.rsa.pub && \
+    wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
+    apk add glibc-2.25-r0.apk
+
+ENV APPDIR /usr/local/app
+
+WORKDIR $APPDIR
+
+ADD . $APPDIR
+
+ENV NODE_ENV=production
+
+RUN npm config set registry http://registry.npmjs.org/ && \
+    yarn global add -s flow-bin@0.69.0 && \
+    yarn install --production=false && \
+    yarn lint && \
+    yarn code:docker-build && \
+    yarn build:webui && \
+    yarn cache clean && \
+    yarn install --production=true --pure-lockfile
+
+RUN mkdir -p /verdaccio/storage /verdaccio/plugins /verdaccio/conf
+
+ADD conf/docker.yaml /verdaccio/conf/config.yaml
+
+RUN addgroup -S verdaccio && adduser -S -G verdaccio verdaccio && \
+    chown -R verdaccio:verdaccio "$APPDIR" && \
+    chown -R verdaccio:verdaccio /verdaccio
+
+USER verdaccio
+
+ENV PORT 4873
+ENV PROTOCOL http
+
+EXPOSE $PORT
+
+VOLUME ["/verdaccio"]
+
+ENTRYPOINT ["/usr/local/bin/dumb-init", "--"]
+
+CMD $APPDIR/bin/verdaccio --config /verdaccio/conf/config.yaml --listen $PROTOCOL://0.0.0.0:${PORT}

Dockerfile.rpi

@@ -0,0 +1,13 @@
+FROM hypriot/rpi-node:6-onbuild
+
+RUN mkdir -p /verdaccio/storage /verdaccio/conf
+
+WORKDIR /verdaccio
+
+ADD conf/docker.yaml /verdaccio/conf/config.yaml
+
+EXPOSE 4873
+
+VOLUME ["/verdaccio/conf", "/verdaccio/storage"]
+
+CMD ["/usr/src/app/bin/verdaccio", "--config", "/verdaccio/conf/config.yaml", "--listen", "0.0.0.0:4873"]

History.md

@@ -1,163 +0,0 @@
-20 Jun 2014, version 0.8.2
-
-- allow '@' in package/tarball names (issue [#75](https://github.com/rlidwka/sinopia/issues/75))
-- other minor fixes (issues [#77](https://github.com/rlidwka/sinopia/issues/77), [#80](https://github.com/rlidwka/sinopia/issues/80))
-
-14 Apr 2014, version 0.8.1
-
-- "latest" tag is now always present in any package (issue [#63](https://github.com/rlidwka/sinopia/issues/63))
-- tags created with new npm versions (>= 1.3.19) can now be published correctly
-
-1 Apr 2014, version 0.8.0
-
-- use gzip compression whenever possible (issue [#54](https://github.com/rlidwka/sinopia/issues/54))
-- set `ignore_latest_tag` to false, it should now be more compatible with npm registry
-- make `fs-ext` optional (issue [#61](https://github.com/rlidwka/sinopia/issues/61))
-
-29 Mar 2014, version 0.7.1
-
-- added `ignore_latest_tag` config param (issues [#55](https://github.com/rlidwka/sinopia/issues/55), [#59](https://github.com/rlidwka/sinopia/issues/59))
-- reverted PR [#56](https://github.com/rlidwka/sinopia/issues/56) (see discussion in [#57](https://github.com/rlidwka/sinopia/issues/57))
-
-13 Mar 2014, version 0.7.0
-
-- config changes:
-  - breaking change: all time intervals are now specified in *seconds* instead of *milliseconds* for the sake of consistency. Change `timeout` if you have one!
-  - all time intervals now can be specified in [nginx notation](http://wiki.nginx.org/ConfigNotation), for example `1m 30s` will specify a 90 seconds timeout
-  - added `maxage` option to avoid asking public registry for the same data too often (issue [#47](https://github.com/rlidwka/sinopia/issues/47))
-  - added `max_fails` and `fail_timeout` options to reduce amount of requests to public registry when it's down (issue [#7](https://github.com/rlidwka/sinopia/issues/7))
-
-- bug fixes:
-  - fix crash when headers are sent twice (issue [#52](https://github.com/rlidwka/sinopia/issues/52))
-  - all tarballs are returned with `Content-Length`, which allows [yapm](https://github.com/rlidwka/yapm) to estimate download time
-  - when connection to public registry is interrupted when downloading a tarball, we no longer save incomplete tarball to the disk
-
-- other changes:
-  - 404 errors are returned in couchdb-like manner (issue [#56](https://github.com/rlidwka/sinopia/issues/56))
-
-5 Mar 2014, version 0.6.7
-
-- pin down express@3 version, since sinopia doesn't yet work with express@4
-
-28 Feb 2014, version 0.6.5
-
-- old SSL keys for npm are removed, solves `SELF_SIGNED_CERT_IN_CHAIN` error
-
-3 Feb 2014, version 0.6.3
-
-- validate tags and versions (issue [#40](https://github.com/rlidwka/sinopia/issues/40))
-- don't crash when process.getuid doesn't exist (issue [#41](https://github.com/rlidwka/sinopia/issues/41))
-
-18 Jan 2014, version 0.6.2
-
-- adding config param to specify upload limits (issue [#39](https://github.com/rlidwka/sinopia/issues/39))
-- making loose semver versions work (issue [#38](https://github.com/rlidwka/sinopia/issues/38))
-
-13 Jan 2014, version 0.6.1
-
-- support setting different storage paths for different packages (issue [#35](https://github.com/rlidwka/sinopia/issues/35))
-
-30 Dec 2013, version 0.6.0
-
-- tag support (issue [#8](https://github.com/rlidwka/sinopia/issues/8))
-- adding support for npm 1.3.19+ behaviour (issue [#31](https://github.com/rlidwka/sinopia/issues/31))
-- removing all support for proxying publish requests to uplink (too complex)
-
-26 Dec 2013, version 0.5.9
-
-- fixing bug with bad Accept header (issue [#32](https://github.com/rlidwka/sinopia/issues/32))
-
-20 Dec 2013, version 0.5.8
-
-- fixed a warning from js-yaml
-- don't color multiline strings in logs output
-- better error messages in various cases
-- test format changed
-
-15 Dec 2013, version 0.5.7
-
-- try to fetch package from uplinks if user requested a tarball we don't know about (issue [#29](https://github.com/rlidwka/sinopia/issues/29))
-- security fix: set express.js to production mode so we won't return stack traces to the user in case of errors
-
-11 Dec 2013, version 0.5.6
-
-- fixing a few crashes related to tags
-
-8 Dec 2013, version 0.5.4
-
-- latest tag always shows highest version available (issue [#8](https://github.com/rlidwka/sinopia/issues/8))
-- added a configurable timeout for requests to uplinks (issue [#18](https://github.com/rlidwka/sinopia/issues/18))
-- users with bad authentication header are considered not logged in (issue [#17](https://github.com/rlidwka/sinopia/issues/17))
-
-24 Nov 2013, version 0.5.3
-
-- added proxy support for requests to uplinks (issue [#13](https://github.com/rlidwka/sinopia/issues/13))
-- changed license from default BSD to WTFPL
-
-26 Oct 2013, version 0.5.2
-
-- server now supports unpublishing local packages
-- added fs-ext dependency (flock)
-- fixed a few face conditions
-
-20 Oct 2013, version 0.5.1
-
-- fixed a few errors related to logging
-
-12 Oct 2013, version 0.5.0
-
-- using bunyan as a log engine
-- pretty-formatting colored logs to stdout by default
-- ask user before creating any config files
-
-5 Oct 2013, version 0.4.3
-
-- basic tags support for npm (read-only)
-- npm star/unstar calls now return proper error
-
-29 Sep 2013, version 0.4.2
-
-28 Sep 2013, version 0.4.1
-
-- using mocha for tests now
-- making use of streams2 api, doesn't work on 0.8 anymore
-- basic support for uploading packages to other registries
-
-27 Sep 2013, version 0.4.0
-
-- basic test suite
-- storage path in config is now relative to config file location, not cwd
-- proper cleanup for temporary files
-
-12 Jul 2013, version 0.3.2
-
-4 Jul 2013, version 0.3.1
-
-- using ETag header for all json output, based on md5
-
-20 Jun 2013, version 0.3.0
-
-- compression for http responses
-- requests for files to uplinks are now streams (no buffering)
-- tarballs are now cached locally
-
-19 Jun 2013, version 0.2.0
-
-- config file changed, packages is now specified with minimatch
-- ability to retrieve all packages from another registry (i.e. npmjs)
-
-14 Jun 2013, version 0.1.1
-
-- config is now autogenerated
-- tarballs are now read/written from fs using streams (no buffering)
-
-9 Jun 2013, version 0.1.0
-
-- first npm version
-- ability to publish packages and retrieve them locally
-- basic authentication/access control
-
-22 May 2013, version 0.0.0
-
-- first commits
-

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Verdaccio community
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

LICENSE-docs

@@ -0,0 +1,384 @@
+Attribution 4.0 International
+
+=======================================================================
+
+Creative Commons Corporation ("Creative Commons") is not a law firm and
+does not provide legal services or legal advice. Distribution of
+Creative Commons public licenses does not create a lawyer-client or
+other relationship. Creative Commons makes its licenses and related
+information available on an "as-is" basis. Creative Commons gives no
+warranties regarding its licenses, any material licensed under their
+terms and conditions, or any related information. Creative Commons
+disclaims all liability for damages resulting from their use to the
+fullest extent possible.
+
+Using Creative Commons Public Licenses
+
+Creative Commons public licenses provide a standard set of terms and
+conditions that creators and other rights holders may use to share
+original works of authorship and other material subject to copyright
+and certain other rights specified in the public license below. The
+following considerations are for informational purposes only, are not
+exhaustive, and do not form part of our licenses.
+
+     Considerations for licensors: Our public licenses are
+     intended for use by those authorized to give the public
+     permission to use material in ways otherwise restricted by
+     copyright and certain other rights. Our licenses are
+     irrevocable. Licensors should read and understand the terms
+     and conditions of the license they choose before applying it.
+     Licensors should also secure all rights necessary before
+     applying our licenses so that the public can reuse the
+     material as expected. Licensors should clearly mark any
+     material not subject to the license. This includes other CC-
+     licensed material, or material used under an exception or
+     limitation to copyright. More considerations for licensors:
+  wiki.creativecommons.org/Considerations_for_licensors
+
+     Considerations for the public: By using one of our public
+     licenses, a licensor grants the public permission to use the
+     licensed material under specified terms and conditions. If
+     the licensor's permission is not necessary for any reason--for
+     example, because of any applicable exception or limitation to
+     copyright--then that use is not regulated by the license. Our
+     licenses grant only permissions under copyright and certain
+     other rights that a licensor has authority to grant. Use of
+     the licensed material may still be restricted for other
+     reasons, including because others have copyright or other
+     rights in the material. A licensor may make special requests,
+     such as asking that all changes be marked or described.
+     Although not required by our licenses, you are encouraged to
+     respect those requests where reasonable. More_considerations
+     for the public:
+  wiki.creativecommons.org/Considerations_for_licensees
+
+=======================================================================
+
+Creative Commons Attribution 4.0 International Public License
+
+By exercising the Licensed Rights (defined below), You accept and agree
+to be bound by the terms and conditions of this Creative Commons
+Attribution 4.0 International Public License ("Public License"). To the
+extent this Public License may be interpreted as a contract, You are
+granted the Licensed Rights in consideration of Your acceptance of
+these terms and conditions, and the Licensor grants You such rights in
+consideration of benefits the Licensor receives from making the
+Licensed Material available under these terms and conditions.
+
+Section 1 -- Definitions.
+
+  a. Adapted Material means material subject to Copyright and Similar
+     Rights that is derived from or based upon the Licensed Material
+     and in which the Licensed Material is translated, altered,
+     arranged, transformed, or otherwise modified in a manner requiring
+     permission under the Copyright and Similar Rights held by the
+     Licensor. For purposes of this Public License, where the Licensed
+     Material is a musical work, performance, or sound recording,
+     Adapted Material is always produced where the Licensed Material is
+     synched in timed relation with a moving image.
+
+b. Adapter's License means the license You apply to Your Copyright
+   and Similar Rights in Your contributions to Adapted Material in
+   accordance with the terms and conditions of this Public License.
+
+c. Copyright and Similar Rights means copyright and/or similar rights
+   closely related to copyright including, without limitation,
+   performance, broadcast, sound recording, and Sui Generis Database
+   Rights, without regard to how the rights are labeled or
+   categorized. For purposes of this Public License, the rights
+   specified in Section 2(b)(1)-(2) are not Copyright and Similar
+   Rights.
+
+d. Effective Technological Measures means those measures that, in the
+   absence of proper authority, may not be circumvented under laws
+   fulfilling obligations under Article 11 of the WIPO Copyright
+   Treaty adopted on December 20, 1996, and/or similar international
+   agreements.
+
+e. Exceptions and Limitations means fair use, fair dealing, and/or
+   any other exception or limitation to Copyright and Similar Rights
+   that applies to Your use of the Licensed Material.
+
+f. Licensed Material means the artistic or literary work, database,
+   or other material to which the Licensor applied this Public
+   License.
+
+g. Licensed Rights means the rights granted to You subject to the
+   terms and conditions of this Public License, which are limited to
+   all Copyright and Similar Rights that apply to Your use of the
+   Licensed Material and that the Licensor has authority to license.
+
+h. Licensor means the individual(s) or entity(ies) granting rights
+   under this Public License.
+
+i. Share means to provide material to the public by any means or
+   process that requires permission under the Licensed Rights, such
+   as reproduction, public display, public performance, distribution,
+   dissemination, communication, or importation, and to make material
+   available to the public including in ways that members of the
+   public may access the material from a place and at a time
+   individually chosen by them.
+
+j. Sui Generis Database Rights means rights other than copyright
+   resulting from Directive 96/9/EC of the European Parliament and of
+   the Council of 11 March 1996 on the legal protection of databases,
+   as amended and/or succeeded, as well as other essentially
+   equivalent rights anywhere in the world.
+
+k. You means the individual or entity exercising the Licensed Rights
+   under this Public License. Your has a corresponding meaning.
+
+Section 2 -- Scope.
+
+a. License grant.
+
+     1. Subject to the terms and conditions of this Public License,
+        the Licensor hereby grants You a worldwide, royalty-free,
+        non-sublicensable, non-exclusive, irrevocable license to
+        exercise the Licensed Rights in the Licensed Material to:
+
+          a. reproduce and Share the Licensed Material, in whole or
+             in part; and
+
+          b. produce, reproduce, and Share Adapted Material.
+
+     2. Exceptions and Limitations. For the avoidance of doubt, where
+        Exceptions and Limitations apply to Your use, this Public
+        License does not apply, and You do not need to comply with
+        its terms and conditions.
+
+     3. Term. The term of this Public License is specified in Section
+        6(a).
+
+     4. Media and formats; technical modifications allowed. The
+        Licensor authorizes You to exercise the Licensed Rights in
+        all media and formats whether now known or hereafter created,
+        and to make technical modifications necessary to do so. The
+        Licensor waives and/or agrees not to assert any right or
+        authority to forbid You from making technical modifications
+        necessary to exercise the Licensed Rights, including
+        technical modifications necessary to circumvent Effective
+        Technological Measures. For purposes of this Public License,
+        simply making modifications authorized by this Section 2(a)
+        (4) never produces Adapted Material.
+
+     5. Downstream recipients.
+
+          a. Offer from the Licensor -- Licensed Material. Every
+             recipient of the Licensed Material automatically
+             receives an offer from the Licensor to exercise the
+             Licensed Rights under the terms and conditions of this
+             Public License.
+
+          b. No downstream restrictions. You may not offer or impose
+             any additional or different terms or conditions on, or
+             apply any Effective Technological Measures to, the
+             Licensed Material if doing so restricts exercise of the
+             Licensed Rights by any recipient of the Licensed
+             Material.
+
+     6. No endorsement. Nothing in this Public License constitutes or
+        may be construed as permission to assert or imply that You
+        are, or that Your use of the Licensed Material is, connected
+        with, or sponsored, endorsed, or granted official status by,
+        the Licensor or others designated to receive attribution as
+        provided in Section 3(a)(1)(A)(i).
+
+b. Other rights.
+
+     1. Moral rights, such as the right of integrity, are not
+        licensed under this Public License, nor are publicity,
+        privacy, and/or other similar personality rights; however, to
+        the extent possible, the Licensor waives and/or agrees not to
+        assert any such rights held by the Licensor to the limited
+        extent necessary to allow You to exercise the Licensed
+        Rights, but not otherwise.
+
+     2. Patent and trademark rights are not licensed under this
+        Public License.
+
+     3. To the extent possible, the Licensor waives any right to
+        collect royalties from You for the exercise of the Licensed
+        Rights, whether directly or through a collecting society
+        under any voluntary or waivable statutory or compulsory
+        licensing scheme. In all other cases the Licensor expressly
+        reserves any right to collect such royalties.
+
+Section 3 -- License Conditions.
+
+Your exercise of the Licensed Rights is expressly made subject to the
+following conditions.
+
+a. Attribution.
+
+     1. If You Share the Licensed Material (including in modified
+        form), You must:
+
+          a. retain the following if it is supplied by the Licensor
+             with the Licensed Material:
+
+               i. identification of the creator(s) of the Licensed
+                  Material and any others designated to receive
+                  attribution, in any reasonable manner requested by
+                  the Licensor (including by pseudonym if
+                  designated);
+
+              ii. a copyright notice;
+
+             iii. a notice that refers to this Public License;
+
+              iv. a notice that refers to the disclaimer of
+                  warranties;
+
+               v. a URI or hyperlink to the Licensed Material to the
+                  extent reasonably practicable;
+
+          b. indicate if You modified the Licensed Material and
+             retain an indication of any previous modifications; and
+
+          c. indicate the Licensed Material is licensed under this
+             Public License, and include the text of, or the URI or
+             hyperlink to, this Public License.
+
+     2. You may satisfy the conditions in Section 3(a)(1) in any
+        reasonable manner based on the medium, means, and context in
+        which You Share the Licensed Material. For example, it may be
+        reasonable to satisfy the conditions by providing a URI or
+        hyperlink to a resource that includes the required
+        information.
+
+     3. If requested by the Licensor, You must remove any of the
+        information required by Section 3(a)(1)(A) to the extent
+        reasonably practicable.
+
+     4. If You Share Adapted Material You produce, the Adapter's
+        License You apply must not prevent recipients of the Adapted
+        Material from complying with this Public License.
+
+Section 4 -- Sui Generis Database Rights.
+
+Where the Licensed Rights include Sui Generis Database Rights that
+apply to Your use of the Licensed Material:
+
+a. for the avoidance of doubt, Section 2(a)(1) grants You the right
+   to extract, reuse, reproduce, and Share all or a substantial
+   portion of the contents of the database;
+
+b. if You include all or a substantial portion of the database
+   contents in a database in which You have Sui Generis Database
+   Rights, then the database in which You have Sui Generis Database
+   Rights (but not its individual contents) is Adapted Material; and
+
+c. You must comply with the conditions in Section 3(a) if You Share
+   all or a substantial portion of the contents of the database.
+
+For the avoidance of doubt, this Section 4 supplements and does not
+replace Your obligations under this Public License where the Licensed
+Rights include other Copyright and Similar Rights.
+
+Section 5 -- Disclaimer of Warranties and Limitation of Liability.
+
+a. UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE
+   EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS
+   AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF
+   ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS,
+   IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION,
+   WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR
+   PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS,
+   ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT
+   KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT
+   ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU.
+
+b. TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE
+   TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION,
+   NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT,
+   INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES,
+   COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR
+   USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN
+   ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR
+   DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR
+   IN PART, THIS LIMITATION MAY NOT APPLY TO YOU.
+
+c. The disclaimer of warranties and limitation of liability provided
+   above shall be interpreted in a manner that, to the extent
+   possible, most closely approximates an absolute disclaimer and
+   waiver of all liability.
+
+Section 6 -- Term and Termination.
+
+a. This Public License applies for the term of the Copyright and
+   Similar Rights licensed here. However, if You fail to comply with
+   this Public License, then Your rights under this Public License
+   terminate automatically.
+
+b. Where Your right to use the Licensed Material has terminated under
+   Section 6(a), it reinstates:
+
+     1. automatically as of the date the violation is cured, provided
+        it is cured within 30 days of Your discovery of the
+        violation; or
+
+     2. upon express reinstatement by the Licensor.
+
+   For the avoidance of doubt, this Section 6(b) does not affect any
+   right the Licensor may have to seek remedies for Your violations
+   of this Public License.
+
+c. For the avoidance of doubt, the Licensor may also offer the
+   Licensed Material under separate terms or conditions or stop
+   distributing the Licensed Material at any time; however, doing so
+   will not terminate this Public License.
+
+d. Sections 1, 5, 6, 7, and 8 survive termination of this Public
+   License.
+
+Section 7 -- Other Terms and Conditions.
+
+a. The Licensor shall not be bound by any additional or different
+   terms or conditions communicated by You unless expressly agreed.
+
+b. Any arrangements, understandings, or agreements regarding the
+   Licensed Material not stated herein are separate from and
+   independent of the terms and conditions of this Public License.
+
+Section 8 -- Interpretation.
+
+a. For the avoidance of doubt, this Public License does not, and
+   shall not be interpreted to, reduce, limit, restrict, or impose
+   conditions on any use of the Licensed Material that could lawfully
+   be made without permission under this Public License.
+
+b. To the extent possible, if any provision of this Public License is
+   deemed unenforceable, it shall be automatically reformed to the
+   minimum extent necessary to make it enforceable. If the provision
+   cannot be reformed, it shall be severed from this Public License
+   without affecting the enforceability of the remaining terms and
+   conditions.
+
+c. No term or condition of this Public License will be waived and no
+   failure to comply consented to unless expressly agreed to by the
+   Licensor.
+
+d. Nothing in this Public License constitutes or may be interpreted
+   as a limitation upon, or waiver of, any privileges and immunities
+   that apply to the Licensor or You, including from the legal
+   processes of any jurisdiction or authority.
+
+=======================================================================
+
+Creative Commons is not a party to its public licenses.
+Notwithstanding, Creative Commons may elect to apply one of its public
+licenses to material it publishes and in those instances will be
+considered the "Licensor." Except for the limited purpose of indicating
+that material is shared under a Creative Commons public license or as
+otherwise permitted by the Creative Commons policies published at
+creativecommons.org/policies, Creative Commons does not authorize the
+use of the trademark "Creative Commons" or any other trademark or logo
+of Creative Commons without its prior written consent including,
+without limitation, in connection with any unauthorized modifications
+to any of its public licenses or any other arrangements,
+understandings, or agreements concerning use of licensed material. For
+the avoidance of doubt, this paragraph does not form part of the public
+licenses.
+
+Creative Commons may be contacted at creativecommons.org.

README.md

@@ -1,143 +1,216 @@
-Sinopia is a private/caching npm repository server.
+<div align="center">
+    <a href="https://www.verdaccio.org/">
+        <img src="https://github.com/verdaccio/verdaccio/raw/master/assets/bitmap/verdaccio%402x.png">
+    </a>
+<br>
+<br>
+<h1>Version 3 Released 🎉</h1>
+<h5>
+  <a target="_blank" href="https://medium.com/verdaccio/verdaccio-3-released-feb06ef38558">
+    All the new features you need to know
+  </a>
+</h5>
+</div>
 
-It allows you to have a local npm registry with zero configuration. You don't have to install and replicate an entire CouchDB database. Sinopia keeps its own small database and, if a package doesn't exist there, it asks npmjs.org for it keeping only those packages you use.
 
-<p align="center"><img src="https://f.cloud.github.com/assets/999113/1795553/680177b2-6a1d-11e3-82e1-02193aa4e32e.png"></p>
+<div align="center">
+  <p>
+    A lightweight private npm proxy registry
+  </p>
+  <a href="https://www.npmjs.org/package/verdaccio"><img alt="npm version" src="https://img.shields.io/npm/v/verdaccio.svg"></a>
+  <a href="https://circleci.com/gh/verdaccio/verdaccio"><img alt="CircleCI Status" src="https://circleci.com/gh/verdaccio/verdaccio.svg?style=shield&circle-token=:circle-token"></a>
+  <a href="https://codecov.io/github/verdaccio/verdaccio"><img alt="Coverage Status" src="https://img.shields.io/codecov/c/github/verdaccio/verdaccio/master.svg"></a>
+  <a href="https://www.npmjs.org/package/verdaccio"><img alt="npm Downloads" src="http://img.shields.io/npm/dm/verdaccio.svg"></a>
+  <a href="https://hub.docker.com/r/verdaccio/verdaccio/"><img alt="npm Downloads" src="https://img.shields.io/docker/pulls/verdaccio/verdaccio.svg?maxAge=43200"></a>
+  <a href="https://www.browserstack.com/automate/public-build/am8rVDJ1V1BSbW90aE4xUnZsbnNUOFVuVS9ZRmJWL3NWcjkzRUxycHF3TT0tLUh5aTBiY2VzT1A1NDRWdHg2L0FQT3c9PQ==--0e9064ebcb01bfebb9976a543500b0396c0bfcae%"><img src='https://www.browserstack.com/automate/badge.svg?badge_key=am8rVDJ1V1BSbW90aE4xUnZsbnNUOFVuVS9ZRmJWL3NWcjkzRUxycHF3TT0tLUh5aTBiY2VzT1A1NDRWdHg2L0FQT3c9PQ==--0e9064ebcb01bfebb9976a543500b0396c0bfcae%'/></a>
+  <a href="https://discord.gg/AwXRqPD"
+  ><img alt="discord" src="https://img.shields.io/badge/Discord-%23questions%20%23general-blue.svg"/>
+  </a>
+</div>
+<div align="center">
+  <p align="center"><img src="https://github.com/verdaccio/verdaccio/blob/master/assets/gif/verdaccio_big_30.gif?raw=true"></p>
 
-## Use cases
+</div>
 
-1. Use private packages.
+<h2 align="center">Install</h2>
+
+Install with npm:
+
+```bash
+npm install --global verdaccio
+```
+
+Install with yarn:
+
+```bash
+yarn global add verdaccio
+```
+
+Install with pnpm:
+
+```bash
+pnpm i -g verdaccio
+```
+
+
+<h2 align="center">Introduction</h2>
+
+Verdaccio is a simple, **zero-config-required local private npm registry**. No need for an entire database just to get started! Verdaccio comes out of the box with **its own tiny database**, and the ability to proxy other registries (eg. npmjs.org), caching the downloaded modules along the way. For those looking to extend their storage capabilities, Verdaccio **supports various community-made plugins to hook into services such as Amazon's s3 and Google Cloud Storage**.
+
+### Use private packages
 
    If you want to use all benefits of npm package system in your company without sending all code to the public, and use your private packages just as easy as public ones.
 
-   See [using private packages](#using-private-packages) section for details.
-
-2. Cache npmjs.org registry.
+### Cache npmjs.org registry
 
    If you have more than one server you want to install packages on, you might want to use this to decrease latency
-   (presumably "slow" npmjs.org will be connected to only once per package/version) and provide limited failover (if npmjs.org is down, we might still find something useful in the cache).
+   (presumably "slow" npmjs.org will be connected to only once per package/version) and provide limited failover (if npmjs.org is down, we might still find something useful in the cache) or avoid issues like *[How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript](https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/)*, *[Many packages suddenly disappeared](https://github.com/npm/registry/issues/255?source=techstories.org)* or *[Registry returns 404 for a package I have installed before](https://github.com/npm/registry/issues/329)*.
+   
+### Link multiple registries
 
-   See [using public packages](#using-public-packages-from-npmjsorg) section for details.
+If you use multiples registries in your organization and need to fetch packages from multiple sources in one single project you might take advance of the uplinks feature with Verdaccio, chaining multiple registries and fetching from one single endpoint.
 
-3. Override public packages.
 
-   If you want to use a modified version of some 3rd-party package (for example, you found a bug, but maintainer didn't accepted pull request yet), you can publish your version locally under the same name.
+### Override public packages
 
-   See [override public packages](#override-public-packages) section for details.
+   If you want to use a modified version of some 3rd-party package (for example, you found a bug, but maintainer didn't accept pull request yet), you can publish your version locally under the same name.
 
-## Installation
+See in detail each of these [use cases](https://github.com/verdaccio/verdaccio/tree/master/docs/use-cases.md).
+
+<h2 align="center">Get Started</h2>
+
+Run in your terminal
 
 ```bash
-# installation and starting (application will create default
-# config in config.yaml you can edit later)
-$ npm install -g sinopia
-$ sinopia
+verdaccio
+```
 
-# npm configuration
+You would need set some npm configuration, this is optional.
+
+```bash
 $ npm set registry http://localhost:4873/
-
-# if you have any restricted packages, you should add this:
-$ npm set always-auth true
-
 # if you use HTTPS, add an appropriate CA information
 # ("null" means get CA list from OS)
 $ npm set ca null
 ```
 
-### Docker
+Now you can navigate to [http://localhost:4873/](http://localhost:4873/) where your local packages will be listed and can be searched.
 
-A Sinopia docker image [is available](https://index.docker.io/u/keyvanfatehi/docker-sinopia/)
+> Warning: Verdaccio does not currently support PM2's cluster mode, running it with cluster mode may cause unknown behavior.
 
-### Chef
+<h2 align="center">Publishing Private Packages</h2>
 
-A Sinopia Chef cookbook [is available at Opscode community](http://community.opscode.com/cookbooks/sinopia) source: https://github.com/BarthV/sinopia-cookbook
+#### Create an user and log in
 
-### Puppet
-
-A Sinopia puppet module [is available at puppet forge](http://forge.puppetlabs.com/saheba/sinopia) source: https://github.com/saheba/puppet-sinopia
-
-## Configuration
-
-When you start a server, it auto-creates a config file that adds one user (password is printed to stdout only once).
-
-## Adding a new user
-
-There is no utility to add a new user but you can at least use node on the command-line to generate a password. You will need to edit the config and add the user manually.
-
-Start node and enter the following code replacing 'newpass' with the password you want to get the hash for.
 ```bash
-$ node
-> crypto.createHash('sha1').update('newpass').digest('hex')
-'6c55803d6f1d7a177a0db3eb4b343b0d50f9c111'
-> [CTRL-D]
+npm adduser --registry http://localhost:4873
 ```
 
+#### Publish your package
 
-## Using private packages
+```bash
+npm publish --registry http://localhost:4873
+```
 
-You can add users and manage which users can access which packages.
+This will prompt you for user credentials which will be saved on the `verdaccio` server.
 
-It is recommended that you define a prefix for your private packages, for example "local", so all your private things will look like this: `local-foo`. This way you can clearly separate public packages from private ones.
+<h2 align="center"> Docker</h2>
 
-## Using public packages from npmjs.org
+Below are the most commony needed informations,
+every aspect of Docker and verdaccio is [documented separately](https://www.verdaccio.org/docs/en/docker.html)
 
-If some package doesn't exist in the storage, server will try to fetch it from npmjs.org. If npmjs.org is down, it serves packages from cache pretending that no other packages exist. Sinopia will download only what's needed (= requested by clients), and this information will be cached, so if client will ask the same thing second time, it can be served without asking npmjs.org for it.
 
-Example: if you successfully request express@3.0.1 from this server once, you'll able to do that again (with all it's dependencies) anytime even if npmjs.org is down. But say express@3.0.0 will not be downloaded until it's actually needed by somebody. And if npmjs.org is offline, this server would say that only express@3.0.1 (= only what's in the cache) is published, but nothing else.
+```
+docker pull verdaccio/verdaccio
+```
 
-## Override public packages
+Available as [tags](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
 
-If you want to use a modified version of some public package `foo`, you can just publish it to your local server, so when your type `npm install foo`, it'll consider installing your version.
+```
+docker pull verdaccio/verdaccio:3.0.0
+```
 
-There's two options here:
+### Running verdaccio using Docker
 
-1. You want to create a separate fork and stop synchronizing with public version.
+To run the docker container:
 
-   If you want to do that, you should modify your configuration file so sinopia won't make requests regarding this package to npmjs anymore. Add a separate entry for this package to *config.yaml* and remove `npmjs` from `proxy_access` list and restart the server.
+```bash
+docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio
+```
 
-   When you publish your package locally, you should probably start with version string higher than existing one, so it won't conflict with existing package in the cache.
+Docker examples are available [in this repository](https://github.com/verdaccio/docker-examples).
 
-2. You want to temporarily use your version, but return to public one as soon as it's updated.
+<h2 align="center">Compatibility</h2>
 
-   In order to avoid version conflicts, you should use a custom pre-release suffix of the next patch version. For example, if a public package has version 0.1.2, you can upload 0.1.3-my-temp-fix. This way your package will be used until its original maintainer updates his public package to 0.1.3.
+Verdaccio aims to support all features of a standard npm client that make sense to support in private repository. Unfortunately, it isn't always possible.
 
-## Compatibility
+### Basic features
 
-Sinopia aims to support all features of a standard npm client that make sense to support in private repository. Unfortunately, it isn't always possible.
+- Installing packages (npm install, npm upgrade, etc.) - **supported**
+- Publishing packages (npm publish) - **supported**
 
-Basic features:
+### Advanced package control
 
-- Installing packages (npm install, npm upgrade, etc.) - supported
-- Publishing packages (npm publish) - supported
+- Unpublishing packages (npm unpublish) - **supported**
+- Tagging (npm tag) - **supported**
+- Deprecation (npm deprecate) - not supported - *PR-welcome*
 
-Advanced package control:
+### User management
 
-- Unpublishing packages (npm unpublish) - not yet supported, should be soon
-- Tagging (npm tag) - not yet supported, should be soon
-- Deprecation (npm deprecate) - not supported
+- Registering new users (npm adduser {newuser}) - **supported**
+- Transferring ownership (npm owner add {user} {pkg}) - not supported, *PR-welcome*
+### Misc stuff
 
-User management:
+- Searching (npm search) - **supported** (cli / browser)
+- Ping (npm ping) - **supported**
+- Starring (npm star, npm unstar) - not supported, *PR-welcome*
 
-- Registering new users (npm adduser {newuser}) - not supported, sinopia uses its own acl management system
-- Transferring ownership (npm owner add {user} {pkg}) - not supported, sinopia uses its own acl management system
+### Security
 
-Misc stuff:
+- npm audit - **supported**
 
-- Searching (npm search) - not supported
-- Starring (npm star, npm unstar) - not supported, doesn't make sense in private registry
+<h2 align="center">Contributors</h2>
 
-## Storage
+This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
+<a href="../../graphs/contributors"><img src="https://opencollective.com/verdaccio/contributors.svg?width=890&button=false" /></a>
 
-No CouchDB here. This application is supposed to work with zero configuration, so filesystem is used as a storage.
 
-If you want to use a database instead, ask for it, we'll come up with some kind of a plugin system.
+### Backers
 
-## Similar existing things
+Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com/verdaccio#backer)]
 
-- npm + git (I mean, using git+ssh:// dependencies) - most people seem to use this, but it's a terrible idea... *npm update* doesn't work, can't use git subdirectories this way, etc.
-- [reggie](https://github.com/mbrevoort/node-reggie) - this looks very interesting indeed... I might borrow some code there.
-- [shadow-npm](https://github.com/dominictarr/shadow-npm), [public service](http://shadow-npm.net/) - it uses the same code as npmjs.org + service is dead
-- [gemfury](http://www.gemfury.com/l/npm-registry) and others - those are closed-source cloud services, and I'm not in a mood to trust my private code to somebody (security through obscurity yeah!)
-- npm-registry-proxy, npm-delegate, npm-proxy - those are just proxies...
-- Is there something else?
+<a href="https://opencollective.com/verdaccio#backers" target="_blank"><img src="https://opencollective.com/verdaccio/backers.svg?width=890"></a>
 
+
+### Sponsors
+
+Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/verdaccio#sponsor)]
+
+<a href="https://opencollective.com/verdaccio/sponsor/0/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/0/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/1/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/1/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/2/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/2/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/3/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/3/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/4/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/4/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/5/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/5/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/6/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/6/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/7/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/7/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/8/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/8/avatar.svg"></a>
+<a href="https://opencollective.com/verdaccio/sponsor/9/website" target="_blank"><img src="https://opencollective.com/verdaccio/sponsor/9/avatar.svg"></a>
+
+<h2 align="center"> FAQ / Contact / Troubleshoot</h2>
+
+If you have any issue you can try the following options, do no desist to ask or check our issues database, perhaps someone has asked already what you are looking for.
+
+* [Roadmap](https://github.com/verdaccio/verdaccio/wiki)
+* [Most common questions](https://github.com/verdaccio/verdaccio/issues?utf8=%E2%9C%93&q=is%3Aissue%20label%3Aquestion%20)
+* [Reporting a bug](https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md#reporting-a-bug)
+* [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
+* [Chat Room](http://chat.verdaccio.org/)
+* [Logos](https://github.com/verdaccio/verdaccio/tree/master/assets)
+
+
+<h2 align="center">License</h2>
+
+Verdaccio is [MIT licensed](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
+
+The Verdaccio documentation and logos (e.g., .md, .png, .sketch)  files in the /docs and /assets folder) is [Creative Commons licensed](https://github.com/verdaccio/verdaccio/blob/master/LICENSE-docs).

SERVER.md

@@ -1,58 +0,0 @@
-This is mostly basic linux server configuration stuff but I felt it important to document and share the steps I took to get sinopia running permanently on my server. You will need root (or sudo) permissions for the following.
-
-## Running as a separate user
-First create the sinopia user:
-```bash
-$ sudo adduser --disabled-login --gecos 'Sinopia NPM mirror' sinopia
-```
-
-You create a shell as the sinopia user using the following command:
-```bash
-$ sudo su sinopia
-$ cd ~
-```
-
-The 'cd ~' command send you to the home directory of the sinopia user. Make sure you run sinopia at least once to generate the config file. Edit it according to your needs.
-
-## Listening on all addresses
-If you want to listen to every external address set the listen directive in the config to:
-```
-# you can specify listen address (or simply a port)
-listen: 0.0.0.0:4873
-```
-
-## Keeping sinopia running forever
-We can use the node package called 'forever' to keep sinopia running all the time.
-https://github.com/nodejitsu/forever
-
-First install forever globally:
-```bash
-$ sudo npm install -g forever
-```
-
-Make sure you've started sinopia at least once to generate the config file and write down the created admin user. You can then use the following command to start sinopia:
-```bash
-$ forever start `which sinopia`
-```
-
-You can check the documentation for more information on how to use forever.
-
-## Surviving server restarts
-We can use crontab and forever together to restart sinopia after a server reboot.
-When you're logged in as the sinopia user do the following:
-
-```bash
-$ crontab -e
-```
-
-This might ask you to choose an editor. Pick your favorite and proceed.
-Add the following entry to the file:
-```
-@reboot /usr/bin/forever start /usr/lib/node_modules/sinopia/bin/sinopia
-```
-
-The locations may vary depending on your server setup. If you want to know where your files are you can use the 'which' command:
-```bash
-$ which forever
-$ which sinopia
-```

assets/fonts/Apache License.txt

@@ -0,0 +1,201 @@
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

assets/svg/logo-small-header-bottom.svg

@@ -0,0 +1 @@
+<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="584 207 100 100" width="100" height="100"><g id="verdaccio-tiny"><path d=" M 621 207 L 647 207 C 667.421 207 684 223.579 684 244 L 684 270 C 684 290.421 667.421 307 647 307 L 621 307 C 600.579 307 584 290.421 584 270 L 584 244 C 584 223.579 600.579 207 621 207 Z " fill-rule="evenodd" fill="rgb(247,248,246)"/><g id="Group"><mask id="_mask_TpeGGWKzkZyRlZnBNvsTW4m5XOYp8rPn"><path d=" M 654 249.6 L 638.8 280 L 630 280 L 606.4 232.8 L 621.6 232.8 L 634.4 258.4 L 638.8 249.6 L 654 249.6 L 654 249.6 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 654 249.6 L 638.8 280 L 630 280 L 606.4 232.8 L 621.6 232.8 L 634.4 258.4 L 638.8 249.6 L 654 249.6 L 654 249.6 Z " fill-rule="evenodd" fill="rgb(64,82,54)" mask="url(#_mask_TpeGGWKzkZyRlZnBNvsTW4m5XOYp8rPn)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_LQWMCb4dioFQVBqOSQBk62eQ75m4tAS0"><path d=" M 656.8 244 L 641.6 244 L 647.2 232.8 L 662.4 232.8 L 656.8 244 L 656.8 244 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 656.8 244 L 641.6 244 L 647.2 232.8 L 662.4 232.8 L 656.8 244 L 656.8 244 Z " fill-rule="evenodd" fill="rgb(205,64,0)" mask="url(#_mask_LQWMCb4dioFQVBqOSQBk62eQ75m4tAS0)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_x86kQ90JupBiwv7kcsN2ukBDbOLkBAze"><path d=" M 638.8 280 L 630 280 L 606.4 232.8 L 621.6 232.8 L 641.977 273.691 L 638.8 280 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 638.8 280 L 630 280 L 606.4 232.8 L 621.6 232.8 L 641.977 273.691 L 638.8 280 Z " fill-rule="evenodd" fill="rgb(74,94,63)" mask="url(#_mask_x86kQ90JupBiwv7kcsN2ukBDbOLkBAze)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_AwBb2BJJIBwbHBC4JbvZjdtJnlGVHGEa"><line x1="643.6" y1="234" x2="658.821" y2="234" fill="white" stroke="none"/></mask><line x1="643.6" y1="234" x2="658.821" y2="234" mask="url(#_mask_AwBb2BJJIBwbHBC4JbvZjdtJnlGVHGEa)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_vCDhnuuYBbA8AOGTeV0Bu152KaOr5I8v"><line x1="639.6" y1="238" x2="654.821" y2="238" fill="white" stroke="none"/></mask><line x1="639.6" y1="238" x2="654.821" y2="238" mask="url(#_mask_vCDhnuuYBbA8AOGTeV0Bu152KaOr5I8v)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_A6Cw6lWSJitrQex7lgDJP9a9D0orokeo"><line x1="635.6" y1="242.8" x2="650.821" y2="242.8" fill="white" stroke="none"/></mask><line x1="635.6" y1="242.8" x2="650.821" y2="242.8" mask="url(#_mask_A6Cw6lWSJitrQex7lgDJP9a9D0orokeo)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><g transform="matrix(1,0,0,1,604.4,281)"><text transform="matrix(1,0,0,1,8.497,14.379)" style="font-family:&quot;Open Sans&quot;;font-weight:300;font-size:10px;font-style:italic;fill:#405236;stroke:none;">Verdaccio</text></g></g></g></svg>

assets/svg/logo-small-header-top.svg

@@ -0,0 +1 @@
+<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="584 207 100 100" width="100" height="100"><g id="verdaccio-tiny"><path d=" M 621 207 L 647 207 C 667.421 207 684 223.579 684 244 L 684 270 C 684 290.421 667.421 307 647 307 L 621 307 C 600.579 307 584 290.421 584 270 L 584 244 C 584 223.579 600.579 207 621 207 Z " fill-rule="evenodd" fill="rgb(247,248,246)"/><g id="Group"><mask id="_mask_aLJ2choBe6rGRxbST4YxzucnXJoiLXLS"><path d=" M 654 258.6 L 638.8 289 L 630 289 L 606.4 241.8 L 621.6 241.8 L 634.4 267.4 L 638.8 258.6 L 654 258.6 L 654 258.6 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 654 258.6 L 638.8 289 L 630 289 L 606.4 241.8 L 621.6 241.8 L 634.4 267.4 L 638.8 258.6 L 654 258.6 L 654 258.6 Z " fill-rule="evenodd" fill="rgb(64,82,54)" mask="url(#_mask_aLJ2choBe6rGRxbST4YxzucnXJoiLXLS)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_VpFb8HfoVEV9oMhbDP4WCZkNHeJnsgJB"><path d=" M 656.8 253 L 641.6 253 L 647.2 241.8 L 662.4 241.8 L 656.8 253 L 656.8 253 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 656.8 253 L 641.6 253 L 647.2 241.8 L 662.4 241.8 L 656.8 253 L 656.8 253 Z " fill-rule="evenodd" fill="rgb(205,64,0)" mask="url(#_mask_VpFb8HfoVEV9oMhbDP4WCZkNHeJnsgJB)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_PurdF8WNWO5rV7THGkszebck9RL78xOC"><path d=" M 638.8 289 L 630 289 L 606.4 241.8 L 621.6 241.8 L 641.977 282.691 L 638.8 289 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 638.8 289 L 630 289 L 606.4 241.8 L 621.6 241.8 L 641.977 282.691 L 638.8 289 Z " fill-rule="evenodd" fill="rgb(74,94,63)" mask="url(#_mask_PurdF8WNWO5rV7THGkszebck9RL78xOC)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_0WvewKeO3yEVIIsCnImQYZQpsThG8ZRt"><line x1="643.6" y1="243" x2="658.821" y2="243" fill="white" stroke="none"/></mask><line x1="643.6" y1="243" x2="658.821" y2="243" mask="url(#_mask_0WvewKeO3yEVIIsCnImQYZQpsThG8ZRt)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_mfE3hDhlZLY11weXkNmcXFVIDG3xk8wG"><line x1="639.6" y1="247" x2="654.821" y2="247" fill="white" stroke="none"/></mask><line x1="639.6" y1="247" x2="654.821" y2="247" mask="url(#_mask_mfE3hDhlZLY11weXkNmcXFVIDG3xk8wG)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_2JlRHmgXw2jNKAshMq4eDqO60Nx4xCJU"><line x1="635.6" y1="251.8" x2="650.821" y2="251.8" fill="white" stroke="none"/></mask><line x1="635.6" y1="251.8" x2="650.821" y2="251.8" mask="url(#_mask_2JlRHmgXw2jNKAshMq4eDqO60Nx4xCJU)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><g transform="matrix(1,0,0,1,604.4,216)"><text transform="matrix(1,0,0,1,8.497,14.379)" style="font-family:&quot;Open Sans&quot;;font-weight:300;font-size:10px;font-style:italic;fill:#405236;stroke:none;">Verdaccio</text></g></g></g></svg>

assets/svg/verdaccio-banner.svg

@@ -0,0 +1 @@
+<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="297 325 301 100" width="301" height="100"><g id="verdaccio"><path d=" M 334 325 L 561 325 C 581.421 325 598 341.579 598 362 L 598 388 C 598 408.421 581.421 425 561 425 L 334 425 C 313.579 425 297 408.421 297 388 L 297 362 C 297 341.579 313.579 325 334 325 Z " fill-rule="evenodd" fill="rgb(247,248,246)"/><g id="Group 2"><g id="Group 2 Copy"><g transform="matrix(1,0,0,1,405.2,347.4)"><text transform="matrix(1,0,0,1,0,44.892)" style="font-family:&quot;Open Sans&quot;;font-weight:300;font-size:42px;font-style:italic;fill:#405236;stroke:none;">Verdaccio</text></g></g><g opacity="0.1011096014492754"><mask id="_mask_fCSTmVJv3QSdnixdB2jztr4W92pbW0FE"><line x1="390" y1="374" x2="390" y2="380.597" fill="white" stroke="none"/></mask><line x1="390" y1="374" x2="390" y2="380.597" mask="url(#_mask_fCSTmVJv3QSdnixdB2jztr4W92pbW0FE)" vector-effect="non-scaling-stroke" stroke-width="3.2" stroke="rgb(15,82,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/></g><g id="Group"><mask id="_mask_AEapS60hj4W5lwbVZkWRptMDQjCCQnXV"><path d=" M 372 370.1 L 356.8 400.5 L 348 400.5 L 324.4 353.3 L 339.6 353.3 L 352.4 378.9 L 356.8 370.1 L 372 370.1 L 372 370.1 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 372 370.1 L 356.8 400.5 L 348 400.5 L 324.4 353.3 L 339.6 353.3 L 352.4 378.9 L 356.8 370.1 L 372 370.1 L 372 370.1 Z " fill-rule="evenodd" fill="rgb(64,82,54)" mask="url(#_mask_AEapS60hj4W5lwbVZkWRptMDQjCCQnXV)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_IQ7DNpRZXZtt3eyCzjEeZb9eMnCTbxVr"><path d=" M 374.8 364.5 L 359.6 364.5 L 365.2 353.3 L 380.4 353.3 L 374.8 364.5 L 374.8 364.5 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 374.8 364.5 L 359.6 364.5 L 365.2 353.3 L 380.4 353.3 L 374.8 364.5 L 374.8 364.5 Z " fill-rule="evenodd" fill="rgb(205,64,0)" mask="url(#_mask_IQ7DNpRZXZtt3eyCzjEeZb9eMnCTbxVr)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_Ya7dwXQpCePYQlvQmIYJlgPrxT9FmhAl"><path d=" M 356.8 400.5 L 348 400.5 L 324.4 353.3 L 339.6 353.3 L 359.977 394.191 L 356.8 400.5 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 356.8 400.5 L 348 400.5 L 324.4 353.3 L 339.6 353.3 L 359.977 394.191 L 356.8 400.5 Z " fill-rule="evenodd" fill="rgb(74,94,63)" mask="url(#_mask_Ya7dwXQpCePYQlvQmIYJlgPrxT9FmhAl)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_a52iOKSly0sSYRe2ur3JsZdbSujZeYaS"><line x1="361.6" y1="354.5" x2="376.821" y2="354.5" fill="white" stroke="none"/></mask><line x1="361.6" y1="354.5" x2="376.821" y2="354.5" mask="url(#_mask_a52iOKSly0sSYRe2ur3JsZdbSujZeYaS)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_9P3mzte4BcU1pG1EBPp7BloWoicEEU8d"><line x1="357.6" y1="358.5" x2="372.821" y2="358.5" fill="white" stroke="none"/></mask><line x1="357.6" y1="358.5" x2="372.821" y2="358.5" mask="url(#_mask_9P3mzte4BcU1pG1EBPp7BloWoicEEU8d)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_XoSOCvZ40H8L7kjslOiP3IZuNrYPgQ3F"><line x1="353.6" y1="363.3" x2="368.821" y2="363.3" fill="white" stroke="none"/></mask><line x1="353.6" y1="363.3" x2="368.821" y2="363.3" mask="url(#_mask_XoSOCvZ40H8L7kjslOiP3IZuNrYPgQ3F)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/></g></g></g></svg>

assets/svg/verdaccio-small-logo-black.svg

@@ -0,0 +1 @@
+<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="417 207 100 100" width="100" height="100"><g id="verdaccio-blackwhite"><path d=" M 454 207 L 480 207 C 500.421 207 517 223.579 517 244 L 517 270 C 517 290.421 500.421 307 480 307 L 454 307 C 433.579 307 417 290.421 417 270 L 417 244 C 417 223.579 433.579 207 454 207 Z " fill-rule="evenodd" fill="rgb(0,0,0)"/><g id="Group"><path d=" M 487 253.729 L 471.672 284 L 462.798 284 L 439 237 L 454.328 237 L 467.235 262.492 L 471.672 253.729 L 487 253.729 L 487 253.729 Z " fill-rule="evenodd" fill="rgb(255,255,255)" fill-opacity="0.6"/><path d=" M 484.621 248 L 489.4 248 L 495 237 L 492.621 237 L 479.8 237 L 475 237 L 475 239.357 L 478.6 239.357 L 477.8 240.929 L 471 240.929 L 471 243.286 L 476.6 243.286 L 475.4 245.643 L 467 245.643 L 467 248 L 484.621 248 Z " fill-rule="evenodd" fill="rgb(255,255,255)"/><path d=" M 471.785 284 L 462.88 284 L 439 237 L 454.381 237 L 475 277.718 L 471.785 284 Z " fill-rule="evenodd" fill="rgb(255,255,255)"/></g></g></svg>

assets/svg/verdaccio-small-logo.svg

@@ -0,0 +1 @@
+<?xml version="1.0" standalone="no"?><!-- Generator: Gravit.io --><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="isolation:isolate" viewBox="297 207 100 100" width="100" height="100"><g id="verdaccio-tiny"><path d=" M 334 207 L 360 207 C 380.421 207 397 223.579 397 244 L 397 270 C 397 290.421 380.421 307 360 307 L 334 307 C 313.579 307 297 290.421 297 270 L 297 244 C 297 223.579 313.579 207 334 207 Z " fill-rule="evenodd" fill="rgb(247,248,246)"/><g id="Group"><mask id="_mask_Qbns5yfCiOhckpS4fdmAtyqLr4dgZWId"><path d=" M 367 253.6 L 351.8 284 L 343 284 L 319.4 236.8 L 334.6 236.8 L 347.4 262.4 L 351.8 253.6 L 367 253.6 L 367 253.6 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 367 253.6 L 351.8 284 L 343 284 L 319.4 236.8 L 334.6 236.8 L 347.4 262.4 L 351.8 253.6 L 367 253.6 L 367 253.6 Z " fill-rule="evenodd" fill="rgb(64,82,54)" mask="url(#_mask_Qbns5yfCiOhckpS4fdmAtyqLr4dgZWId)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_78wSwMoF9QkWIbZfueLf7FbQQz8YIBiY"><path d=" M 369.8 248 L 354.6 248 L 360.2 236.8 L 375.4 236.8 L 369.8 248 L 369.8 248 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 369.8 248 L 354.6 248 L 360.2 236.8 L 375.4 236.8 L 369.8 248 L 369.8 248 Z " fill-rule="evenodd" fill="rgb(205,64,0)" mask="url(#_mask_78wSwMoF9QkWIbZfueLf7FbQQz8YIBiY)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_cE65ing3U6mfxM3Uwzq9wIAz5366sMZK"><path d=" M 351.8 284 L 343 284 L 319.4 236.8 L 334.6 236.8 L 354.977 277.691 L 351.8 284 Z " fill-rule="evenodd" fill="white" stroke="none"/></mask><path d=" M 351.8 284 L 343 284 L 319.4 236.8 L 334.6 236.8 L 354.977 277.691 L 351.8 284 Z " fill-rule="evenodd" fill="rgb(74,94,63)" mask="url(#_mask_cE65ing3U6mfxM3Uwzq9wIAz5366sMZK)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(64,82,54)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_ltwHbSFx9vnoAtoXETwxsGPEOrwwWJVd"><line x1="356.6" y1="238" x2="371.821" y2="238" fill="white" stroke="none"/></mask><line x1="356.6" y1="238" x2="371.821" y2="238" mask="url(#_mask_ltwHbSFx9vnoAtoXETwxsGPEOrwwWJVd)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_ydTg3OLbu1BCUeCqplpqMMNyOfpZaWzM"><line x1="352.6" y1="242" x2="367.821" y2="242" fill="white" stroke="none"/></mask><line x1="352.6" y1="242" x2="367.821" y2="242" mask="url(#_mask_ydTg3OLbu1BCUeCqplpqMMNyOfpZaWzM)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/><mask id="_mask_dFEBcI4uC8Gj9CbfqRoz9FrxL6bxmbWv"><line x1="348.6" y1="246.8" x2="363.821" y2="246.8" fill="white" stroke="none"/></mask><line x1="348.6" y1="246.8" x2="363.821" y2="246.8" mask="url(#_mask_dFEBcI4uC8Gj9CbfqRoz9FrxL6bxmbWv)" vector-effect="non-scaling-stroke" stroke-width="4.8" stroke="rgb(205,64,0)" stroke-linejoin="miter" stroke-linecap="square" stroke-miterlimit="10"/></g></g></svg>

assets/verdaccio-logo-Full.svg

@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="301px" height="100px" viewBox="0 0 301 100" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <!-- Generator: Sketch 47.1 (45422) - http://www.bohemiancoding.com/sketch -->
+    <title>Logo-Full</title>
+    <desc>Created with Sketch.</desc>
+    <defs>
+        <polygon id="path-1" points="48 17.6 32.8 48 24 48 0.4 0.8 15.6 0.8 28.4 26.4 32.8 17.6 48 17.6"></polygon>
+        <filter x="-20.0%" y="-11.7%" width="139.9%" height="140.3%" filterUnits="objectBoundingBox" id="filter-2">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feComposite in="shadowBlurOuter1" in2="SourceAlpha" operator="out" result="shadowBlurOuter1"></feComposite>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+        <polygon id="path-3" points="50.8 12 35.6 12 41.2 0.8 56.4 0.8 50.8 12"></polygon>
+        <filter x="-45.7%" y="-49.1%" width="191.3%" height="269.6%" filterUnits="objectBoundingBox" id="filter-4">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feComposite in="shadowBlurOuter1" in2="SourceAlpha" operator="out" result="shadowBlurOuter1"></feComposite>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+        <polygon id="path-5" points="32.8 48 24 48 0.4 0.8 15.6 0.8 35.9772662 41.6908081"></polygon>
+    </defs>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Verdaccio">
+            <rect id="BG" fill="#F7F8F6" x="0" y="0" width="301" height="100" rx="37"></rect>
+            <g id="Group-2" transform="translate(27.000000, 22.000000)">
+                <g id="Group-2-Copy" transform="translate(65.200000, 0.400000)" font-weight="300" font-size="42.4" font-family="OpenSans-LightItalic, Open Sans" fill="#405236" font-style="italic">
+                    <text id="Verdaccio">
+                        <tspan x="16" y="45">Verdaccio</tspan>
+                    </text>
+                </g>
+                <path d="M66,27 L66,33.596969" id="Line-2" stroke="#0F5200" stroke-width="1.6" opacity="0.101109601" stroke-linecap="square"></path>
+                <g id="Group" transform="translate(0.000000, 5.500000)">
+                    <g id="Combined-Shape">
+                        <use fill="black" fill-opacity="1" filter="url(#filter-2)" xlink:href="#path-1"></use>
+                        <use fill="#405236" fill-rule="evenodd" xlink:href="#path-1"></use>
+                        <path stroke="#405236" stroke-width="2.4" d="M46.0583592,18.8 L33.5416408,18.8 L28.4,29.0832816 L14.8583592,2 L2.34164079,2 L24.7416408,46.8 L32.0583592,46.8 L46.0583592,18.8 Z"></path>
+                    </g>
+                    <g id="Path">
+                        <use fill="black" fill-opacity="1" filter="url(#filter-4)" xlink:href="#path-3"></use>
+                        <use fill="#CD4000" fill-rule="evenodd" xlink:href="#path-3"></use>
+                        <path stroke="#CD4000" stroke-width="2.4" d="M50.0583592,10.8 L54.4583592,2 L41.9416408,2 L37.5416408,10.8 L50.0583592,10.8 Z"></path>
+                    </g>
+                    <g id="Combined-Shape">
+                        <use fill="#4A5E3F" fill-rule="evenodd" xlink:href="#path-5"></use>
+                        <path stroke="#405236" stroke-width="2.4" d="M32.0607372,46.8 L34.6351125,41.6879866 L14.8572527,2 L2.34164079,2 L24.7416408,46.8 L32.0607372,46.8 Z"></path>
+                    </g>
+                    <path d="M37.6,2 L52.8210381,2" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+                    <path d="M33.6,6 L48.8210381,6" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+                    <path d="M29.6,10.8 L44.8210381,10.8" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+                </g>
+            </g>
+        </g>
+    </g>
+</svg>

assets/verdaccio-logo-blackwhite.svg

@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="100px" height="100px" viewBox="0 0 100 100" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <!-- Generator: Sketch 47.1 (45422) - http://www.bohemiancoding.com/sketch -->
+    <title>Logo-Black</title>
+    <desc>Created with Sketch.</desc>
+    <defs>
+        <polygon id="path-1" points="48 17.6 32.8 48 24 48 0.4 0.8 15.6 0.8 28.4 26.4 32.8 17.6 48 17.6"></polygon>
+        <filter x="-20.0%" y="-11.7%" width="139.9%" height="140.3%" filterUnits="objectBoundingBox" id="filter-2">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feComposite in="shadowBlurOuter1" in2="SourceAlpha" operator="out" result="shadowBlurOuter1"></feComposite>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+        <path d="M40.810519,12 L50.8,12 L50.8,12 L56.4,0.8 L47.610519,0.8 L36.4,0.8 L36.4,3.2 L40,3.2 L39.2,4.8 L32.4,4.8 L32.4,7.2 L38,7.2 L36.8,9.6 L28.4,9.6 L28.4,12 L40.810519,12 Z" id="path-3"></path>
+        <filter x="-33.9%" y="-49.1%" width="167.9%" height="269.6%" filterUnits="objectBoundingBox" id="filter-4">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+    </defs>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Verdaccio-BlackWhite">
+            <rect id="BG" fill="#000000" x="0" y="0" width="100" height="100" rx="37"></rect>
+            <g id="Group" transform="translate(22.000000, 29.000000)">
+                <g id="Combined-Shape">
+                    <use fill="black" fill-opacity="1" filter="url(#filter-2)" xlink:href="#path-1"></use>
+                    <use fill-opacity="0.6" fill="#FFFFFF" fill-rule="evenodd" xlink:href="#path-1"></use>
+                </g>
+                <g id="Combined-Shape">
+                    <use fill="black" fill-opacity="1" filter="url(#filter-4)" xlink:href="#path-3"></use>
+                    <use fill="#FFFFFF" fill-rule="evenodd" xlink:href="#path-3"></use>
+                </g>
+                <polygon id="Combined-Shape" fill="#FFFFFF" points="32.8 48 24 48 0.4 0.8 15.6 0.8 35.9772662 41.6908081"></polygon>
+            </g>
+        </g>
+    </g>
+</svg>

assets/verdaccio.svg

@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="100px" height="100px" viewBox="0 0 100 100" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <!-- Generator: Sketch 47.1 (45422) - http://www.bohemiancoding.com/sketch -->
+    <title>Logo</title>
+    <desc>Created with Sketch.</desc>
+    <defs>
+        <polygon id="path-1" points="48 17.6 32.8 48 24 48 0.4 0.8 15.6 0.8 28.4 26.4 32.8 17.6 48 17.6"></polygon>
+        <filter x="-20.0%" y="-11.7%" width="139.9%" height="140.3%" filterUnits="objectBoundingBox" id="filter-2">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feComposite in="shadowBlurOuter1" in2="SourceAlpha" operator="out" result="shadowBlurOuter1"></feComposite>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+        <polygon id="path-3" points="50.8 12 35.6 12 41.2 0.8 56.4 0.8 50.8 12"></polygon>
+        <filter x="-45.7%" y="-49.1%" width="191.3%" height="269.6%" filterUnits="objectBoundingBox" id="filter-4">
+            <feOffset dx="0" dy="4" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>
+            <feGaussianBlur stdDeviation="2.5" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>
+            <feComposite in="shadowBlurOuter1" in2="SourceAlpha" operator="out" result="shadowBlurOuter1"></feComposite>
+            <feColorMatrix values="0 0 0 0 0   0 0 0 0 0   0 0 0 0 0  0 0 0 0.0906646286 0" type="matrix" in="shadowBlurOuter1"></feColorMatrix>
+        </filter>
+        <polygon id="path-5" points="32.8 48 24 48 0.4 0.8 15.6 0.8 35.9772662 41.6908081"></polygon>
+    </defs>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Verdaccio-Copy">
+            <rect id="BG" fill="#F7F8F6" x="0" y="0" width="100" height="100" rx="37"></rect>
+            <g id="Group" transform="translate(22.000000, 29.000000)">
+                <g id="Combined-Shape">
+                    <use fill="black" fill-opacity="1" filter="url(#filter-2)" xlink:href="#path-1"></use>
+                    <use fill="#405236" fill-rule="evenodd" xlink:href="#path-1"></use>
+                    <path stroke="#405236" stroke-width="2.4" d="M46.0583592,18.8 L33.5416408,18.8 L28.4,29.0832816 L14.8583592,2 L2.34164079,2 L24.7416408,46.8 L32.0583592,46.8 L46.0583592,18.8 Z"></path>
+                </g>
+                <g id="Path">
+                    <use fill="black" fill-opacity="1" filter="url(#filter-4)" xlink:href="#path-3"></use>
+                    <use fill="#CD4000" fill-rule="evenodd" xlink:href="#path-3"></use>
+                    <path stroke="#CD4000" stroke-width="2.4" d="M50.0583592,10.8 L54.4583592,2 L41.9416408,2 L37.5416408,10.8 L50.0583592,10.8 Z"></path>
+                </g>
+                <g id="Combined-Shape">
+                    <use fill="#4A5E3F" fill-rule="evenodd" xlink:href="#path-5"></use>
+                    <path stroke="#405236" stroke-width="2.4" d="M32.0607372,46.8 L34.6351125,41.6879866 L14.8572527,2 L2.34164079,2 L24.7416408,46.8 L32.0607372,46.8 Z"></path>
+                </g>
+                <path d="M37.6,2 L52.8210381,2" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+                <path d="M33.6,6 L48.8210381,6" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+                <path d="M29.6,10.8 L44.8210381,10.8" id="Line-3" stroke="#CD4000" stroke-width="2.4" stroke-linecap="square"></path>
+            </g>
+        </g>
+    </g>
+</svg>

bin/sinopia

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-
-require('../lib/cli')
-

bin/verdaccio

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+
+require('../build/lib/cli');

conf/README.md

@@ -0,0 +1 @@
+This directory is for config examples.

conf/default.yaml

@@ -0,0 +1,62 @@
+#
+# This is the default config file. It allows all users to do anything,
+# so don't use it on production systems.
+#
+# Look here for more config file examples:
+# https://github.com/verdaccio/verdaccio/tree/master/conf
+#
+
+# path to a directory with all packages
+storage: ./storage
+# path to a directory with plugins to include
+plugins: ./plugins
+
+web:
+  # WebUI is enabled as default, if you want disable it, just uncomment this line
+  #enable: false
+  title: Verdaccio
+
+auth:
+  htpasswd:
+    file: ./htpasswd
+    # Maximum amount of users allowed to register, defaults to "+inf".
+    # You can set this to -1 to disable registration.
+    #max_users: 1000
+
+# a list of other known repositories we can talk to
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@*/*':
+    # scoped packages
+    access: $all
+    publish: $authenticated
+    proxy: npmjs
+
+  '**':
+    # allow all users (including non-authenticated users) to read and
+    # publish all packages
+    #
+    # you can specify usernames/groupnames (depending on your auth plugin)
+    # and three keywords: "$all", "$anonymous", "$authenticated"
+    access: $all
+
+    # allow all known users to publish packages
+    # (anyone can register by default, remember?)
+    publish: $authenticated
+
+    # if package is not available locally, proxy requests to 'npmjs' registry
+    proxy: npmjs
+
+# To use `npm audit` uncomment the following section
+middlewares:
+  audit:
+    enabled: true
+
+# log settings
+logs:
+  - {type: stdout, format: pretty, level: http}
+  #- {type: file, path: verdaccio.log, level: info}
+

conf/docker.yaml

@@ -0,0 +1,65 @@
+#
+# This is the config file used for the docker images.
+# It allows all users to do anything, so don't use it on production systems.
+#
+# Do not configure host and port under `listen` in this file
+# as it will be ignored when using docker.
+# see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
+#
+# Look here for more config file examples:
+# https://github.com/verdaccio/verdaccio/tree/master/conf
+#
+
+# path to a directory with all packages
+storage: /verdaccio/storage
+# path to a directory with plugins to include
+plugins: /verdaccio/plugins
+
+web:
+  # WebUI is enabled as default, if you want disable it, just uncomment this line
+  #enable: false
+  title: Verdaccio
+
+auth:
+  htpasswd:
+    file: /verdaccio/conf/htpasswd
+    # Maximum amount of users allowed to register, defaults to "+infinity".
+    # You can set this to -1 to disable registration.
+    #max_users: 1000
+
+# a list of other known repositories we can talk to
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@*/*':
+    # scoped packages
+    access: $all
+    publish: $authenticated
+    proxy: npmjs
+
+  '**':
+    # allow all users (including non-authenticated users) to read and
+    # publish all packages
+    #
+    # you can specify usernames/groupnames (depending on your auth plugin)
+    # and three keywords: "$all", "$anonymous", "$authenticated"
+    access: $all
+
+    # allow all known users to publish packages
+    # (anyone can register by default, remember?)
+    publish: $authenticated
+
+    # if package is not available locally, proxy requests to 'npmjs' registry
+    proxy: npmjs
+
+# To use `npm audit` uncomment the following section
+middlewares:
+  audit:
+    enabled: true
+
+# log settings
+logs:
+  - {type: stdout, format: pretty, level: http}
+  #- {type: file, path: verdaccio.log, level: info}

conf/full.yaml

@@ -0,0 +1,196 @@
+# path to a directory with all packages
+storage: ./storage
+# path to a directory with plugins to include
+plugins: ./plugins
+
+web:
+  # WebUI is enabled as default, if you want disable it, just uncomment this line
+  #enable: false
+
+  title: Verdaccio
+
+  #logo: logo.png
+
+  # If you're using this registry for a specific module scope,
+  # specify that scope to set it in the webui instructions header (note: escape @ with \@)
+  #scope: \@myscope
+
+auth:
+  htpasswd:
+    file: ./htpasswd
+    # Maximum amount of users allowed to register, defaults to "+infinity".
+    # You can set this to -1 to disable registration.
+    #max_users: 1000
+
+# Configure plugins that can register custom middlewares
+# To use `npm audit` uncomment the following section
+middlewares:
+  audit:
+    enabled: true
+
+# a list of other known repositories we can talk to
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+    # amount of time to wait for repository to respond
+    # before giving up and use the local cached copy
+    #timeout: 30s
+
+    # maximum time in which data is considered up to date
+    #
+    # default is 2 minutes, so server won't request the same data from
+    # uplink if a similar request was made less than 2 minutes ago
+    #maxage: 2m
+
+    # if two subsequent requests fail, no further requests will be sent to
+    # this uplink for five minutes
+    #max_fails: 2
+    #fail_timeout: 5m
+
+    # timeouts are defined in the same way as nginx, see:
+    # http://wiki.nginx.org/ConfigNotation
+
+    # add/override HTTP headers sent to the uplink server
+    # this allows for HTTP Basic auth for example:
+    #headers:
+    #  authorization: "Basic YourBase64EncodedCredentials=="
+
+    # set this to false to prevent tarballs from this upstream
+    # to be stored in the local storage (defaults to true)
+    #cache: false
+
+    # set this to false to disable strict SSL cert check (defaults to true)
+    #strict_ssl: false
+
+packages:
+  '@*/*':
+    # scoped packages
+    access: $all
+    publish: $authenticated
+    proxy: npmjs
+  # uncomment this for packages with "local-" prefix to be available
+  # for admin only, it's a recommended way of handling private packages
+  #'local-*':
+  #  access: admin
+  #  publish: admin
+  #  # you can override storage directory for a group of packages this way:
+  #  storage: 'local_storage'
+
+  '**':
+    # allow all users to read packages (including non-authenticated users)
+    #
+    # you can specify usernames/groupnames (depending on your auth plugin)
+    # and three keywords: "$all", "$anonymous", "$authenticated"
+    access: $all
+
+    # allow 'admin' to publish packages
+    publish: $authenticated
+
+    # if package is not available locally, proxy requests to 'npmjs' registry
+    proxy: npmjs
+
+#####################################################################
+# Advanced settings
+#####################################################################
+
+## Special packages publish configurations
+#publish:
+## This will allow the publisher to publish packages even if any uplink is down.
+#  allow_offline: true
+
+# if you use nginx with custom path, use this to override links
+#url_prefix: https://dev.company.local/verdaccio/
+
+# You can specify listen address (or simply a port).
+# If you add multiple values, verdaccio will listen on all of them.
+#
+# Examples:
+#
+#listen:
+# - localhost:4873            # default value
+# - http://localhost:4873     # same thing
+# - 0.0.0.0:4873              # listen on all addresses (INADDR_ANY)
+# - https://example.org:4873  # if you want to use https
+# - [::1]:4873                # ipv6
+# - unix:/tmp/verdaccio.sock    # unix socket
+
+# Configure HTTPS, it is required if you use "https" protocol above.
+#https:
+#  key: path/to/server.key
+#  cert: path/to/server.crt
+#  ca: path/to/server.pem
+
+# type: file | stdout | stderr
+# level: trace | debug | info | http (default) | warn | error | fatal
+#
+# parameters for file: name is filename
+#  {type: 'file', path: 'verdaccio.log', level: 'debug'},
+#
+# parameters for stdout and stderr: format: json | pretty | pretty-timestamped
+#  {type: 'stdout', format: 'pretty', level: 'debug'},
+logs:
+  - {type: stdout, format: pretty, level: http}
+  #- {type: file, path: verdaccio.log, level: info}
+
+# you can specify proxy used with all requests in wget-like manner here
+# (or set up ENV variables with the same name)
+#http_proxy: http://something.local/
+#https_proxy: https://something.local/
+#no_proxy: localhost,127.0.0.1
+
+# maximum size of uploaded json document
+# increase it if you have "request entity too large" errors
+#max_body_size: 1mb
+
+# Notify Settings
+# Notify was built primarily to use with Slack's Incoming
+# webhooks, but will also deliver a simple payload to
+# any endpoint. Currently only active for publish / create
+# commands.
+#notify:
+  # Choose a method. Technically this will accept any HTTP
+  # request method, but probably stick to GET or POST
+#  method: POST
+  # Only run this notification if the package name matches the regular
+  # expression
+#  packagePattern: ^example-package$
+  # Any flags to be used with the regular expression
+#  packagePatternFlags: i
+  # If this endpoint requires specific headers, set them here
+  # as an array of key: value objects.
+#  headers: [{'Content-type': 'application/x-www-form-urlencoded'}]
+  # set the URL endpoint for this call
+#  endpoint: https://hooks.slack.com/...
+  # Finally, the content you will be sending in the body.
+  # This data will first be run through Handlebars to parse
+  # any Handlebar expressions. All data housed in the metadata object
+  # is available for use within the expressions.
+#  content: ' {{ handlebar-expression }}'
+  # For Slack, follow the following format:
+  # content: '{ "text": "Package *{{ name }}* published to version *{{ dist-tags.latest }}*", "username": "Verdaccio", "icon_emoji": ":package:" }'
+
+  # Multiple notification endpoints can be created by specifying a collection
+#  'example-package-1':
+#    method: POST
+    # Only run this notification if the package name matches the regular
+    # expression
+#    packagePattern: ^example-package-regex$
+    # Any flags to be used with the regular expression
+    # since verdaccio 2.2.2 this property has been disabled read #108
+    # it will be re-enabled after 2.5.0
+    # packagePatternFlags: i
+    # If this endpoint requires specific headers, set them here
+    # as an array of key: value objects.
+    # headers supports as well a literal object
+#    headers: {'Content-type': 'application/x-www-form-urlencoded'}
+    # set the URL endpoint for this call
+#    endpoint: https://hooks.slack.com/...
+    # Finally, the content you will be sending in the body.
+    # This data will first be run through Handlebars to parse
+    # any Handlebar expressions. All data housed in the metadata object
+    # is available for use within the expressions.
+#    content: ' {{ handlebar-expression }}'
+    # For Slack, follow the following format:
+    # content: '{ "text": "Package *{{ name }}* published to version *{{ dist-tags.latest }}*", "username": "Verdaccio", "icon_emoji": ":package:" }'
+

crowdin.yaml

@@ -0,0 +1,50 @@
+project_identifier_env: CROWDIN_VERDACCIO_PROJECT_ID
+api_key_env: CROWDIN_VERDACCIO_API_KEY
+base_path: "./"
+preserve_hierarchy: true
+commit_message: 'docs(website): new translations'
+
+files:
+  -
+    source: '/docs/*.md'
+    translation: '/website/translated_docs/%locale%/%original_file_name%'
+    languages_mapping: &anchor
+      locale:
+        'af': 'af'
+        'ar': 'ar'
+        'bs-BA': 'bs-BA'
+        'ca': 'ca'
+        'cs': 'cs'
+        'da': 'da'
+        'de': 'de'
+        'el': 'el'
+        'es-ES': 'es-ES'
+        'fa': 'fa-IR'
+        'fi': 'fi'
+        'fr': 'fr'
+        'he': 'he'
+        'hu': 'hu'
+        'id': 'id-ID'
+        'it': 'it'
+        'ja': 'ja'
+        'ko': 'ko'
+        'mr': 'mr-IN'
+        'nl': 'nl'
+        'no': 'no-NO'
+        'pl': 'pl'
+        'pt-BR': 'pt-BR'
+        'pt-PT': 'pt-PT'
+        'ro': 'ro'
+        'ru': 'ru'
+        'sk': 'sk-SK'
+        'sr': 'sr'
+        'sv-SE': 'sv-SE'
+        'tr': 'tr'
+        'uk': 'uk'
+        'vi': 'vi'
+        'zh-CN': 'zh-Hans'
+        'zh-TW': 'zh-Hant'
+  -
+    source: '/website/i18n/en.json'
+    translation: '/website/i18n/%locale%.json'
+    languages_mapping: *anchor

debug/bootstrap.js

@@ -0,0 +1,4 @@
+// this file aims to help local debugging with hot transpilation
+// it requires BABEL_ENV=registry set as env variable
+require('babel-register')();
+require('../src/lib/cli');

docker-compose.yaml

@@ -0,0 +1,14 @@
+version: '2.1'
+services:
+  verdaccio:
+    build: .
+    container_name: verdaccio
+    environment:
+      - PORT
+    ports:
+      - $PORT:$PORT
+    volumes:
+       - verdaccio:/verdaccio
+volumes:
+  verdaccio:
+    driver: local

docs/ansible.md

@@ -0,0 +1,14 @@
+---
+id: ansible
+title: "Ansible"
+---
+
+We have a customised solution for `verdaccio` in our organization.
+
+[https://github.com/verdaccio/ansible-verdaccio](https://github.com/verdaccio/ansible-verdaccio)
+
+#### Other options
+
+* Ansible role for Gentoo users: [jirutka/ansible-role-sinopia](https://github.com/jirutka/ansible-role-sinopia).
+* Ansible role for Ubuntu users: [jagregory/sinopia-ansible](https://github.com/jagregory/sinopia-ansible).
+* ansible-verdaccio-role [https://github.com/refinery29/ansible-verdaccio-role](https://github.com/refinery29/ansible-verdaccio-role)

docs/auth.md

@@ -0,0 +1,57 @@
+---
+id: authentification
+title: "Authentification"
+---
+
+The authentification is tied to the auth [plugin](plugins.md) you are using. The package restrictions also is handled by the [Package Access](packages.md).
+
+The client authentification is handled by `npm` client itself. Once you login to the application:
+
+```bash
+npm adduser --registry http://localhost:4873
+```
+
+A token is generated in the `npm` configuration file hosted in your user home folder. For more information about `.npmrc` read the [official documentation](https://docs.npmjs.com/files/npmrc).
+
+```bash
+cat .npmrc
+registry=http://localhost:5555/
+//localhost:5555/:_authToken="secretVerdaccioToken"
+//registry.npmjs.org/:_authToken=secretNpmjsToken
+```
+
+#### Anonymous publish
+
+`verdaccio`allows you to enable anonymous publish, to achieve that you will need to set up correctly your [packages access](packages.md).
+
+Eg:
+
+```yaml
+  'my-company-*':
+    access: $anonymous
+    publish: $anonymous
+    proxy: npmjs
+```
+
+As is described [on issue #212](https://github.com/verdaccio/verdaccio/issues/212#issuecomment-308578500) until `npm@5.3.0` and all minor releases **won't allow you publish without a token**. However `yarn` has not such limitation.
+
+## Default htpasswd
+
+In order to simplify the setup, `verdaccio` use a plugin based on `htpasswd`. As of version v3.0.x an [external plugin](https://github.com/verdaccio/verdaccio-htpasswd) 
+is used by default. The v2.x version of this package still contains the built-in version of this plugin.
+
+```yaml
+auth:
+  htpasswd:
+    file: ./htpasswd
+    # Maximum amount of users allowed to register, defaults to "+inf".
+    # You can set this to -1 to disable registration.
+    #max_users: 1000
+```
+
+Property | Type | Required | Example | Support | Description
+--- | --- | --- | --- | --- | ---
+file | string | Yes | ./htpasswd | all | file that host the encrypted credentials
+max_users | number | No | 1000 | all | set limit of users
+
+In case to decide do not allow user to login, you can set `max_users: -1`.

docs/build.md

@@ -0,0 +1,14 @@
+---
+id: build
+title: "Build the source code"
+---
+
+Verdaccio relies on `yarn` instead `npm` to download dependencies.
+
+*Note: the current build only will build with `➜ yarn@1.x`.
+
+```bash
+  yarn install
+```
+
+To see the complete list of scripts, [click here](https://github.com/verdaccio/verdaccio/wiki/Build-Source-Code).

docs/chef.md

@@ -0,0 +1,17 @@
+---
+id: chef
+title: "Chef Cookbook"
+---
+
+Using Chef Cookbook for Verdaccio
+
+For further information:
+
+* [https://github.com/verdaccio/verdaccio-cookbook](https://github.com/verdaccio/verdaccio-cookbook)
+* [https://supermarket.chef.io/cookbooks/verdaccio](https://supermarket.chef.io/cookbooks/verdaccio)
+
+> We are looking for contributors for this repository, if you are interested please notify the author via tickets.
+
+Author: [Keli Grubb](https://github.com/kgrubb) && Barthelemy Vessemont.
+
+

docs/ci.md

@@ -0,0 +1,14 @@
+---
+id: ci
+title: "Continuous Integration"
+---
+
+You may use verdaccio with continuous integration while login or publish. When
+using NPM to install a private module in a continuous integration environment
+for the first time, a brick wall is quickly hit. The NPM login command is
+designed to be used interactively. This causes an issue in CI, scripts, etc.
+Here’s how to use NPM login different continuous integration platforms.
+
+- [Travis CI](https://remysharp.com/2015/10/26/using-travis-with-private-npm-deps)
+- [Circle CI 1.0](https://circleci.com/docs/1.0/npm-login/) or [Circle CI 2.0](https://circleci.com/docs/2.0/deployment-integrations/#npm)
+- [Gitlab CI](https://www.exclamationlabs.com/blog/continuous-deployment-to-npm-using-gitlab-ci/)

docs/cli.md

@@ -0,0 +1,26 @@
+---
+id: cli
+title: "Command Line Tool"
+---
+
+The verdaccio CLI is your go start the application.
+
+## Commands
+
+```bash
+verdaccio --listen 4000 --config ~./config.yaml
+```
+
+Command | Default | Example | Description
+--- | --- | --- | ---
+--listen \ **-l** | 4873 |  -p 7000 | http port
+--config \ **-c** | ~/.local/verdaccio/config.yaml | ~./config.yaml | the configuration file
+
+## Default config file location
+
+To locate the home directory, we rely on **$XDG_DATA_HOME** as a first choice and Windows environment we look for [APPDATA environment variable](https://www.howtogeek.com/318177/what-is-the-appdata-folder-in-windows/).
+
+## Default storage location
+
+We use **$XDG_DATA_HOME** environment variable as default to locate the storage by default which [should be the same](https://askubuntu.com/questions/538526/is-home-local-share-the-default-value-for-xdg-data-home-in-ubuntu-14-04) as $HOME/.local/share.
+If you are using a custom storage, this location is irrelevant.

docs/config.md

@@ -0,0 +1,209 @@
+---
+id: configuration
+title: "Configuration File"
+---
+
+This file is the cornerstone of verdaccio where you can modify the default behaviour, enable plugins and extend features.
+
+A default configuration file is created the very first time you run `verdaccio`.
+
+## Default Configuration
+
+The default configuration has support for **scoped** packages and allow any user to access all packages but only **authenticated users to publish**.
+
+```yaml
+storage: ./storage
+auth:
+  htpasswd:
+    file: ./htpasswd
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+packages:
+  '@*/*':
+    access: $all
+    publish: $authenticated
+    proxy: npmjs
+  '**':
+    proxy: npmjs
+logs:
+  - {type: stdout, format: pretty, level: http}
+```
+
+## Sections
+
+The following sections explain what each property means and the different options.
+
+### Storage
+
+Is the location of the default storage. **Verdaccio is by default based on local file system**.
+
+```yaml
+storage: ./storage
+```
+
+### Plugins
+
+Is the location of the plugin directory. Useful for Docker/Kubernetes based deployments.
+
+```yaml
+plugins: ./plugins
+```
+
+### Authentification
+
+The authentification set up is done here, the default auth is based on `htpasswd` and is built-in. You can modify this behaviour via [plugins](plugins.md). For more information about this section read the [auth page](auth.md).
+
+```yaml
+auth:
+  htpasswd:
+    file: ./htpasswd
+    max_users: 1000
+```
+
+### Web UI
+
+This properties allow you to modify the look and feel of the web UI. For more information about this section read the [web ui page](web.md).
+
+```yaml
+web:
+  enable: true
+  title: Verdaccio
+  logo: logo.png
+  scope:
+```
+
+### Uplinks
+
+Uplinks is the ability of the system to fetch packages from remote registries when those packages are not available locally. For more information about this section read the [uplinks page](uplinks.md).
+
+
+```yaml
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+```
+
+### Packages
+
+Packages allow the user to control how the packages are gonna be accessed. For more information about this section read the [packages page](packages.md).
+
+
+```yaml
+packages:
+  '@*/*':
+    access: $all
+    publish: $authenticated
+    proxy: npmjs
+```
+
+## Advanced Settings
+
+### Offline Publish
+
+By default `verdaccio` does not allow to publish when the client is offline, that behavior can be overridden by setting this to *true*.
+
+```yaml
+publish:
+  allow_offline: false
+```
+
+<small>Since: `verdaccio@2.3.6` due [#223](https://github.com/verdaccio/verdaccio/pull/223)</small>
+
+### URL Prefix
+
+```yaml
+url_prefix: https://dev.company.local/verdaccio/
+```
+
+Since: `verdaccio@2.3.6` due [#197](https://github.com/verdaccio/verdaccio/pull/197)
+
+
+### Max Body Size
+
+By default the maximum body size for a JSON document is `10mb`, if you run in errors as `"request entity too large"` you may increase this value.
+
+```yaml
+max_body_size: 10mb
+```
+
+### Listen Port
+
+`verdaccio` runs by default in the port `4873`. Changing the port can be done via [cli](cli.md) or in the configuration file, the following options are valid.
+
+```yaml
+listen:
+# - localhost:4873            # default value
+# - http://localhost:4873     # same thing
+# - 0.0.0.0:4873              # listen on all addresses (INADDR_ANY)
+# - https://example.org:4873  # if you want to use https
+# - "[::1]:4873"                # ipv6
+# - unix:/tmp/verdaccio.sock    # unix socket
+```
+
+### HTTPS
+
+To enable `https` in `verdaccio` it's enough to set the `listen` flag with the protocol *https://*. For more information about this section read the [ssl page](ssl.md).
+
+
+```yaml
+https:
+    key: ./path/verdaccio-key.pem
+    cert: ./path/verdaccio-cert.pem
+    ca: ./path/verdaccio-csr.pem
+```
+
+### Proxy
+
+Proxies are special-purpose HTTP servers designed to transfer data from remote servers to local clients.
+
+#### http_proxy and https_proxy
+
+If you have a proxy in your network you can set a `X-Forwarded-For` header using the following properties.
+
+```yaml
+http_proxy: http://something.local/
+https_proxy: https://something.local/
+```
+
+#### no_proxy
+
+This variable should contain a comma-separated list of domain extensions proxy should not be used for.
+
+```yaml
+no_proxy: localhost,127.0.0.1
+```
+
+### Notifications
+
+Enabling notifications to third-party tools is fairly easy via web hooks. For more information about this section read the [notifications page](notifications.md).
+
+```yaml
+notify:
+  method: POST
+  headers: [{'Content-Type': 'application/json'}]
+  endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
+  content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'
+```
+
+
+> For more detailed configuration settings, please [check the source code](https://github.com/verdaccio/verdaccio/tree/master/conf).
+
+
+### Audit
+
+<small>Since: `verdaccio@3.0.0`</small>
+
+`npm audit` is a new command released with [npm 6.x](https://github.com/npm/npm/releases/tag/v6.1.0). Verdaccio includes
+a built-in middleware plugin to handle this command.
+
+> If you have a new installation it comes by default, otherwise you need to add the following props to your config file
+
+```yaml
+middlewares:
+  audit:
+    enabled: true
+```
+
+
+

docs/contributing.md

@@ -0,0 +1,83 @@
+---
+id: contributing
+title: "Contributing Verdaccio"
+---
+
+First of all 👏👏 thanks for visiting this page, for us means you are willing contribute to `verdaccio` and we are happy for that. Jumping into an unfamiliar code base is not easy but we are here to help you.
+
+## Comunication Channels
+
+If you are willing for asking, we use two channels for discussions:
+
+* [Public Discord channel](http://chat.verdaccio.org/)
+
+## Getting started
+
+As a first glance verdaccio is a single repository, but there are many ways you might contribute and a variety of technologies to practice.
+
+### Finding my spot
+
+All we have different skills, so, let's see where you might feel comfortable.
+
+### I know or I want to learn Node.js
+
+Node.js is the base of `verdaccio`, we use libraries as `express`, `commander`, `request` or `async`. Verdaccio is basically a Rest API that create a communication with `npm` clients compatible, as `yarn`.
+
+We have a long [list of plugins](plugins.md) ready to be used and improved but at the same time [you might create your own](dev-plugins.md).
+
+### I would prefer to work in the User Interface
+
+Recently we have moved to modern techonologies as `React` and `element-react`. We are looking forward to see new ideas how to improve the UI. 
+
+### I feel more confortable improving the stack
+
+Of course, we will be happy to help us improving the stack, you can upgrade dependencies as `eslint`, `stylelint`, `webpack`. You migt merely improve the `webpack` configuration would be great. Any suggestion is very welcome. Furthermore whether you have experience with **Yeoman** you might help us with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin).
+
+Here some ideas:
+
+* Create a common eslint rules to be used across all dependencies or plugins
+* Improve Flow types definitions delivery
+* Moving to Webpack 4
+* Improve hot reload with Webpack
+* We use babel and webpack across all dependencies, why not a common preset?
+* Improve continous integration delivery
+
+### I do great Documentation
+
+Many contributors find typos and grammar issues, that also helps to improve the overall experience for troubleshooting.
+
+### I am a Designer
+
+We have a frontend website [http://www.verdaccio.org/](http://www.verdaccio.org/) that will be happy to see your ideas.
+
+Our website is based on [Docusaurus](https://docusaurus.io/).
+
+### I am a DevOps
+
+We have a widely popular Docker image [https://hub.docker.com/r/verdaccio/verdaccio/](https://hub.docker.com/r/verdaccio/verdaccio/) that need maintenance and pretty likely huge improvements, we need your knowledge for the benefits of all users.
+
+We have support for **Kubernetes**, **Puppet**, **Ansible** and **Chef** and we need help in those fields, feel free to see all repositories.
+
+### I can do translations
+
+Verdaccio aims to be multilingual, in order to achieve it **we have the awesome support** of [Crowdin](https://crowdin.com) that is an amazing platform for translations.
+
+<img src="https://d3n8a8pro7vhmx.cloudfront.net/uridu/pages/144/attachments/original/1485948891/Crowdin.png" width="400px"/>
+
+We have setup a project where you can choose your favourite language, if you do not find your language feel free to request one [creating a ticket](https://github.com/verdaccio/verdaccio/issues/new).
+
+[Go to Crowdin Verdaccio](https://crowdin.com/project/verdaccio)
+
+
+## I'm ready to contribute
+
+If you are thinking *"I've seen already the [repositories](repositories.md) and I'm willing to start right away"*  then I have good news for you, that's the next step.
+
+You will need learn how to build, [we have prepared a guide just for that](build.md).
+
+Once you have played around with all scripts and you know how to use them, we are ready to go to the next step, run the [**Unit Test**](test.md).
+
+
+## Full list of contributors. We want to see your face here !
+
+<a href="graphs/contributors"><img src="https://opencollective.com/verdaccio/contributors.svg?width=890&button=false" /></a>

docs/dev-plugins.md

@@ -0,0 +1,193 @@
+---
+id: dev-plugins
+title: "Developing Plugins"
+---
+
+There are many ways to extend `verdaccio`, the kind of plugins supported are:
+
+* Authentication plugins
+* Middleware plugins (since `v2.7.0`)
+* Storage plugins since (`v3.x`)
+
+> We recommend developing plugins using our [flow type definitions](https://github.com/verdaccio/flow-types).
+
+## Authentication Plugin
+
+Basically we have to return an object with a single method called `authenticate` that will recieve 3 arguments (`user, password, callback`).
+
+### API
+
+```flow
+interface IPluginAuth extends IPlugin {
+  login_url?: string;
+  authenticate(user: string, password: string, cb: Callback): void;
+  adduser(user: string, password: string, cb: Callback): void;
+  allow_access(user: RemoteUser, pkg: $Subtype<PackageAccess>, cb: Callback): void;
+  allow_publish(user: RemoteUser, pkg: $Subtype<PackageAccess>, cb: Callback): void;
+}
+```
+> Only `adduser`, `allow_access` and `allow_publish` are optional, verdaccio provide a fallback in all those cases.
+
+#### Callback
+
+Once the authentication has been executed there is 2 options to give a response to `verdaccio`.
+
+###### OnError
+
+Either something bad happened or auth was unsuccessful.
+
+```flow
+callback(null, false)
+```
+
+###### OnSuccess
+
+The auth was successful.
+
+
+`groups` is an array of strings where the user is part of.
+
+```
+ callback(null, groups);
+```
+
+### Example
+
+```javascript
+function Auth(config, stuff) {
+  var self = Object.create(Auth.prototype);
+  self._users = {};
+
+  // config for this module
+  self._config = config;
+
+  // verdaccio logger
+  self._logger = stuff.logger;
+
+  // pass verdaccio logger to ldapauth
+  self._config.client_options.log = stuff.logger;
+
+  return self;
+}
+
+Auth.prototype.authenticate = function (user, password, callback) {
+  var LdapClient = new LdapAuth(self._config.client_options);
+  ....
+  LdapClient.authenticate(user, password, function (err, ldapUser) {
+    ...
+    var groups;
+     ...
+    callback(null, groups);
+  });
+};
+
+module.exports = Auth;
+```
+
+And the configuration will looks like:
+
+```yaml
+auth:
+  htpasswd:
+    file: ./htpasswd
+```
+Where `htpasswd` is the sufix of the plugin name. eg: `verdaccio-htpasswd` and the rest of the body would be the plugin configuration params.
+
+## Middleware Plugin
+
+Middleware plugins have the capability to modify the API layer, either adding new endpoints or intercepting requests.
+
+```flow
+interface verdaccio$IPluginMiddleware extends verdaccio$IPlugin {
+  register_middlewares(app: any, auth: IBasicAuth, storage: IStorageManager): void;
+}
+```
+
+### register_middlewares
+
+The method provide full access to the authentification and storage via `auth` and `storage`. `app` is the express application that allows you to add new endpoints.
+
+> A pretty good example
+of middleware plugin is the [sinopia-github-oauth](https://github.com/soundtrackyourbrand/sinopia-github-oauth) and [verdaccio-audit](https://github.com/verdaccio/verdaccio-audit).
+
+### API
+
+```js
+function register_middlewares(expressApp, authInstance, storageInstance) {
+   /* more stuff */
+}
+```
+
+To register a middleware we need an object with a single method called `register_middlewares` that will recieve 3 arguments (`expressApp, auth, storage`).
+*Auth* is the authentification instance and *storage* is also the main Storage instance that will give you have access to all to  the storage actions.
+
+
+## Storage Plugin
+
+Verdaccio by default uses a file system storage plugin [local-storage](https://github.com/verdaccio/local-storage), but, since `verdaccio@3.x` you can plug in a custom storage replacing the default behaviour.
+
+### API
+
+The storage API is a bit more complex, you will need to create a class that return a `IPluginStorage` implementation. Please see details bellow.
+
+```flow
+class LocalDatabase<IPluginStorage>{
+  constructor(config: $Subtype<verdaccio$Config>, logger: verdaccio$Logger): ILocalData;
+}
+
+interface IPluginStorage {
+  logger: verdaccio$Logger;
+	config: $Subtype<verdaccio$Config>;
+  add(name: string, callback: verdaccio$Callback): void;
+  remove(name: string, callback: verdaccio$Callback): void;
+  get(callback: verdaccio$Callback): void;
+  getSecret(): Promise<string>;
+  setSecret(secret: string): Promise<any>;
+  getPackageStorage(packageInfo: string): verdaccio$IPackageStorage;
+  search(onPackage: verdaccio$Callback, onEnd: verdaccio$Callback, validateName: Function): void;
+}
+
+interface IPackageStorageManager {
+  path: string;
+  logger: verdaccio$Logger;
+  writeTarball(name: string): verdaccio$IUploadTarball;
+  readTarball(name: string): verdaccio$IReadTarball;
+  readPackage(fileName: string, callback: verdaccio$Callback): void;
+  createPackage(name: string, value: verdaccio$Package, cb: verdaccio$Callback): void;
+  deletePackage(fileName: string, callback: verdaccio$Callback): void;
+  removePackage(callback: verdaccio$Callback): void;
+  updatePackage(pkgFileName: string,
+                updateHandler: verdaccio$Callback,
+                onWrite: verdaccio$Callback,
+                transformPackage: Function,
+                onEnd: verdaccio$Callback): void;
+  savePackage(fileName: string, json: verdaccio$Package, callback: verdaccio$Callback): void;
+}
+
+class verdaccio$IUploadTarball extends stream$PassThrough {
+  abort: Function;
+  done: Function;
+  _transform: Function;
+  abort(): void;
+  done(): void;
+}
+
+class verdaccio$IReadTarball extends stream$PassThrough {
+  abort: Function;
+  abort(): void;
+}
+```
+
+> The Storage API is still experimental and might change in the next minor versions. For further information about Storage API please follow the [types
+definitions in our official repository](https://github.com/verdaccio/flow-types).
+
+### Storage Plugins Examples
+
+The following list of plugins are implementing the Storage API and might be used them as example.
+
+* [verdaccio-memory](https://github.com/verdaccio/verdaccio-memory)
+* [local-storage](https://github.com/verdaccio/local-storage)
+* [verdaccio-google-cloud](https://github.com/verdaccio/verdaccio-google-cloud)
+* [verdaccio-s3-storage](https://github.com/Remitly/verdaccio-s3-storage/tree/s3)
+
+> Are you willing to contribute with new Storage Plugins? [Click here.](https://github.com/verdaccio/verdaccio/issues/103#issuecomment-357478295)

docs/docker.md

@@ -0,0 +1,170 @@
+---
+id: docker
+title: Docker
+---
+
+<div class="docker-count">
+
+![alt Docker Pulls Count](http://dockeri.co/image/verdaccio/verdaccio "Docker Pulls Count")
+
+</div>
+
+To pull the latest pre-built [docker image](https://hub.docker.com/r/verdaccio/verdaccio/):
+
+```bash
+docker pull verdaccio/verdaccio
+```
+
+![Docker pull](/svg/docker_verdaccio.gif)
+
+## Tagged Versions
+
+Since version `v2.x` you can pull docker images by [tag](https://hub.docker.com/r/verdaccio/verdaccio/tags/), as follows:
+
+For a major version:
+
+```bash
+docker pull verdaccio/verdaccio:3
+```
+For a minor version:
+
+```bash
+docker pull verdaccio/verdaccio:3.0
+```
+
+For a specific (patch) version:
+
+```bash
+docker pull verdaccio/verdaccio:3.0.1
+```
+
+For the next major release using the `beta` (master branch) version.
+
+```bash
+docker pull verdaccio/verdaccio:beta
+```
+
+> If you are interested on a list of tags, [please visit the Docker Hub website](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
+
+## Running verdaccio using Docker
+
+To run the docker container:
+```bash
+docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio
+```
+The last argument defines which image to use.
+The above line will pull the latest prebuilt image from dockerhub, if you haven't done that already.
+
+If you have [build an image locally](#build-your-own-docker-image) use `verdaccio` as the last argument.
+
+
+You can use `-v` to bind mount `conf`, `storage` and `plugins` to the hosts filesystem:
+```bash
+V_PATH=/path/for/verdaccio; docker run -it --rm --name verdaccio -p 4873:4873 \
+  -v $V_PATH/conf:/verdaccio/conf \
+  -v $V_PATH/storage:/verdaccio/storage \
+  -v $V_PATH/plugins:/verdaccio/plugins \
+  verdaccio/verdaccio
+```
+>Note: Verdaccio runs as a non-root user (uid=100, gid=101) inside the container, if you use bind mount to override default, you need to make sure the mount directory is assigned to the right user. In above example, you need to run `sudo chown -R 100:101 /opt/verdaccio` otherwise you will get permission errors at runtime. [Use docker volume](https://docs.docker.com/storage/volumes/) is recommended over using bind mount.
+
+### Plugins
+Plugins can be installed in a separate directory and mounted using Docker or Kubernetes, however make sure you build plugins with native dependencies using the same base image as the Verdaccio Dockerfile.
+
+### Docker and custom port configuration
+Any `host:port` configured in `conf/config.yaml` under `listen` is currently ignored when using docker.
+
+If you want to reach verdaccio docker instance under different port, lets say `5000`
+in your `docker run` command replace `-p 4873:4873` with `-p 5000:4873`.
+
+In case you need to specify which port to listen to **in the docker container**,
+since version 2.?.? you can do so by providing additional arguments to `docker run`: `--env PORT=5000`
+This changes which port the docker container exposes and the port verdaccio listens to.
+
+Of course the numbers you give to `-p` paremeter need to match,
+so assuming you want them to all be the same this is what you could copy, paste and adopt:
+```bash
+PORT=5000; docker run -it --rm --name verdaccio \
+  --env PORT -p $PORT:$PORT
+  verdaccio/verdaccio
+```
+
+### Using HTTPS with Docker
+You can configure the protocol verdaccio is going to listen on, similarly to the port configuration.
+You have to overwrite the default value("http") of the `PROTOCOL` environment variable to "https", after you specified the certificates in the config.yaml.
+
+```bash
+PROTOCOL=https; docker run -it --rm --name verdaccio \
+  --env PROTOCOL -p 4873:4873
+  verdaccio/verdaccio
+```
+
+### Using docker-compose
+
+1. Get the latest version of [docker-compose](https://github.com/docker/compose).
+2. Build and run the container:
+
+```bash
+$ docker-compose up --build
+```
+
+You can set the port to use (for both container and host) by prefixing the above command with `PORT=5000 `.
+
+Docker will generate a named volume in which to store persistent application data. You can use `docker inspect` or `docker volume inspect` to reveal the physical location of the volume and edit the configuration, such as:
+
+```
+$ docker volume inspect verdaccio_verdaccio
+[
+    {
+        "Name": "verdaccio_verdaccio",
+        "Driver": "local",
+        "Mountpoint": "/var/lib/docker/volumes/verdaccio_verdaccio/_data",
+        "Labels": null,
+        "Scope": "local"
+    }
+]
+
+```
+
+## Build your own Docker image
+
+```bash
+docker build -t verdaccio .
+```
+
+There is also an npm script for building the docker image, so you can also do:
+
+```bash
+npm run build:docker
+```
+
+Note: The first build takes some minutes to build because it needs to run `npm install`,
+and it will take that long again whenever you change any file that is not listed in `.dockerignore`.
+
+If you want to use the docker image on a rpi or a compatible device there is also a dockerfile available.
+To build the docker image for raspberry pi execute:
+
+```bash
+npm run build:docker:rpi
+```
+
+Please note that for any of the above docker commands you need to have docker installed on your machine and the docker executable should be available on your `$PATH`.
+
+## Docker Examples
+
+There is a separate repository that hosts multiple configurations to compose Docker images with `verdaccio`, for instance, as reverse proxy:
+
+[https://github.com/verdaccio/docker-examples](https://github.com/verdaccio/docker-examples)
+
+## Docker Custom Builds
+
+* [docker-verdaccio-gitlab](https://github.com/snics/docker-verdaccio-gitlab)
+* [docker-verdaccio](https://github.com/deployable/docker-verdaccio)
+* [docker-verdaccio-s3](https://github.com/asynchrony/docker-verdaccio-s3) Private NPM container that can backup to s3
+* [docker-verdaccio-ldap](https://github.com/snadn/docker-verdaccio-ldap)
+* [verdaccio-ldap](https://github.com/nathantreid/verdaccio-ldap)
+* [verdaccio-compose-local-bridge](https://github.com/shingtoli/verdaccio-compose-local-bridge)
+* [docker-verdaccio](https://github.com/Global-Solutions/docker-verdaccio)
+* [verdaccio-docker](https://github.com/idahobean/verdaccio-docker)
+* [verdaccio-server](https://github.com/andru255/verdaccio-server)
+* [coldrye-debian-verdaccio](https://github.com/coldrye-docker/coldrye-debian-verdaccio) docker image providing verdaccio from coldrye-debian-nodejs.

docs/iis-server.md

@@ -0,0 +1,113 @@
+---
+id: iss-server
+title: "Installing on IIS server"
+---
+
+These instructions were written for Windows Server 2012, IIS 8, [Node.js 0.12.3](https://nodejs.org/), [iisnode 0.2.16](https://github.com/tjanczuk/iisnode) and [verdaccio 2.1.0](https://github.com/verdaccio/verdaccio).
+
+* Install IIS Install [iisnode](https://github.com/tjanczuk/iisnode).
+Make sure you install prerequisites (Url Rewrite Module & node) as explained in the instructions for iisnode.
+* Create a new folder in Explorer where you want to host verdaccio.
+For example `C:\verdaccio`.
+Save [package.json](#packagejson),
+[start.js](#startjs)
+and [web.config](#webconfig) in this folder.
+* Create a new site in Internet Information Services Manager. You can name it whatever you want.
+I'll call it verdaccio in these [instructions](http://www.iis.net/learn/manage/configuring-security/application-pool-identities). Specify the path to where you saved all files and a port number.
+* Go back to Explorer and give the user that runs the application pool modify rights to the folder you just created. If you've named the new site verdaccio and did not change the app pool, it's running under an ApplicationPoolIdentity and you should give the user IIS AppPool\verdaccio modify rights see instructions if you need help. (You can restrict access later if you want so that it only has modify rights on the iisnode and verdaccio\storage)
+* Start a command prompt and execute the commands below to download verdaccio:
+
+````
+cd c:\verdaccio
+npm install
+````
+
+* Make sure you have an inbound rule accepting TCP traffic to the port in Windows Firewall
+* Thats it! Now you can navigate to the host and port that you specified
+
+
+I wanted the `verdaccio` site to be the default site in IIS so I did the following:
+
+* I made sure the .npmrc file in `c:\users{yourname}\` had the registry set to `"registry=http://localhost/"`
+* I stopped the "Default Web Site" and only start the site "verdaccio" site in IIS
+* I set the bindings to "http", ip address "All Unassigned" on port 80, ok any warning or prompts
+
+These instructions are based on [Host Sinopia in IIS
+on Windows](https://gist.github.com/HCanber/4dd8409f79991a09ac75). I had to tweak my web config as per below but you may find the original from the
+for mentioned link works better
+
+A default configuration file will be created `c:\verdaccio\verdaccio\config.yaml`
+
+###  package.json
+
+````json
+{
+  "name": "iisnode-verdaccio",
+  "version": "1.0.0",
+  "description": "Hosts verdaccio in iisnode",
+  "main": "start.js",
+  "dependencies": {
+    "verdaccio": "^2.1.0"
+  }
+}
+````
+
+### start.js
+
+````bash
+process.argv.push('-l', 'unix:' + process.env.PORT);
+require('./node_modules/verdaccio/src/lib/cli.js');
+````
+
+### web.config
+
+````xml
+<configuration>
+  <system.webServer>
+	<modules>
+		<remove name="WebDAVModule" />
+	</modules>
+
+    <!-- indicates that the start.js file is a node.js application
+    to be handled by the iisnode module -->
+    <handlers>
+            <remove name="WebDAV" />
+			<add name="iisnode" path="start.js" verb="*" modules="iisnode" resourceType="Unspecified" requireAccess="Execute" />
+            <add name="WebDAV" path="*" verb="*" modules="WebDAVModule" resourceType="Unspecified" requireAccess="Execute" />
+    </handlers>
+
+    <rewrite>
+      <rules>
+
+        <!-- iisnode folder is where iisnode stores it's logs. These should
+        never be rewritten -->
+        <rule name="iisnode" stopProcessing="true">
+          <match url="iisnode*" />
+          <action type="None" />
+        </rule>
+
+        <!-- Rewrite all other urls in order for verdaccio to handle these -->
+        <rule name="verdaccio">
+          <match url="/*" />
+          <action type="Rewrite" url="start.js" />
+        </rule>
+      </rules>
+    </rewrite>
+
+    <!-- exclude node_modules directory and subdirectories from serving
+    by IIS since these are implementation details of node.js applications -->
+    <security>
+      <requestFiltering>
+        <hiddenSegments>
+          <add segment="node_modules" />
+        </hiddenSegments>
+      </requestFiltering>
+    </security>
+
+  </system.webServer>
+</configuration>
+````
+
+### Troubleshooting
+- **The web interface does not load when hosted with https as it tries to download scripts over http.**   
+Make sure that you have correctly mentioned `url_prefix` in verdaccio config. Follow the [discussion](https://github.com/verdaccio/verdaccio/issues/622).

docs/install.md

@@ -0,0 +1,48 @@
+---
+id: installation
+title: "Installation"
+---
+
+Verdaccio is a multiplatform web application. To install it, you need a few prerequisites.
+
+#### Prerequisites
+
+1. Node higher than
+    - For version `verdaccio@2.x` Node `v4.6.1` is the minimum supported version.
+    - For version `verdaccio@latest` Node `6.12.0` is the minimum supported version.
+2. npm `>=3.x` or `yarn`
+3. The web interface supports the `Chrome, Firefox, Edge, and IE9` browsers.
+
+## Installing the CLI
+
+`verdaccio` must be installed globaly using either of the following methods:
+
+Using `npm`
+
+```bash
+npm install -g verdaccio
+```
+or using `yarn`
+
+```bash
+yarn global add verdaccio
+```
+
+![install verdaccio](/svg/install_verdaccio.gif)
+
+
+## Basic Usage
+
+Once it has been installed, you only need to execute the CLI command:
+
+```bash
+$> verdaccio
+warn --- config file  - /home/.config/verdaccio/config.yaml
+warn --- http address - http://localhost:4873/ - verdaccio/3.0.1
+```
+
+For more information about the CLI, please [read the cli section](cli.md).
+
+## Docker Image
+
+`verdaccio` has an official docker image you can use, and in most cases, the default configuration is good enough. For more information about how to install the official image, [read the docker section](docker.md).

docs/kubernetes.md

@@ -0,0 +1,99 @@
+---
+id: kubernetes
+title: "Kubernetes"
+---
+
+ You can find instructions to deploy Verdaccio on a Kubernetes cluster on the
+[verdaccio/docker-example](https://github.com/verdaccio/docker-examples/tree/master/kubernetes-example)
+repository. However, the recommended method to install Verdaccio on a Kubernetes
+cluster is to use [Helm](https://helm.sh). Helm is a
+[Kubernetes](https://kubernetes.io) package manager which bring multiple
+advantages.
+
+## Helm
+
+### Setup Helm
+
+If you haven't used Helm before, you need to setup the Helm controller called
+Tiller:
+
+```bash
+helm init
+```
+
+### Install
+
+Deploy the Helm [stable/verdaccio](https://github.com/kubernetes/charts/tree/master/stable/verdaccio)
+chart. In this example we use `npm` as release name:
+
+```bash
+helm install --name npm stable/verdaccio
+```
+
+### Deploy a specific version
+
+```bash
+helm install --name npm --set image.tag=2.6.5 stable/verdaccio
+```
+
+### Upgrading Verdaccio
+
+```bash
+helm upgrade npm stable/verdaccio
+```
+
+### Uninstalling
+
+```bash
+helm del --purge npm
+```
+
+**Note:** this command delete all the resources, including packages that you may
+have previously published to the registry.
+
+
+### Custom Verdaccio configuration
+
+You can customize the Verdaccio configuration using a Kubernetes *configMap*.
+
+#### Prepare
+
+Copy the [existing configuration](https://github.com/verdaccio/verdaccio/blob/master/conf/full.yaml)
+and adapt it for your use case:
+
+```bash
+wget https://raw.githubusercontent.com/verdaccio/verdaccio/master/conf/full.yaml -O config.yaml
+```
+
+**Note:** Make sure you are using the right path for the storage that is used for
+persistency:
+
+```yaml
+storage: /verdaccio/storage/data
+auth:
+  htpasswd:
+    file: /verdaccio/storage/htpasswd
+```
+
+#### Deploy the configMap
+
+Deploy the `configMap` to the cluster
+
+```bash
+kubectl create configmap verdaccio-config --from-file ./config.yaml
+```
+
+#### Deploy Verdaccio
+
+Now you can deploy the Verdaccio Helm chart and specify which configuration to
+use:
+
+```bash
+helm install --name npm --set customConfigMap=verdaccio-config stable/verdaccio
+```
+
+## Rancher Support
+
+[Rancher](http://rancher.com/) is a complete container management platform that makes managing and using containers in production really easy.
+
+* [verdaccio-rancher](https://github.com/lgaticaq/verdaccio-rancher)

docs/logger.md

@@ -0,0 +1,25 @@
+---
+id: logger
+title: "Logger"
+---
+
+As any web application, verdaccio has a customisable built-in logger. You can define multiple types of outputs.
+
+```yaml
+logs:
+  # console output
+  - {type: stdout, format: pretty, level: http}
+  # file output
+  - {type: file, path: verdaccio.log, level: info}
+```
+
+Use `SIGUSR2` to notify the application, the log-file was rotated and it needs to reopen it.
+
+### Configuration
+
+Property | Type | Required | Example | Support | Description
+--- | --- | --- | --- | --- | ---
+type |  string | No | [stdout, file] | all | define the output
+path | string | No | verdaccio.log | all | if type is file, define the location of that file
+format | string | No | [pretty, pretty-timestamped] | all | output format
+level | string | No | [fatal, error, warn, http, info, debug, trace] | all | verbose level

docs/node-api.md

@@ -0,0 +1,42 @@
+---
+id: node-api
+title: "Node API"
+---
+
+Verdaccio can be invoqued programmatically. The node API was introduced after version `verdaccio@3.0.0-alpha.10`.
+
+## Usage
+
+#### Programmatically
+
+```js
+ import startServer from 'verdaccio';	
+
+ startServer(configJsonFormat, 6000, store, '1.0.0', 'verdaccio',
+    (webServer, addrs, pkgName, pkgVersion) => {
+		webServer.listen(addr.port || addr.path, addr.host, () => {
+			console.log('verdaccio running');
+		});
+  });
+```
+
+## Other implementations
+
+* [verdaccio-server](https://github.com/boringame/verdaccio-server) local npm registry proxy server
+
+```js
+// js
+import * as verdaccioServer from "verdaccio-server";
+verdaccioServer.start();
+verdaccioServer.stop();
+verdaccioServer.list();
+verdaccioServer.stopAll();
+verdaccioServer.show();
+verdaccioServer.cli();
+// windows .net2
+verdaccioServer.serviceInstall();
+verdaccioServer.serviceUninstall();
+verdaccioServer.serviceStart();
+verdaccioServer.serviceStop();
+verdaccioServer.serviceRestart();
+```

docs/notifications.md

@@ -0,0 +1,168 @@
+---
+id: notifications
+title: "Notifications"
+---
+
+Notify was built primarily to use with Slack's Incoming
+webhooks, but will also deliver a simple payload to
+any endpoint. Currently only active for `npm publish`
+command.
+
+## Usage
+
+An example with a **HipChat**, **Stride** and **Google Hangouts Chat** hook:
+
+> Verdaccio supports any API, feel free to ad more examples.
+
+#### Single notification
+
+```yaml
+notify:
+  method: POST
+  headers: [{'Content-Type': 'application/json'}]
+  endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
+  content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'
+```
+
+#### Multiple notification
+
+```yaml
+notify:
+  'example-google-chat':
+    method: POST
+    headers: [{'Content-Type': 'application/json'}]
+    endpoint: https://chat.googleapis.com/v1/spaces/AAAAB_TcJYs/messages?key=myKey&token=myToken
+    content: '{"text":"New package published: `{{ name }}{{#each versions}} v{{version}}{{/each}}`"}'
+  'example-hipchat':
+     method: POST
+     headers: [{'Content-Type': 'application/json'}]
+     endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
+     content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'
+  'example-stride':
+     method: POST
+     headers: [{'Content-Type': 'application/json'}, {'authorization': 'Bearer secretToken'}]
+     endpoint: https://api.atlassian.com/site/{cloudId}/conversation/{conversationId}/message
+     content: '{"body": {"version": 1,"type": "doc","content": [{"type": "paragraph","content": [{"type": "text","text": "New package published: * {{ name }}* Publisher name: * {{ publisher.name }}"}]}]}}'     
+```
+
+## Template 
+
+We use [Handlebars](https://handlebarsjs.com/) as main template engine.
+
+### Format Examples
+
+```
+# iterate all versions
+{{ name }}{{#each versions}} v{{version}}{{/each}}`"}
+
+# publisher and `dist-tag` package published
+{{ publisher.name }} has published {{publishedPackage}}"}
+```
+
+### Properties
+
+List of properties accesible via template
+
+* Metadata
+* Publisher (who is publishing)
+* Package Published (package@1.0.0)
+
+### Metadata 
+
+Package metadata that the template has access
+
+```
+{
+    "_id": "@test/pkg1",
+    "name": "@test/pkg1",
+    "description": "",
+    "dist-tags": {
+        "beta": "1.0.54"
+    },
+    "versions": {
+        "1.0.54": {
+            "name": "@test/pkg1",
+            "version": "1.0.54",
+            "description": "some description",
+            "main": "index.js",
+            "scripts": {
+                "test": "echo \"Error: no test specified\" && exit 1"
+            },
+            "keywords": [],
+            "author": {
+                "name": "Author Name",
+                "email": "author@domain.com"
+            },
+            "license": "MIT",
+            "dependencies": {
+                "webpack": "4.12.0"
+            },
+            "readmeFilename": "README.md",
+            "_id": "@ test/pkg1@1.0.54",
+            "_npmVersion": "6.1.0",
+            "_nodeVersion": "9.9.0",
+            "_npmUser": {},
+            "dist": {
+                "integrity": "sha512-JlXWpLtMUBAqvVZBvH7UVLhXkGE1ctmXbDjbH/l0zMuG7wVzQ7GshTYvD/b5C+G2vOL2oiIS1RtayA/kKkTwKw==",
+                "shasum": "29c55c52c1e76e966e706165e5b9f22e32aa9f22",
+                "tarball": "http://localhost:4873/@test/pkg1/-/@test/pkg1-1.0.54.tgz"
+            }
+        }
+    },
+    "readme": "# test",
+    "_attachments": {
+        "@test/pkg1-1.0.54.tgz": {
+            "content_type": "application/octet-stream",
+            "data": "H4sIAAAAAAAAE+y9Z5PjyJIgOJ ...",
+            "length": 33112
+        }
+    },
+    "time": {}
+}
+```
+
+
+### Publisher
+
+You can access to the package publisher information in the `content` of a webhook using the `publisher` object.
+
+See below the `publisher` object type:
+
+```
+{
+  name: string,
+  groups: string[],
+  real_groups: string[]
+}
+```
+
+An example:
+
+```
+notify:
+  method: POST
+  headers: [{'Content-Type': 'application/json'}]
+  endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
+  content: '{"color":"green","message":"New package published: * {{ name }}*. Publisher name: * {{ publisher.name }} *.","notify":true,"message_format":"text"}'
+```
+
+**Note:** it's not possible to get the publisher information if the `package.json` file already has the `publisher` property.
+
+### Package Published
+
+You can acces to the package is being published with the keyword `{{publishedPackage}}` as follows.
+
+```
+{{ publisher.name }} has published {{publishedPackage}}"}
+```
+
+## Configuration
+
+Property | Type | Required | Support | Default | Description
+--- | --- | --- | --- | --- | ---
+method| string | No | all |  | HTTP verb
+packagePattern| string | No | all |  | Only run this notification if the package name matches the regular expression
+packagePatternFlags| string | No | all |   | Any flags to be used with the regular expression
+headers| array/object | Yes | all |  | If this endpoint requires specific headers, set them here as an array of key: value objects.
+endpoint| string | Yes | all |  | set the URL endpoint for this call
+content| string | Yes | all |  | any [Handlebar](https://handlebarsjs.com/) expressions

docs/packages.md

@@ -0,0 +1,150 @@
+---
+id: packages
+title: "Package Access"
+---
+
+It's a series of contraints that allow or restrict access to the local storage based in specific criteria.
+
+The security constraints remain on the shoulders of the plugin being used, by default `verdaccio` uses the [htpasswd plugin](https://github.com/verdaccio/verdaccio-htpasswd). If you use a different plugin the behaviour might be different. The default plugin does not handle `allow_access` and `allow_publish` by itself, it uses an internal fallback in case the plugin is not ready for it.
+
+For more information about permissions visit [the authentification section in the wiki](auth.md).
+
+### Usage
+
+```yalm
+packages:
+  # scoped packages
+  '@scope/*':
+    access: all
+    publish: all
+    proxy: server2
+
+  'private-*':
+    access: all
+    publish: all
+    proxy: uplink1
+
+  '**':
+    # allow all users (including non-authenticated users) to read and
+    # publish all packages
+    access: all
+    publish: all
+    proxy: uplink2
+```
+if none is specified, the default one remains
+
+```yaml
+packages:
+  '**':
+     access: all
+     publish: $authenticated
+```
+
+The list of valid groups according the default plugins are
+
+```js
+'$all', '$anonymous', '@all', '@anonymous', 'all', 'undefined', 'anonymous'
+```
+All users recieve all those set of permissions independently of is anonymous or not plus the groups provided by the plugin, in case of `htpasswd` return the username as a group. For instance, if you are logged as `npmUser` the list of groups will be.
+
+```js
+// groups without '$' are going to be deprecated eventually
+'$all', '$anonymous', '@all', '@anonymous', 'all', 'undefined', 'anonymous', 'npmUser'
+```
+
+If you want to protect specific set packages under your group, you need to do something like this. Let's use a `Regex` that covers all prefixed `npmuser-` packages. We recomend using a prefix for your packages, in that way it will be easier to protect them.
+
+```yaml
+packages:
+  'npmuser-*':
+     access: npmuser
+     publish: npmuser
+```
+
+Restart `verdaccio` and in your console try to install `npmuser-core`.
+
+```bash
+$ npm install npmuser-core
+npm install npmuser-core
+npm ERR! code E403
+npm ERR! 403 Forbidden: npmuser-core@latest
+
+npm ERR! A complete log of this run can be found in:
+npm ERR!     /Users/user/.npm/_logs/2017-07-02T12_20_14_834Z-debug.log
+```
+You can change the existing behaviour using a different plugin authentication. `verdaccio` just checks whether the user that tried to access or publish a specific package belongs to the right group.
+
+#### Set multiple groups
+
+Defining multiple access groups is fairly easy, just define them with a white space between them.
+
+```yaml
+  'company-*':
+    access: admin internal
+    publish: admin
+    proxy: server1
+  'supersecret-*':
+    access: secret super-secret-area ultra-secret-area
+    publish: secret ultra-secret-area
+    proxy: server1
+
+```
+
+#### Blocking access to set of packages
+
+If you want to block the acccess/publish to a specific group of packages. Just do not define `access` and `publish`.
+
+```yaml
+packages:
+  'old-*':
+  '**':
+     access: all
+     publish: $authenticated
+```
+#### Blocking proxying a set of specific packages
+
+You might want to block one or several packages from fetching from remote repositories., but, at the same time, allow others to access different *uplinks*.
+
+Let's see the following example:
+
+```yaml
+packages:
+  'jquery':
+     access: $all
+     publish: $all
+  'my-company-*':
+     access: $all
+     publish: $authenticated
+  '@my-local-scope/*':
+     access: $all
+     publish: $authenticated
+  '**':
+     access: all
+     publish: $authenticated
+     proxy: npmjs
+```
+Let's describe what we want with the above example:
+
+* I want to host my own `jquery` dependency but I need to avoid proxying it.
+* I want all dependencies that match with `my-company-*` but I need to avoid proxying them.
+* I want all dependencies that are in the `my-local-scope` scope but I need to avoid proxying them.
+* I want proxying for all the rest of the dependencies.
+
+Be **aware that the order of your packages definitions is important and always use double wilcard**. Because if you do not include it `verdaccio` will include it for you and the way that your dependencies are resolved will be affected.
+
+### Configuration
+
+You can define mutiple `packages` and each of them must have an unique `Regex`.
+
+Property | Type | Required | Example | Support | Description
+--- | --- | --- | --- | --- | ---
+access | string | No | $all | all | define groups allowed to access the package
+publish | string | No | $authenticated | all | define groups allowed to publish
+proxy | string | No |npmjs | all | limit look ups for specific uplink
+storage | boolean | No | [true,false] | all | TODO
+
+> We higlight that we recommend to not use **allow_access**/**allow_publish** and **proxy_access** anymore, those are deprecated and will soon be removed, please use the short version of each of those (**access**/**publish**/**proxy**).
+
+
+
+

docs/plugins.md

@@ -0,0 +1,146 @@
+---
+id: plugins
+title: "Plugins"
+---
+
+Verdaccio is an plugabble aplication. It can be extended in many ways, either new authentication methods, adding
+endpoints or using a custom storage.
+
+> If you are interested to develop your own plugin, read the [development](dev-plugins.md) section.
+
+## Usage
+
+### Installation
+
+```bash
+$> npm install --global verdaccio-activedirectory
+```
+`verdaccio` as a sinopia fork it has backward compability with plugins that are compatible with `sinopia@1.4.0`. In such case the installation is the same.
+
+```
+$> npm install --global sinopia-memory
+```
+
+### Configuration
+
+Open the `config.yaml` file and update the `auth` section as follows:
+
+The default configuration looks like this, due we use a build-in `htpasswd` plugin by default that you can disable just commenting out the following lines.
+
+
+### Auth Plugin Configuration
+
+```yaml
+ htpasswd:
+    file: ./htpasswd
+    #max_users: 1000
+```
+
+and replacing them with (in case you decide to use a `ldap` plugin.
+
+```yaml
+auth:
+  activedirectory:
+    url: "ldap://10.0.100.1"
+    baseDN: 'dc=sample,dc=local'
+    domainSuffix: 'sample.local'
+```
+
+#### Multiple Auth plugins
+
+This is tecnically possible, the plugins order becames important, the the credentials will resolved in order.
+
+```yaml
+auth:
+  htpasswd:
+    file: ./htpasswd
+    #max_users: 1000
+  activedirectory:
+    url: "ldap://10.0.100.1"
+    baseDN: 'dc=sample,dc=local'
+    domainSuffix: 'sample.local'
+```
+
+### Middleware Plugin Configuration
+
+This is an example how to set up a middleware plugin. All middleware plugins must be defined in the **middlewares** namespace.
+
+```yaml
+middlewares:
+  audit:
+    enabled: true
+```
+
+> You might follow the [audit middle plugin](https://github.com/verdaccio/verdaccio-audit) as base example.
+
+### Store Plugin Configuration
+
+This is an example how to set up a storage plugin. All storage plugins must be defined in the **store** namespace.
+
+```yaml
+store:
+  memory:
+    limit: 1000
+```
+
+> If you define a custom store, the property **storage** in the configuration file will be ignored.
+
+## Legacy plugins
+
+### Sinopia Plugins
+
+(compatible all versions)
+
+* [sinopia-npm](https://www.npmjs.com/package/sinopia-npm): auth plugin for sinopia supporting an npm registry.
+* [sinopia-memory](https://www.npmjs.com/package/sinopia-memory): auth plugin for sinopia that keeps users in memory.
+* [sinopia-github-oauth-cli](https://www.npmjs.com/package/sinopia-github-oauth-cli).
+* [sinopia-crowd](https://www.npmjs.com/package/sinopia-crowd): auth plugin for sinopia supporting atlassian crowd.
+* [sinopia-activedirectory](https://www.npmjs.com/package/sinopia-activedirectory): Active Directory authentication plugin for sinopia.
+* [sinopia-github-oauth](https://www.npmjs.com/package/sinopia-github-oauth): authentication plugin for sinopia2, supporting github oauth web flow.
+* [sinopia-delegated-auth](https://www.npmjs.com/package/sinopia-delegated-auth): Sinopia authentication plugin that delegates authentication to another HTTP URL
+* [sinopia-altldap](https://www.npmjs.com/package/sinopia-altldap): Alternate LDAP Auth plugin for Sinopia
+* [sinopia-request](https://www.npmjs.com/package/sinopia-request): An easy and fully auth-plugin with configuration to use an external API.
+* [sinopia-htaccess-gpg-email](https://www.npmjs.com/package/sinopia-htaccess-gpg-email): Generate password in htaccess format, encrypt with GPG and send via MailGun API to users.
+* [sinopia-mongodb](https://www.npmjs.com/package/sinopia-mongodb): An easy and fully auth-plugin with configuration to use a mongodb database.
+* [sinopia-htpasswd](https://www.npmjs.com/package/sinopia-htpasswd): auth plugin for sinopia supporting htpasswd format.
+* [sinopia-leveldb](https://www.npmjs.com/package/sinopia-leveldb): a leveldb backed auth plugin for sinopia private npm.
+* [sinopia-gitlabheres](https://www.npmjs.com/package/sinopia-gitlabheres): Gitlab authentication plugin for sinopia.
+* [sinopia-gitlab](https://www.npmjs.com/package/sinopia-gitlab): Gitlab authentication plugin for sinopia
+* [sinopia-ldap](https://www.npmjs.com/package/sinopia-ldap): LDAP auth plugin for sinopia.
+* [sinopia-github-oauth-env](https://www.npmjs.com/package/sinopia-github-oauth-env) Sinopia authentication plugin with github oauth web flow.
+
+> All sinopia plugins should be compatible with all future verdaccio versions. Anyhow, we encourage contributors to migrate them to the
+modern verdaccio API and using the prefix as *verdaccio-xx-name*.
+
+## Verdaccio Plugins
+
+(compatible since 2.1.x)
+
+### Authorization Plugins
+
+* [verdaccio-bitbucket](https://github.com/idangozlan/verdaccio-bitbucket): Bitbucket authentication plugin for verdaccio.
+* [verdaccio-ldap](https://www.npmjs.com/package/verdaccio-ldap): LDAP auth plugin for verdaccio.
+* [verdaccio-active-directory](https://github.com/nowhammies/verdaccio-activedirectory): Active Directory authentication plugin for verdaccio
+* [verdaccio-gitlab](https://github.com/bufferoverflow/verdaccio-gitlab): use GitLab Personal Access Token to authenticate
+* [verdaccio-htpasswd](https://github.com/verdaccio/verdaccio-htpasswd): Auth based on htpasswd file plugin (built-in) for verdaccio
+* [verdaccio-github-oauth](https://github.com/aroundus-inc/verdaccio-github-oauth): Github oauth authentication plugin for verdaccio.
+* [verdaccio-github-oauth-ui](https://github.com/n4bb12/verdaccio-github-oauth-ui): GitHub OAuth plugin for the verdaccio login button.
+
+### Middleware Plugins
+
+* [verdaccio-audit](https://github.com/verdaccio/verdaccio-audit): verdaccio plugin for *npm audit* cli support (built-in) (compatible since 3.x)
+
+* [verdaccio-profile-api](https://github.com/ahoracek/verdaccio-profile-api): verdacci plugin for *npm profile* cli support and *npm profile set password* for *verdaccio-htpasswd* based authentificaton
+
+### Storage Plugins
+
+(compatible since 3.x)
+
+* [verdaccio-memory](https://github.com/verdaccio/verdaccio-memory) Storage plugin to host packages in Memory
+* [verdaccio-s3-storage](https://github.com/remitly/verdaccio-s3-storage) Storage plugin to host packages **Amazon S3**
+* [verdaccio-google-cloud](https://github.com/verdaccio/verdaccio-google-cloud) Storage plugin to host packages **Google Cloud Storage**
+
+## Caveats
+
+> Not all these plugins are been tested continuously, some of them might not work at all.
+Please if you found any issue feel free to notify the owner of each plugin.

docs/protect-your-dependencies.md

@@ -0,0 +1,44 @@
+---
+id: protect-your-dependencies
+title: "Protecting packages"
+---
+
+`verdaccio` allows you protect publish, to achieve that you will need to set up correctly your [packages acces](packages).
+
+### Package configuration
+
+Let's see for instance the following set up. You have a set of dependencies what are prefixed with `my-company-*` and you need to protect them from anonymous or another logged user without right credentials.
+
+```yaml
+  'my-company-*':
+    access: admin teamA teamB teamC
+    publish: admin teamA
+    proxy: npmjs
+```
+
+With this configuration, basically we allow to groups **admin** and **teamA** to * publish* and **teamA**   **teamB** **teamC** *access* to such dependencies.
+
+### Use case: teamD try to access the dependency
+
+So, if I am logged as **teamD**. I shouldn't be able to access all dependencies that match with `my-company-*` pattern.
+
+```bash
+➜ npm whoami
+teamD
+```
+I won't have access to such dependencies and also won't be visible via web for user **teamD**. If I try to access the following will happen.
+
+```bash
+➜ npm install my-company-core
+npm ERR! code E403
+npm ERR! 403 Forbidden: webpack-1@latest
+```
+or with `yarn`
+
+```bash
+➜ yarn add my-company-core
+yarn add v0.24.6
+info No lockfile found.
+[1/4] 🔍  Resolving packages...
+error An unexpected error occurred: "http://localhost:5555/webpack-1: unregistered users are not allowed to access package my-company-core".
+```

docs/puppet.md

@@ -0,0 +1,28 @@
+---
+id: puppet
+title: "Puppet"
+---
+
+Install verdaccio for Debian, Ubuntu, Fedora, and RedHat.
+
+# Usage
+
+There are two variants to install verdaccio using this Puppet module:
+
+* Apply-mode (with puppet-apply and no puppetmaster setup needed)
+* Master-Agent-mode (with puppet-agent accessing your configuration through the puppetmaster).
+
+In both variants you have to explicitely call "class nodejs {}" in your puppet script because
+the puppet-verdaccio module only defines this as a requirement, so you have all the flexibility you want when installing nodejs.
+Scroll down for details about Master-Agent-mode variant.
+
+For further information:
+
+[https://github.com/verdaccio/puppet-verdaccio](https://github.com/verdaccio/puppet-verdaccio)
+
+> We are looking for active contributors for this integration, if you are interested
+[refers to this ticket](https://github.com/verdaccio/puppet-verdaccio/issues/11).
+
+
+
+

docs/repositories.md

@@ -0,0 +1,9 @@
+---
+id: source-code
+title: "Source Code"
+---
+
+`verdaccio` is composed or multiple repositories you might contribute. Look into the **issues** tab whether there is a ticket waiting for you 🤠.
+
+To see the complete list of repositories, [click here](https://github.com/verdaccio/verdaccio/wiki/Repositories).
+

docs/reverse-proxy.md

@@ -0,0 +1,90 @@
+---
+id: reverse-proxy
+title: "Reverse Proxy Setup"
+---
+
+## Apache
+
+Apache and mod_proxy should not decode/encode slashes and leave them as they are:
+
+````
+<VirtualHost *:80>
+  AllowEncodedSlashes NoDecode
+  ProxyPass /npm http://127.0.0.1:4873 nocanon
+  ProxyPassReverse /npm http://127.0.0.1:4873
+</VirtualHost>
+````
+
+### Configuration with SSL
+
+config.yaml
+
+```yaml
+url_prefix: https://npm.your.domain.com
+```
+
+Apache virtual server configuration
+
+````
+    apacheconfig
+    <IfModule mod_ssl.c>
+    <VirtualHost *:443>
+        ServerName npm.your.domain.com
+        SSLEngine on
+        SSLCertificateFile      /etc/letsencrypt/live/npm.your.domain.com/fullchain.pem
+        SSLCertificateKeyFile   /etc/letsencrypt/live/npm.your.domain.com/privkey.pem
+        SSLProxyEngine          On
+        ProxyRequests           Off
+        ProxyPreserveHost       On
+        AllowEncodedSlashes     NoDecode
+        ProxyPass               /       http://127.0.0.1:4873 nocanon
+        ProxyPassReverse        /       http://127.0.0.1:4873
+    </VirtualHost>
+    </IfModule>
+````
+
+## Nginx
+
+
+````
+server {
+  listen 80 default_server;
+  location / {
+    proxy_pass              http://127.0.0.1:4873/;
+    proxy_set_header        Host $host;
+  }
+}
+````
+
+## Run behind reverse proxy with different domain and port
+
+If you run verdaccio behind reverse proxy, you may noticed all resource file served as relaticve path, like `http://127.0.0.1:4873/-/static`
+
+To resolve this issue, you should send real domain and port to verdaccio with `Host` heade
+
+Nginx configure should look like this:
+
+```nginx
+location / {
+    proxy_pass http://127.0.0.1:4873/;
+    proxy_set_header Host            $host:$server_port;
+    proxy_set_header X-Forwarded-For $remote_addr;
+    proxy_set_header X-Forwarded-Proto $scheme;
+}
+```
+For this case, `url_prefix` should NOT set in verdaccio config
+
+---
+or a sub-directory installation:
+
+```nginx
+location ~ ^/verdaccio/(.*)$ {
+    proxy_pass http://127.0.0.1:4873/$1;
+    proxy_set_header Host            $host:$server_port;
+    proxy_set_header X-Forwarded-For $remote_addr;
+    proxy_set_header X-Forwarded-Proto $scheme;
+}
+```
+For this case, `url_prefix` should set to `/verdaccio/`
+
+> Note: There is a Slash after install path (`https://your-domain:port/vardaccio/`)!

docs/server.md

@@ -0,0 +1,75 @@
+---
+id: server-configuration
+title: "Server Configuration"
+---
+
+This is mostly basic linux server configuration stuff but I felt it important to document and share the steps I took to get verdaccio running permanently on my server. You will need root (or sudo) permissions for the following.
+
+## Running as a separate user
+First create the verdaccio user:
+
+```bash
+$ sudo adduser --disabled-login --gecos 'Verdaccio NPM mirror' verdaccio
+```
+
+You create a shell as the verdaccio user using the following command:
+
+```bash
+$ sudo su verdaccio
+$ cd ~
+```
+
+The 'cd ~' command send you to the home directory of the verdaccio user. Make sure you run verdaccio at least once to generate the config file. Edit it according to your needs.
+
+## Listening on all addresses
+If you want to listen to every external address set the listen directive in the config to:
+
+```yaml
+# you can specify listen address (or simply a port)
+listen: 0.0.0.0:4873
+```
+If you are running `verdaccio` in a Amazon EC2 Instance, [you will need set the listen in change your config file](https://github.com/verdaccio/verdaccio/issues/314#issuecomment-327852203) as is described above.
+
+> Apache configure? Please check out the [Reverse Proxy Setup](reverse-proxy.md)
+
+## Keeping verdaccio running forever
+We can use the node package called 'forever' to keep verdaccio running all the time.
+https://github.com/nodejitsu/forever
+
+First install forever globally:
+
+```bash
+$ sudo npm install -g forever
+```
+
+Make sure you've started verdaccio at least once to generate the config file and write down the created admin user. You can then use the following command to start verdaccio:
+
+```bash
+$ forever start `which verdaccio`
+```
+
+You can check the documentation for more information on how to use forever.
+
+## Surviving server restarts
+We can use crontab and forever together to restart verdaccio after a server reboot.
+When you're logged in as the verdaccio user do the following:
+
+```bash
+$ crontab -e
+```
+
+This might ask you to choose an editor. Pick your favorite and proceed.
+Add the following entry to the file:
+
+```
+@reboot /usr/bin/forever start /usr/lib/node_modules/verdaccio/bin/verdaccio
+```
+
+The locations may vary depending on your server setup. If you want to know where your files are you can use the 'which' command:
+
+```bash
+$ which forever
+$ which verdaccio
+```
+
+

docs/ssl.md

@@ -0,0 +1,52 @@
+---
+id: ssl
+title: "Set up the SSL Certificates"
+---
+
+Follow this instructions to configure a SSL certificate to serve NPM registry under HTTPS.
+
+* Update the listen property in your `~/.config/verdaccio/config.yaml`:
+
+````
+listen: 'https://your.domain.com/'
+````
+
+Once you update the listen and try to run verdaccio again will ask for certificates.
+
+* Generate your certificates
+
+````
+ $ openssl genrsa -out /Users/user/.config/verdaccio/verdaccio-key.pem 2048
+ $ openssl req -new -sha256 -key /Users/user/.config/verdaccio/verdaccio-key.pem -out /Users/user/.config/verdaccio/verdaccio-csr.pem
+ $ openssl x509 -req -in /Users/user/.config/verdaccio/verdaccio-csr.pem -signkey /Users/user/.config/verdaccio/verdaccio-key.pem -out /Users/user/.config/verdaccio/verdaccio-cert.pem
+ ````
+
+* Edit your config file `/Users/user/.config/verdaccio/config.yaml` and add the following section
+
+````
+https:
+    key: /Users/user/.config/verdaccio/verdaccio-key.pem
+    cert: /Users/user/.config/verdaccio/verdaccio-cert.pem
+    ca: /Users/user/.config/verdaccio/verdaccio-csr.pem
+````
+
+Alternatively, if you have a certificate as `server.pfx` format, you can add the following configuration section. The passphrase is optional and only needed, if your certificate is encrypted.
+
+````
+https:
+  pfx: /Users/user/.config/verdaccio/server.pfx
+  passphrase: 'secret'
+````
+
+More info on the `key`, `cert`, `ca`, `pfx` and `passphrase` arguments on the [Node documentation](https://nodejs.org/api/tls.html#tls_tls_createsecurecontext_options)
+
+* Run `verdaccio` in your command line.
+
+* Open the browser and load `https://your.domain.com:port/`
+
+This instructions are mostly valid under OSX and Linux, on Windows the paths will vary but, the steps are the same.
+
+## Docker
+If you are using the Docker image, you have to set the `PROTOCOL` environment variable to `https` as the `listen` argument is provided on the [Dockerfile](https://github.com/verdaccio/verdaccio/blob/master/Dockerfile#L43), and thus ignored from your config file.
+
+You can also set the `PORT` environment variable if you are using a different port than `4873`.

docs/test.md

@@ -0,0 +1,7 @@
+---
+id: unit-testing
+title: "Unit Testing"
+---
+
+Verdaccio has strong focus on unit testing and end to end testing. If you are willing to contribute, 
+please refer to the following [guide for more information](https://github.com/verdaccio/verdaccio/wiki/Developing-new-tests).