chore(release): 5.0.0-alpha.7

Refer: https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14.16.1

.all-contributorsrc

@@ -0,0 +1,245 @@
+{
+  "projectName": "verdaccio",
+  "projectOwner": "verdaccio",
+  "repoType": "github",
+  "repoHost": "https://github.com",
+  "commitConvention": "none",
+  "files": [
+    "CONTRIBUTORS.md"
+  ],
+  "contributors": [
+    {
+      "login": "juanpicado",
+      "name": "Juan Picado",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
+      "profile": "https://www.linkedin.com/in/jotadeveloper/",
+      "contributions": [
+        "doc",
+        "code",
+        "infra",
+        "eventOrganizing",
+        "blog",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "sergiohgz",
+      "name": "Sergio Herrera",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
+      "profile": "https://github.com/sergiohgz",
+      "contributions": [
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "DanielRuf",
+      "name": "Daniel Ruf",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
+      "profile": "https://daniel-ruf.de/",
+      "contributions": [
+        "security",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "priscilawebdev",
+      "name": "Priscila Oliveira",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
+      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
+      "contributions": [
+        "design",
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "ayusharma",
+      "name": "Ayush Sharma",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
+      "profile": "http://ayusharma.github.io/",
+      "contributions": [
+        "infra",
+        "code",
+        "design"
+      ]
+    },
+    {
+      "login": "trentearl",
+      "name": "Trent Earl",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
+      "profile": "https://github.com/trentearl",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jmwilkinson",
+      "name": "jmwilkinson",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
+      "profile": "https://github.com/jmwilkinson",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "bufferoverflow",
+      "name": "Roger Meier",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
+      "profile": "https://github.com/bufferoverflow",
+      "contributions": [
+        "plugin"
+      ]
+    },
+    {
+      "login": "jamesgeorge007",
+      "name": "James George",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
+      "profile": "https://ghuser.io/jamesgeorge007",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "AvailCat",
+      "name": "AvailCat",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
+      "profile": "https://github.com/AvailCat",
+      "contributions": [
+        "code",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "lgaitan",
+      "name": "Lucius Gaitán",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
+      "profile": "https://www.luciusgaitan.com/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ramonornela",
+      "name": "Ramon Henrique Ornelas",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
+      "profile": "https://github.com/ramonornela",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "UnitedMarsupials-zz",
+      "name": "UnitedMarsupials-zz",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
+      "profile": "https://people.freebsd.org/~mi/resume/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ryan-codingintrigue",
+      "name": "Ryan Graham",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
+      "profile": "http://www.codingintrigue.co.uk/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "coolsp",
+      "name": "coolsp",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
+      "profile": "https://github.com/coolsp",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ashishsurana",
+      "name": "Ashish Surana",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
+      "profile": "http://ashishsurana.in/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "buffaybu",
+      "name": "Wang Yifei",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
+      "profile": "https://github.com/buffaybu",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "lirantal",
+      "name": "Liran Tal",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
+      "profile": "https://twitter.com/liran_tal",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "brenordr",
+      "name": "Breno Rodrigues",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
+      "profile": "https://github.com/brenordr",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jachstet-sea",
+      "name": "jachstet-sea",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
+      "profile": "https://github.com/jachstet-sea",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "Vrtak-CZ",
+      "name": "Patrik Votoček",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
+      "profile": "https://patrik.votocek.cz/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "monkeywithacupcake",
+      "name": "jess",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
+      "profile": "https://github.com/monkeywithacupcake",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "toolsofraj",
+      "name": "toolsofraj",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
+      "profile": "https://github.com/toolsofraj",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ddhp",
+      "name": "Jian-Chen Chen (jesse)",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
+      "profile": "https://github.com/ddhp",
+      "contributions": [
+        "translation",
+        "code"
+      ]
+    }
+  ],
+  "skipCi": true,
+  "contributorsPerLine": 7
+}

.babelrc

@@ -1,3 +0,0 @@
-{
-  "presets": [["@verdaccio", {"flow": true}]]
-}

.circleci/config.yml

@@ -1,177 +0,0 @@
-version: 2
-
-aliases:
-  - &defaults
-    working_directory: ~/verdaccio
-  - &node8_executor
-    docker:
-      - image: circleci/node:8
-  - &node12_browser_executor
-    docker:
-      - image: circleci/node:12-browsers
-  - &node10_executor
-    docker:
-      - image: circleci/node:10
-  - &node11_executor
-    docker:
-    - image: circleci/node:11
-  - &node12_executor
-    docker:
-    - image: circleci/node:12
-  - &default_executor
-    <<: *node12_executor
-  - &repo_key
-    repo-{{ .Branch }}-{{ .Revision }}
-  - &coverage_key
-    coverage-{{ .Branch }}-{{ .Revision }}
-  - &base_config_key
-    base-config-{{ .Branch }}-{{ .Revision }}
-  - &yarn_cache_key
-    yarn-sha-{{ checksum "yarn.lock" }}
-  - &restore_repo
-    attach_workspace:
-      at: ~/verdaccio
-  - &ignore_non_dev_branches
-    filters:
-      tags:
-        only: /.*/
-      branches:
-        ignore:
-          - gh-pages
-          - l10n_master
-          - /release\/.*/
-
-jobs:
-  prepare:
-    <<: *defaults
-    <<: *default_executor
-    steps:
-      - checkout
-      - restore_cache:
-          key: *base_config_key
-      - restore_cache:
-          key: *yarn_cache_key
-      - run:
-          name: Install Js dependencies
-          command: yarn install --no-progress --registry https://registry.verdaccio.org
-      - run:
-          name: Prepare CI
-          command:  yarn run pre:ci
-      - run:
-          name: Build project
-          command: yarn run code:build
-      - save_cache:
-          key: *yarn_cache_key
-          paths:
-            - ~/.yarn
-            - ~/.cache/yarn
-            - node_modules
-      - persist_to_workspace:
-          root: ~/verdaccio
-          paths:
-            - ./*
-
-  test_node8:
-    <<: *defaults
-    <<: *node8_executor
-    steps:
-      - *restore_repo
-      - run:
-          name: Test with Node 8
-          command: |
-            yarn test
-            yarn test:functional  
-  test_node10:
-    <<: *defaults
-    <<: *node10_executor
-    steps:
-      - *restore_repo
-      - run:
-          name: Test with Node 10
-          command: |
-            yarn run test
-            yarn test:functional
-
-  test_node11:
-    <<: *defaults
-    <<: *node11_executor
-    steps:
-    - *restore_repo
-    - run:
-        name: Test with Node 11
-        command: |
-          yarn run test
-          yarn test:functional
-
-  test_node12:
-    <<: *defaults
-    <<: *node12_executor
-    steps:
-    - *restore_repo
-    - run:
-        name: Test with Node 12
-        command: |
-          yarn run test
-          yarn test:functional
-
-  test_e2e:
-    <<: *defaults
-    <<: *node12_browser_executor
-    steps:
-      - *restore_repo
-      - run:
-          name: Test End-to-End
-          command: yarn run test:e2e
-  coverage:
-    <<: *defaults
-    <<: *default_executor
-    steps:
-      - *restore_repo
-      - restore_cache:
-          key: *coverage_key
-      - run:
-          name: Publish coverage
-          command: yarn run coverage:publish
-      - store_artifacts:
-          path: coverage/clover.xml
-          prefix: tests
-      - store_artifacts:
-          path: coverage
-          prefix: coverage
-      - store_test_results:
-          path: coverage/clover.xml
-
-workflows:
-  version: 2
-  workflow:
-    jobs:
-      - prepare:
-          <<: *ignore_non_dev_branches
-      - test_node8:
-          requires:
-            - prepare
-          <<: *ignore_non_dev_branches
-      - test_node10:
-          requires:
-            - prepare
-          <<: *ignore_non_dev_branches
-      - test_node11:
-          requires:
-          - prepare
-          <<: *ignore_non_dev_branches
-      - test_node12:
-          requires:
-          - prepare
-          <<: *ignore_non_dev_branches
-      - test_e2e:
-          requires:
-            - prepare
-          <<: *ignore_non_dev_branches
-      - coverage:
-          requires:
-            - test_node8
-            - test_node10
-            - test_node11
-            - test_node12
-            - test_e2e
-          <<: *ignore_non_dev_branches

.dockerignore

@@ -8,14 +8,16 @@
 .*
 # you can add exceptions like in .gitignore to maintain a whitelist:
 # e.g.
-!.babelrc
+!babel.config.js
 !.eslintrc
 !.prettierrc
 !.eslintignore
 !.stylelintrc
-!.flowconfig
 !.jest.config.js
 !.jestEnvironment.js
+!.yarnrc.yml
+!.yarn/releases/yarn-berry.cjs
+!.yarn/plugins/*
 
 # do not copy over node_modules we will run `npm install` anyway
 node_modules

.eslintignore

@@ -14,4 +14,8 @@ Dockerfile
 *.scss
 *.png
 *.jpg
+*.sh
+*.ico
 test/unit/partials/
+types/custom.d.ts
+docker-examples/

.eslintrc

@@ -1,58 +1,102 @@
 {
-  "plugins": [
-    "babel",
-    "flowtype",
-    "jest",
-    "verdaccio",
-    "jsx-a11y"
-  ],
   "extends": [
     "eslint:recommended",
     "google",
-    "plugin:flowtype/recommended",
+    "plugin:react/recommended",
     "plugin:jest/recommended",
-    "plugin:prettier/recommended",
-    "plugin:verdaccio/recommended",
-    "plugin:jsx-a11y/recommended"
+    "plugin:@typescript-eslint/eslint-recommended",
+    "plugin:@typescript-eslint/recommended",
+    "plugin:import/typescript",
+    "plugin:jsx-a11y/recommended",
+    "prettier"
   ],
-  "parser": "babel-eslint",
-  "parserOptions": {
-    "sourceType": "module",
-    "ecmaVersion": 7,
-    "ecmaFeatures": {
-      "impliedStrict": true,
-      "jsx": true
-    }
-  },
+  "plugins": ["import", "jest", "jsx-a11y", "react-hooks"],
   "env": {
-    "browser": true,
-    "node": true,
     "es6": true,
+    "node": true,
     "jest": true
   },
   "globals": {
     "__APP_VERSION__": true
   },
+  "parserOptions": {
+    "allowImportExportEverywhere": true,
+    "sourceType": "module",
+    "ecmaVersion": 11,
+    "ecmaFeatures": {
+      "impliedStrict": true,
+      "jsx": true
+    }
+  },
+  "settings": {
+    "import/resolver": {
+      "node": {
+        "extensions": [".js", ".jsx", ".ts", ".tsx"]
+      }
+    }
+  },
+  "parser": "@typescript-eslint/parser",
   "rules": {
-    "babel/no-invalid-this": 1,
-    "prettier/prettier": ["error", null, "@prettier"],
-    "semi": ["error"],
-    "comma-dangle": ["error"],
-    "camelcase": 0,
-    "no-useless-escape": ["error"],
-    "no-invalid-this": 0,
-    "handle-callback-err": ["error"],
-    "no-fallthrough": ["error"],
-    "no-new-require": ["error"],
-    "max-len": ["error", 160],
-    "require-jsdoc": 0,
-    "valid-jsdoc": 0,
-    "prefer-spread": 1,
-    "prefer-rest-params": 1,
-    "linebreak-style": 0,
-    "quote-props":["error", "as-needed"],
-    "verdaccio/jsx-no-style": ["warn"],
-    "verdaccio/jsx-spread": ["warn"],
-    "jest/expect-expect": 0
+    "curly": ["error", "all"],
+    "react/prop-types": 0,
+    "jest/no-export": 0,
+    "jest/no-test-callback": 0,
+    "jest/expect-expect": 0,
+    "jest/no-try-expect": 0,
+    "jest/no-done-callback": "off",
+    "jest/no-conditional-expect": "off",
+    "keyword-spacing": "off",
+    "no-tabs": "off",
+    "no-useless-escape": "off",
+    "padded-blocks": "off",
+    "require-jsdoc": "off",
+    "valid-jsdoc": "off",
+    "import/order": ["error"],
+    "eol-last": "error",
+    "no-irregular-whitespace": "error",
+    "no-mixed-spaces-and-tabs": ["error", "smart-tabs"],
+    "no-trailing-spaces": "error",
+    "camelcase": "off",
+    "guard-for-in": "error",
+    "new-cap": "error",
+    "max-len": ["error", 180],
+    "no-console": ["error", { "allow": ["warn"] }],
+    "no-constant-condition": "error",
+    "no-debugger": "error",
+    "no-empty": "error",
+    "no-fallthrough": "error",
+    "no-invalid-this": "error",
+    "no-new-require": "error",
+    "no-undef": "error",
+    "no-unreachable": "error",
+    "no-var": "error",
+    "one-var": "error",
+    "prefer-rest-params": "error",
+    "prefer-spread": "error",
+    "handle-callback-err": 0,
+    "prefer-const": 0,
+    "@typescript-eslint/camelcase": 0,
+    "@typescript-eslint/ban-ts-ignore": 0,
+    "@typescript-eslint/no-var-requires": 0,
+    "@typescript-eslint/no-inferrable-types": 0,
+    "@typescript-eslint/no-empty-function": 0,
+    "@typescript-eslint/no-this-alias": 0,
+    "@typescript-eslint/no-use-before-define": 0,
+    "@typescript-eslint/array-type": ["error"],
+    "@typescript-eslint/no-explicit-any": 0,
+    "@typescript-eslint/indent": 0,
+    "@typescript-eslint/ban-ts-comment": 0,
+    "@typescript-eslint/ban-types": 0,
+    "@typescript-eslint/explicit-module-boundary-types": 0,
+
+    // rules to fix
+    "no-unused-vars": ["warn", { "vars": "all", "args": "none" }],
+    "jest/no-identical-title": ["warn"],
+    "prefer-promise-reject-errors": ["warn"],
+    "jest/no-disabled-tests": ["warn"],
+    "jest/no-commented-out-tests": ["warn"],
+    "@typescript-eslint/prefer-optional-chain": ["warn"],
+    "@typescript-eslint/explicit-member-accessibility": ["warn"],
+    "@typescript-eslint/no-unused-vars": ["warn"]
   }
 }

.flowconfig

@@ -1,25 +0,0 @@
-[ignore]
-.*/node_modules/.*
-.*/test/**/*.json
-.*/static/.*
-.*/test/unit/partials/.*
-.*/.nyc_output/.*
-.*/coverage/.*
-.*/.vscode/.*
-.*/build/.*
-.*/docs/.*
-.*/scripts/.*
-.*/assets/.*
-.*/bin/.*
-.*/systemd/.*
-.*/website/.*
-.*/wiki/.*
-.*/docs/.*
-.*/tools/.*
-
-[libs]
-node_modules/@verdaccio/types/lib/
-
-[options]
-suppress_comment= \\(.\\|\n\\)*\\$FlowFixMe
-module.ignore_non_literal_requires=true

.github/FUNDING.yml

@@ -1 +1,2 @@
 open_collective: verdaccio
+github: verdaccio

.github/ISSUE_TEMPLATE/Bug_report.md

@@ -1,37 +0,0 @@
----
-name: Bug report
-about: Create a report to help us improve
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-1. Go to '...'
-2. Click on '....'
-3. Scroll down to '....'
-4. See error
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
-
-**Screenshots**
-If applicable, add screenshots to help explain your problem.
-
-**Docker || Kubernetes (please complete the following information):**
- - Docker verdaccio tag: [e.g. verdaccio:beta]
- - Docker commands [e.g. docker pull ...]
- - Docker Version [e.g. v18.05.0-ce-rc1]
-
-**Configuration File (cat ~/.config/verdaccio/config.yaml)** 
-
-**Debugging output**
- - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
- - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
- - `$ npm -ddd` prints:
- - `$ npm config get registry` prints:
-
-**Additional context**
-Add any other context about the problem here.

.github/ISSUE_TEMPLATE/Feature_request.md

@@ -1,17 +0,0 @@
----
-name: Feature request
-about: Suggest an idea for this project
-
----
-
-**Is your feature request related to a problem? Please describe.**
-A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-
-**Describe the solution you'd like**
-A clear and concise description of what you want to happen.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
-
-**Additional context**
-Add any other context or screenshots about the feature request here.

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,43 @@
+---
+name: Bug report 🐛
+about: A feature is not working as is expected, I want to report a bug
+labels: 'issue: needs triage'
+title: ''
+assignees: ''
+---
+
+**Describe the bug**
+<!-- A clear and concise description of what the bug is. -->
+
+**To Reproduce**
+<!-- IMPORTANT:
+ - How to reproduce the issue
+ - Steps to reproduce the issue
+
+Be aware, the lack of reproducible steps the issue might cause your ticket to be closed.
+-->
+
+**Expected behavior**
+<!-- A clear and concise description of what you expected to happen. -->
+
+**Screenshots**
+<!-- If applicable, add screenshots to help explain your problem.  -->
+
+**Configuration File (cat ~/.config/verdaccio/config.yaml)**
+
+<!-- Please be careful do not leak any sensitive information, remove tokens -->
+
+**Environment information**
+<!-- Please paste the results of running `verdaccio --info` -->
+
+**Debugging output**
+ - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
+ - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+ - `$ npm -ddd` prints:
+ - `$ npm config get registry` prints:
+
+<!--
+
+IMPORTANT: please do not attach external files, all content should be visible from any device.
+-->
+

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,14 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Question 🤷🏻‍♂️
+    url: https://github.com/verdaccio/verdaccio/discussions/new?category=q-a
+    about: 🆕 Open a new Q&A discussion 🙏
+  - name: Security Report 🛡
+    url: https://github.com/verdaccio/verdaccio/security/policy
+    about: I want to report a security vulnerability
+  - name: Chat 🏘
+    url: http://chat.verdaccio.org
+    about: For a quick question you should do it through our community chat
+  - name: User Interface Report 👩🏼‍🎨👨🏼‍🎨
+    url: https://github.com/verdaccio/ui/issues/new/choose
+    about: Any report related with the User Interface should be posted in another repository

.github/ISSUE_TEMPLATE/feature.md

@@ -0,0 +1,33 @@
+---
+name: "Feature Request \U0001F52E"
+about: You want a feature request.
+title: ''
+labels: 'topic: feature request'
+assignees: ''
+
+---
+
+<!--
+
+Verdaccio is a project addressed for voluntaries, if you appreciate this project consider to donate.
+1$/month - minimal contribution
+5$/month - nice contribution
+500$ - help to promote this project, marketing, stickers.
+2000$/year - sponsor status, your company logo will be in our readme, meetups talks and your request will have high priority
+
+https://opencollective.com/verdaccio
+
+As reminder, the Open Source must be sustainable.
+-->
+
+**Is your feature request related to a problem?**
+Please describe a clear and concise description of what the problem is. E.g. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/dependabot.yml

@@ -0,0 +1,27 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Maintain dependencies for npm
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:   
+      - dependency-name: "@verdaccio/*"
+      - dependency-name: "verdaccio-*"
+    assignees:
+      - "verdacciobot"
+    labels:
+      - "bot: dependencies"
+      

.github/issue_template.md

@@ -1,32 +0,0 @@
-<!--
-First of all, please read this section
-
-https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md#reporting-a-bug
-
-Some advices before file an issue
-  * Give a brief explanation of the issue, suggestion or feature to request.
-  * If the issue is a question, provide as much information you have available.
-  * How can I do in order to reproduce it? What environment?
-  * Define which version the issue happens and whether previous version the behaviour is correct.
-  * Provide your config file is really helpful. Please be aware to hide sensisive data (passwords, server IP, etc) before post.
--->
-
-#### My reason:
-#### Steps to reproduce:
-#### App Version:
-#### Config file:
-#### Additional information:
-
- - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
- - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
- - `$ npm -ddd` prints:
- - `$ npm config get registry` prints:
- - Verdaccio terminal output
- - Which (Windows, OS X/macOS, or Linux) environment are you running verdaccio?:
- - Verdaccio configuration file, eg: `cat ~/.config/verdaccio/config.yaml`
-  - Container Options:
-   - Docker?:
-   - Kubernetes?:
-
-#### Additional verbose log:
-

.github/lock.yml

@@ -1,7 +1,7 @@
 # Configuration for lock-threads - https://github.com/dessant/lock-threads
 
 # Number of days of inactivity before a closed issue or pull request is locked
-daysUntilLock: 200
+daysUntilLock: 90
 
 # Issues and pull requests with these labels will not be locked. Set to `[]` to disable
 exemptLabels: []
@@ -11,9 +11,15 @@ lockLabel: false
 
 # Comment to post before locking. Set to `false` to disable
 lockComment: >
-  This thread has been automatically locked since there has not been
-  any recent activity after it was closed. Please open a new issue for
-  related bugs.
+  🤖This thread has been automatically locked 🔒 since there has not been
+  any recent activity after it was closed. 
+  
+  We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data 
+  and to provide you better feedback 🤝and better visibility 👀. 
+  
+  If you consider, you can attach this ticket 📨 to the new one as a reference for better context.
+
+  Thanks for being a part of the Verdaccio community! 💘
 
 # Limit to only `issues` or `pulls`
 # only: issues
@@ -26,3 +32,4 @@ issues:
 
 pulls:
  daysUntilLock: 90
+ lockLabel: outdated

.github/main.workflow

@@ -1,103 +0,0 @@
-workflow "Docker && Publish Pre-check" {
-  resolves = [
-    "Docker build health check",
-    "Test Publish Verdaccio",
-  ]
-  on = "push"
-}
-
-action "Docker build health check" {
-  uses = "actions/docker/cli@8cdf801b322af5f369e00d85e9cf3a7122f49108"
-  args = "build ."
-  env = {
-    VERDACCIO_BUILD_REGISTRY = "https://registry.verdaccio.org"
-  }
-}
-
-action "Test Publish Verdaccio" {
-  uses = "verdaccio/github-actions/publish@v0.1.0"
-  needs = ["Docker build health check"]
-  args = "-d"
-}
-
-workflow "release" {
-  resolves = [
-    "github-release",
-    "release:lint",
-    "release:build",
-  ]
-  on = "push"
-}
-
-action "release:tag-filter" {
-  uses = "actions/bin/filter@master"
-  args = "tag v*"
-}
-
-action "release:install" {
-  uses = "docker://node:10"
-  needs = ["release:tag-filter"]
-  args = "yarn install --frozen-lockfile"
-}
-
-action "release:build" {
-  uses = "docker://node:10"
-  needs = ["release:install"]
-  args = "yarn run code:build"
-}
-
-action "release:lint" {
-  uses = "docker://node:10"
-  needs = ["release:install"]
-  args = "yarn run lint"
-}
-
-action "release:test" {
-  uses = "docker://node:10"
-  needs = ["release:build"]
-  args = "sh scripts/puppeteer-setup-ci.sh"
-}
-
-action "release:publish" {
-  needs = ["release:test"]
-  uses = "docker://node:10"
-  args = "sh scripts/publish.sh"
-  secrets = [
-    "REGISTRY_AUTH_TOKEN",
-  ]
-  env = {
-    REGISTRY_URL = "registry.npmjs.org"
-  }
-}
-
-action "github-release" {
-  needs = ["release:publish"]
-  uses = "docker://node:10"
-  args = "sh scripts/github-release.sh"
-  secrets = [
-    "GITHUB_TOKEN",
-  ]
-}
-
-action "branch-filter" {
-  uses = "actions/bin/filter@master"
-  args = "branch"
-}
-
-action "install" {
-  needs = ["branch-filter"]
-  uses = "docker://node:10"
-  args = "yarn install --frozen-lockfile"
-}
-
-action "build" {
-  uses = "docker://node:10"
-  needs = ["install"]
-  args = "yarn run code:build"
-}
-
-action "lint" {
-  uses = "docker://node:10"
-  needs = ["install"]
-  args = "yarn run lint"
-}

.github/pull_request_template.md

@@ -1,27 +0,0 @@
-<!--
-
-Before Pull Request check whether your commits follow this convention
-
-https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md#git-commit-guidelines
-
-  * If your PR fix an issue don't forget to update the unit test and documentation in /docs folder
-  * If your PR delivers a new feature, please, provide examples and why such feature should be considered.
-  * Document your changes /docs
-  * Add unit test
-  * Follow the commit guidelines in order to get a quick approval
-
-Pick one/multiple type, if none apply please suggest one, we might be included it by default
-
-eg: bug / feature / documentation / unit test / build
-
--->
-**Type:**
-
-The following has been addressed in the PR:
-
-*  There is a related issue?
-*  Unit or Functional tests are included in the PR
-
-**Description:**
-
-<!-- Resolves #??? -->

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 30
+daysUntilStale: 15
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 5
+daysUntilClose: 10
 # Issues with these labels will never be considered stale
 exemptLabels:
   - dev: high priority
@@ -13,8 +13,14 @@ exemptLabels:
 staleLabel: issue: wontfix
 # Comment to post when marking an issue as stale. Set to `false` to disable
 markComment: >
-  This issue has been automatically marked as stale because it has not had
-  recent activity. It will be closed if no further activity occurs. Thank you
-  for your contributions.
+ Hi pal 👋🏼!
+
+ This issue has gone quiet 😶.
+
+  We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
+  If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
+  As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
+
+  Thanks for being a part of the Verdaccio community! 💘
 # Comment to post when closing a stale issue. Set to `false` to disable
 closeComment: false

.github/workflows/ci-e2e-ui.yml

@@ -0,0 +1,27 @@
+name: E2E UI
+
+on: [pull_request]
+
+jobs:
+  ci:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+        node_version: [14]
+
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install
+        run: yarn install --immutable
+      - name: Build
+        run: yarn code:build
+      - name: Test UI
+        run: yarn run test:e2e

.github/workflows/ci-e2e.yml

@@ -0,0 +1,27 @@
+name: E2E CLI
+
+on: [pull_request]
+
+jobs:
+  ci:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+        node_version: [14]
+
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install
+        run: yarn install
+      - name: Build
+        run: yarn code:build
+      - name: Test CLI
+        run: yarn test:e2e:cli

.github/workflows/ci.yml

@@ -0,0 +1,29 @@
+name: CI
+
+on: [push, pull_request]
+
+jobs:
+  ci:
+    name: Node ${{ matrix.node_version }}
+
+    strategy:
+      fail-fast: false
+      matrix:
+        node_version: [12, 14, 15]
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v2.3.3
+    - name: Use Node ${{ matrix.node_version }}
+      uses: actions/setup-node@v2.1.5
+      with:
+        node-version: ${{ matrix.node_version }}
+    - name: Install
+      run: yarn install --immutable
+    - name: Build
+      run: yarn code:build
+    - name: Lint
+      run: yarn lint
+    - name: Test
+      run: yarn test

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,52 @@
+name: "Code scanning - action"
+
+on:
+  push:
+  pull_request:
+  schedule:
+    - cron: '0 2 * * 4'
+
+jobs:
+  CodeQL-Build:
+
+    # CodeQL runs on ubuntu-latest and windows-latest
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2.3.3
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+      
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      # Override language selection by uncommenting this and choosing your languages
+      # with:
+      #   languages: go, javascript, csharp, python, cpp, java
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/docker-publish-pre-check.yml

@@ -0,0 +1,24 @@
+name: Docker & Publish Pre-check
+
+on: [push, pull_request]
+
+jobs:
+  testDocker:
+    name: Test Docker Build
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.3.3
+    - name: Build
+      run: docker build .
+      env:
+        VERDACCIO_BUILD_REGISTRY: https://registry.verdaccio.org
+
+  testVerdaccio:
+    name: Test Verdaccio Publish
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.3.3
+    - name: Publish
+      uses: verdaccio/github-actions/publish@v0.4.0
+      with:
+        args: -d

.github/workflows/docker-publish.yml

@@ -0,0 +1,53 @@
+name: Docker publish to docker.io
+
+on:
+  push:
+    paths:
+      - .github/workflows/docker-publish.yml
+      - 'src/**'
+      - 'conf/**'
+      - 'types/**'
+      - 'docker-bin/**'
+      - 'bin/**'
+      - 'package.json'
+      - 'yarn.lock'
+    branches:
+      - '**'
+#    tags:
+#      - 'v*'
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: docker/setup-qemu-action@v1
+      - uses: docker/setup-buildx-action@v1
+        with:
+          driver-opts: network=host
+      - uses: docker/login-action@v1
+        name: Login Docker Hub
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Prepare docker image tags
+        id: docker_meta
+        uses: crazy-max/ghaction-docker-meta@v1
+        with:
+          images: ${{ github.repository }}
+          tag-custom: 5.x-next
+          tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
+          # disabled while is on alpha
+          # tag-semver: |
+          #   {{version}}
+          #   {{major}}
+          #   {{major}}.{{minor}}
+      - name: Build & Push
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/e2e-angular-cli-workflow.yml

@@ -0,0 +1,153 @@
+on:
+  schedule:
+  - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+    - '**'
+
+name: 'E2E Angular CLI with verdaccio'
+jobs:
+# todo: fix yarn global issue, cannot find ng
+#  yarn:
+#    name: 'yarn:angular example'
+#    runs-on: ubuntu-latest
+#
+#    steps:
+#      - uses: actions/checkout@v2.3.3
+#
+#      - name: 'Use Node.js 10.x'
+#        uses: actions/setup-node@v2.1.5
+#        with:
+#          node-version: 10.x
+#      - name: Install Dependencies
+#        run: yarn install --pure-lockfile
+#      - name: 'Run verdaccio in the background'
+#        run: |
+#          nohup node ./scripts/run-verdaccio.js &
+#      - name: 'Ping to verdaccio'
+#        run: |
+#          npm ping --registry http://localhost:4873
+#      - name: 'Running the integration test'
+#        run: |
+#          source scripts/e2e-setup-ci.sh
+#          yarn init --yes
+#
+#          yarn global add @angular/cli
+#          which nodemon
+#          ng new verdaccio-angular --interactive=false
+#
+#          cd verdaccio-angular
+#          echo "registry=http://localhost:4873" > ~/.npmrc
+#          yarn add @angular-devkit/core@next @babel/preset-env @babel/core -D
+#
+#          ng build --aot
+  npm:
+    name: 'npm:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 14.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 14.x
+      - name: 'install latest npm'
+        run: npm i -g npm@latest-6
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="http"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+  npm7:
+    name: 'npm7:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 14.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 14.x
+      - name: 'install latest npm'
+        run: npm i -g npm@next-7
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="silent"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+
+#  pnpm throws errors worth to check why
+#  pnpm:
+#    name: 'pnpm:angular example'
+#    runs-on: ubuntu-latest
+#
+#    steps:
+#      - uses: actions/checkout@v2.3.3
+#
+#      - name: 'Use Node.js 10.x'
+#        uses: actions/setup-node@v2.1.1
+#        with:
+#          node-version: 10.x
+#      - name: 'install latest pnpm'
+#        run: npm i -g pnpm
+#      - name: Install Dependencies
+#        run: yarn install --pure-lockfile
+#      - name: 'Run verdaccio in the background'
+#        run: |
+#          nohup node ./scripts/run-verdaccio.js &
+#      - name: 'Ping to verdaccio'
+#        run: |
+#          pnpm ping --registry http://localhost:4873
+#      - name: 'Running the integration test'
+#        run: |
+#          source scripts/e2e-setup-ci.sh
+#          pnpm init --force
+#
+#          pnpm install -g @angular/cli
+#          ng new verdaccio-angular --interactive=false
+#
+#          cd verdaccio-angular
+#          echo "registry=http://localhost:4873" > ~/.npmrc
+#          pnpm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+#
+#          pnpm run ng build --aot

.github/workflows/e2e-gatsbyjs-cli-workflow.yml

@@ -0,0 +1,44 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Gatsby.js CLI with verdaccio'
+jobs:
+  npm:
+    name: 'npm:gatsby example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 14.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 14.x
+      - name: 'install latest npm'
+        run: npm i -g npm@latest-6
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="silent"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build

.github/workflows/e2e-jest-workflow.yml

@@ -0,0 +1,209 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Jest with verdaccio'
+jobs:
+  yarn:
+    name: 'yarn:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn add jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  yarn2:
+    name: 'yarn2:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn set version berry
+          yarn config set npmRegistryServer "http://localhost:4873"
+          yarn config set unsafeHttpWhitelist --json '["localhost"]'
+          yarn add jest@26.0.0
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm:
+    name: 'npm:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: 'install latest npm'
+        run: npm i -g npm@latest-6
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --force
+          npm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm7:
+    name: 'npm7:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: 'install latest npm'
+        run: npm i -g npm
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --force
+          npm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+
+  pnpm:
+    name: 'pnpm:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init --force
+          pnpm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  pnpm6:
+    name: 'pnpm6:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2.3.3
+
+      - name: 'Use Node.js 12.x'
+        uses: actions/setup-node@v2.1.5
+        with:
+          node-version: 12.x
+      - name: 'install latest pnpm'
+        run: sudo npm i pnpm@dev -g
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init --force
+          pnpm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+
+

.github/workflows/registry.yml

@@ -0,0 +1,13 @@
+name: Test local registry for js vulnerabilities
+
+on:
+  schedule:
+  - cron: '0 */4 1 * *'
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Test for public javascript library vulnerabilities
+        uses: lirantal/is-website-vulnerable@1.15.10
+        with:
+          scan-url: "https://registry.verdaccio.org"

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.3.3
+    - name: Use Node (latest)
+      uses: actions/setup-node@v2.1.5
+      with:
+        node-version: 14
+    - name: Install
+      run: yarn install
+    - name: Build
+      run: yarn code:build
+    - name: Lint
+      run: yarn lint
+    - name: Publish
+      run: sh scripts/publish.sh
+      env:
+        REGISTRY_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+        REGISTRY_URL: registry.npmjs.org
+    - name: Create release notes
+      run: sh scripts/github-release.sh
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -6,6 +6,7 @@ build/
 ### Test
 
 test/unit/partials/store/test-*-storage/*
+test/unit/partials/store/*-storage/*
 test/unit/partials/store/storage_default_storage/*
 .verdaccio-db.json
 .sinopia-db.json
@@ -20,8 +21,8 @@ package-lock.json
 npm_test-fails-add-tarball*
 yarn-error.log
 
-
 # Istanbul
+reports/
 coverage/
 .nyc*
 
@@ -36,3 +37,9 @@ __tests__
 # Compiled script
 static/*
 
+# This is the Yarn build state; it's local to each clone
+/.yarn/build-state.yml
+
+# This is the Yarn install state cache, it can be rebuilt anytime
+/.yarn/install-state.gz
+.history

.npmignore

@@ -13,8 +13,8 @@ src/
 .vscode/
 .circleci/
 debug/
-
-
+docker-examples/
+reports/
 ## assets and website
 assets/
 

.npmrc

@@ -0,0 +1,2 @@
+always-auth = true
+fetch-retries="10"

.nvmrc

@@ -0,0 +1 @@
+13

.prettierignore

@@ -0,0 +1,32 @@
+.cache/
+**/corrupted-package/package.json
+**/corrupted.json
+**/invalid.js
+**/invalid.json
+**/pnpm-lock.yaml
+**/verdaccio-corrupted.db.json
+**/wrong.package.json
+/website/.cache/
+/website/crowdin/
+/website/public/
+/website/src/dictionaries/
+CHANGELOG.md
+CONTRIBUTORS.md
+node_modules/
+**/coverage/**
+**/build/*.js
+test/unit/partials/*
+build/*
+.github/
+.vscode/
+wiki/
+.yarnrc.yml
+yarn-error.log
+.yarn/
+test/functional/store/*
+storage_default_storage/*
+docker-examples/
+.prettierignore
+.npmignore
+.gitignore
+*.ico

.prettierrc.json

@@ -1,12 +1,11 @@
 {
+  "endOfLine": "lf",
   "useTabs": false,
-  "printWidth": 160,
+  "printWidth": 180,
   "tabWidth": 2,
   "singleQuote": true,
-  "requirePragma": true,
   "bracketSpacing": true,
   "jsxBracketSameLine": true,
   "trailingComma": "es5",
-  "semi": true,
-  "parser": "flow"
+  "semi": true
 }

.sonarcloud.properties

@@ -0,0 +1 @@
+

.vscode/settings.json

@@ -5,5 +5,6 @@
 		"**/.nyc_output": true,
 		"**/build": true,
 		"**/coverage": true
-	}
-}
+	},
+	"typescript.tsdk": "node_modules/typescript/lib"
+}

.yarnrc

@@ -1,2 +0,0 @@
-save-prefix ""
-registry "http://registry.npmjs.org/"

.yarnrc.yml

@@ -0,0 +1,21 @@
+defaultSemverRangePrefix: ""
+
+enableGlobalCache: true
+
+enableTelemetry: false
+
+httpRetry: 10
+
+httpTimeout: 100000
+
+nodeLinker: node-modules
+
+npmRegistryServer: "https://registry.verdaccio.org"
+
+plugins:
+  - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs
+    spec: "@yarnpkg/plugin-workspace-tools"
+  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
+    spec: "@yarnpkg/plugin-interactive-tools"
+
+yarnPath: .yarn/releases/yarn-berry.cjs

CHANGELOG.md

@@ -1,7 +1,494 @@
-# Change Log
+# Changelog
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [5.0.0-alpha.7](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.6...v5.0.0-alpha.7) (2021-04-08)
+
+
+### Bug Fixes
+
+* ui readme missing css ([#2174](https://github.com/verdaccio/verdaccio/issues/2174)) ([f49ca06](https://github.com/verdaccio/verdaccio/commit/f49ca06c68919f920e10f4f5878c34d5886b2e02))
+* Upgrade Node from 14.16 to 14.16.1 for security fixes ([#2172](https://github.com/verdaccio/verdaccio/issues/2172)) ([6ab3163](https://github.com/verdaccio/verdaccio/commit/6ab31639fab97b1b3e6323c4da862a1cae3ae1c6)), closes [/github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14](https://github.com/verdaccio//github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md/issues/14)
+
+## [5.0.0-alpha.6](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.5...v5.0.0-alpha.6) (2021-04-06)
+
+## [5.0.0-alpha.5](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.4...v5.0.0-alpha.5) (2021-04-03)
+
+## [5.0.0-alpha.4](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.3...v5.0.0-alpha.4) (2021-04-03)
+
+
+### Features
+
+* clipanion as cli ([#2160](https://github.com/verdaccio/verdaccio/issues/2160)) ([be2f612](https://github.com/verdaccio/verdaccio/commit/be2f6129bb3a89f222ac2293192f3ea979f02500))
+
+## [5.0.0-alpha.3](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.2...v5.0.0-alpha.3) (2021-04-02)
+
+
+### Features
+
+* custom protocol header ([#2156](https://github.com/verdaccio/verdaccio/issues/2156)) ([9c80399](https://github.com/verdaccio/verdaccio/commit/9c803993d041aa5f6353512546555013f6f5a130))
+
+## [5.0.0-alpha.2](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.1...v5.0.0-alpha.2) (2021-03-31)
+
+
+### Bug Fixes
+
+* using correctly logging levels ([#2153](https://github.com/verdaccio/verdaccio/issues/2153)) ([5b6be2a](https://github.com/verdaccio/verdaccio/commit/5b6be2aa090edbcb1ba384b3b18dd23bf5594c23))
+
+## [5.0.0-alpha.1](https://github.com/verdaccio/verdaccio/compare/v5.0.0-alpha.0...v5.0.0-alpha.1) (2021-03-30)
+
+
+### Features
+
+* replace bunyan by pino.js ([#2148](https://github.com/verdaccio/verdaccio/issues/2148)) ([ee97dcb](https://github.com/verdaccio/verdaccio/commit/ee97dcb46c440a4e0c541b4193122fc7e0db8370))
+
+## [5.0.0-alpha.0](https://github.com/verdaccio/verdaccio/compare/v4.12.0...v5.0.0-alpha.0) (2021-03-29)
+
+
+### ⚠ BREAKING CHANGES
+
+* npm token support revisited and enabled by default (#2145)
+* drop node 8 and node 10 (#2142)
+
+### Features
+
+* drop node 8 and node 10 ([#2142](https://github.com/verdaccio/verdaccio/issues/2142)) ([43f7043](https://github.com/verdaccio/verdaccio/commit/43f70437af7a196f23d2a951f857ecc809131e02))
+* improve url_prefix behavior ([#2122](https://github.com/verdaccio/verdaccio/issues/2122)) ([15bb350](https://github.com/verdaccio/verdaccio/commit/15bb350ae47b822f385e329d13d2574c31beed1f))
+* npm token support revisited and enabled by default ([#2145](https://github.com/verdaccio/verdaccio/issues/2145)) ([8cc6393](https://github.com/verdaccio/verdaccio/commit/8cc6393d866126912ad1db457dadc0d3ef596333))
+* upgrade to commander v7 ([#2143](https://github.com/verdaccio/verdaccio/issues/2143)) ([3a1f608](https://github.com/verdaccio/verdaccio/commit/3a1f608f0b78561bb1c06e3b54a58e21f72940d5))
+
+## [4.12.0](https://github.com/verdaccio/verdaccio/compare/v4.11.3...v4.12.0) (2021-03-17)
+
+
+### Features
+
+* handle kill signals nicely  ([#2130](https://github.com/verdaccio/verdaccio/issues/2130)) ([7b6fbae](https://github.com/verdaccio/verdaccio/commit/7b6fbae6ae1dad9d18084d951f35687ebead335b))
+
+### [4.11.3](https://github.com/verdaccio/verdaccio/compare/v4.11.2...v4.11.3) (2021-03-06)
+
+
+### Bug Fixes
+
+* update dependencies ([#2115](https://github.com/verdaccio/verdaccio/issues/2115)) ([4206572](https://github.com/verdaccio/verdaccio/commit/420657293b63c5ba4ebe5582396f996ee7de3eec))
+
+### [4.11.2](https://github.com/verdaccio/verdaccio/compare/v4.11.1...v4.11.2) (2021-03-04)
+
+
+### Bug Fixes
+
+* upgrade handlebars from 4.7.6 to 4.7.7 ([#2114](https://github.com/verdaccio/verdaccio/issues/2114)) ([1e6fa60](https://github.com/verdaccio/verdaccio/commit/1e6fa60491f530b5c46bf9892ad7f63c5a7453e9))
+
+### [4.11.1](https://github.com/verdaccio/verdaccio/compare/v4.11.0...v4.11.1) (2021-02-25)
+
+
+### Bug Fixes
+
+* upgrade Node from 14.15 to 14.16 for security fixes ([#2104](https://github.com/verdaccio/verdaccio/issues/2104)) ([156342b](https://github.com/verdaccio/verdaccio/commit/156342b6b92e2b0a5cf6746788e0318c656565c1))
+
+## [4.11.0](https://github.com/verdaccio/verdaccio/compare/v4.10.0...v4.11.0) (2021-01-20)
+
+
+### Features
+
+* enable keep alive ([#2067](https://github.com/verdaccio/verdaccio/issues/2067)) ([4d152ca](https://github.com/verdaccio/verdaccio/commit/4d152ca01bc3af7c345641353a5200e985feeb7f))
+* skip log static content from web ([#2027](https://github.com/verdaccio/verdaccio/issues/2027)) ([39376be](https://github.com/verdaccio/verdaccio/commit/39376be34514f4c7e1d3a0f403a8dad30f7a3f72)), closes [#2026](https://github.com/verdaccio/verdaccio/issues/2026)
+* update @verdaccio/ui-theme  ([#2026](https://github.com/verdaccio/verdaccio/issues/2026)) ([2ea17ce](https://github.com/verdaccio/verdaccio/commit/2ea17ced2c52782b5dca2444e26d16336f977cf9))
+* update UI theme ([#2065](https://github.com/verdaccio/verdaccio/issues/2065)) ([936aa30](https://github.com/verdaccio/verdaccio/commit/936aa30383d49b41cf5312735bca90ea95cdf5b0))
+
+
+### Bug Fixes
+
+* update dependencies ([#2066](https://github.com/verdaccio/verdaccio/issues/2066)) ([f005b37](https://github.com/verdaccio/verdaccio/commit/f005b378169eb43b363ab1e7562af9c948f8b730))
+* update docker base image node 14.15.14 ([#2049](https://github.com/verdaccio/verdaccio/issues/2049)) ([76e035e](https://github.com/verdaccio/verdaccio/commit/76e035e52fc08e9cd4c51160d11dac4c60b54024))
+
+## [4.10.0](https://github.com/verdaccio/verdaccio/compare/v4.9.1...v4.10.0) (2020-12-06)
+
+
+### Features
+
+* enable keep alive on configuration by default ([#2014](https://github.com/verdaccio/verdaccio/issues/2014)) ([9171f25](https://github.com/verdaccio/verdaccio/commit/9171f25b410d45348bd037fbb06e01710541100e))
+* Set bytesin log as optional ([#2013](https://github.com/verdaccio/verdaccio/issues/2013)) ([e2f7bb2](https://github.com/verdaccio/verdaccio/commit/e2f7bb2f2990b91b2c10e5b259125686ec9730e9))
+
+
+### Bug Fixes
+
+* doubled request logs in node.js >= 11 ([#2012](https://github.com/verdaccio/verdaccio/issues/2012)) ([1e59b6a](https://github.com/verdaccio/verdaccio/commit/1e59b6aa6fc83cb239a5ea7d2b5389e28a2c1261))
+
+### [4.9.1](https://github.com/verdaccio/verdaccio/compare/v4.9.0...v4.9.1) (2020-11-28)
+
+
+### Bug Fixes
+
+* fix missing readme on npm7 ([#2010](https://github.com/verdaccio/verdaccio/issues/2010)) ([f4a85af](https://github.com/verdaccio/verdaccio/commit/f4a85af20ddd70dc8e028b12e9d5a7d278e45b18))
+
+## [4.9.0](https://github.com/verdaccio/verdaccio/compare/v4.8.1...v4.9.0) (2020-11-22)
+
+
+### Features
+
+* migrate yarn 1 to yarn 2 ([#1962](https://github.com/verdaccio/verdaccio/issues/1962)) ([1ece11c](https://github.com/verdaccio/verdaccio/commit/1ece11cfc0ecf1bdfe9ec545ce73c6a1d41a5fa0))
+* update docker base image to node 14.15.0 ([#1992](https://github.com/verdaccio/verdaccio/issues/1992)) ([f901749](https://github.com/verdaccio/verdaccio/commit/f90174935f77e6f4fe221d0b760e6ae05eb3d9f2))
+
+
+### Bug Fixes
+
+* buffer deprecated warnings  ([#1993](https://github.com/verdaccio/verdaccio/issues/1993)) ([4feaf24](https://github.com/verdaccio/verdaccio/commit/4feaf241c913ce2054382182f908bb569284e4d6))
+* check author if lastest is not found ([#1994](https://github.com/verdaccio/verdaccio/issues/1994)) ([185babc](https://github.com/verdaccio/verdaccio/commit/185babc53f350949263c79da4733483a4e451fc4))
+* package.json & yarn.lock to reduce vulnerabilities ([#1910](https://github.com/verdaccio/verdaccio/issues/1910)) ([cb5a8a7](https://github.com/verdaccio/verdaccio/commit/cb5a8a7ccd5cf49740bb51648ca36d2c8a142e62))
+* update dependencies ([#1965](https://github.com/verdaccio/verdaccio/issues/1965)) ([1443b73](https://github.com/verdaccio/verdaccio/commit/1443b7343a96ab45df15f9dc45d7e791d9b97fae))
+* update dependencies ([#1991](https://github.com/verdaccio/verdaccio/issues/1991)) ([ef51294](https://github.com/verdaccio/verdaccio/commit/ef51294457fd2b0e346ae5aad9541c230be3756e))
+* update dependencies, docker base and build deps ([#2007](https://github.com/verdaccio/verdaccio/issues/2007)) ([6eef015](https://github.com/verdaccio/verdaccio/commit/6eef0157ba06782e77c5dbb88f90fc07b9607544))
+* **deps:** bump @verdaccio/ui-theme from 1.12.1 to 1.13.1 ([#1961](https://github.com/verdaccio/verdaccio/issues/1961)) ([f7aad33](https://github.com/verdaccio/verdaccio/commit/f7aad33925391c4a47a8560c9ed70217f990ecde))
+* update Dockerfile to Node v12.18.4 ([#1945](https://github.com/verdaccio/verdaccio/issues/1945)) ([b409c01](https://github.com/verdaccio/verdaccio/commit/b409c0111fda547aa6898a2c36f27eaf654cae91))
+
+### [4.8.1](https://github.com/verdaccio/verdaccio/compare/v4.8.0...v4.8.1) (2020-08-06)
+
+
+### Bug Fixes
+
+* package.json & yarn.lock to reduce vulnerabilities ([#1879](https://github.com/verdaccio/verdaccio/issues/1879)) ([7c50d87](https://github.com/verdaccio/verdaccio/commit/7c50d87c52287d29517f3f800f5ce4e5078f94fa))
+* package.json & yarn.lock to reduce vulnerabilities ([#1889](https://github.com/verdaccio/verdaccio/issues/1889)) ([5e94478](https://github.com/verdaccio/verdaccio/commit/5e94478387ca01a660b804dd35e76edbf5ea1ce1))
+* update readme library ([#1892](https://github.com/verdaccio/verdaccio/issues/1892)) ([f75ad87](https://github.com/verdaccio/verdaccio/commit/f75ad876fd6815d848688b7605c2c126e464a929))
+* upgrade docker base image nodejs ([#1895](https://github.com/verdaccio/verdaccio/issues/1895)) ([261eab5](https://github.com/verdaccio/verdaccio/commit/261eab5ca0567ab17fb06aff270214c634fbb74b))
+
+## [4.8.0](https://github.com/verdaccio/verdaccio/compare/v4.7.2...v4.8.0) (2020-07-16)
+
+
+### Features
+
+* **deps:** bump @verdaccio/ui-theme from 1.11.0 to 1.12.0 ([#1872](https://github.com/verdaccio/verdaccio/issues/1872)) ([0348bf6](https://github.com/verdaccio/verdaccio/commit/0348bf6b5da86d80ed1af1572dae734b894156b6))
+* ca certificate is optional for https configuration ([#1853](https://github.com/verdaccio/verdaccio/issues/1853)) ([912482a](https://github.com/verdaccio/verdaccio/commit/912482a5ae7c81aff4dc127cc6d4dc69f4133b70))
+
+
+### Bug Fixes
+
+* package.json & yarn.lock to reduce vulnerabilities ([#1876](https://github.com/verdaccio/verdaccio/issues/1876)) ([e374a62](https://github.com/verdaccio/verdaccio/commit/e374a6248be972b1914b08e16cade949ea12b3cb))
+* revert move bodyParse to the upper level ([#1841](https://github.com/verdaccio/verdaccio/issues/1841)) ([#1877](https://github.com/verdaccio/verdaccio/issues/1877)) ([844267c](https://github.com/verdaccio/verdaccio/commit/844267ce257984f07dc552a671623a177febd5b4))
+* update dependencies ([#1878](https://github.com/verdaccio/verdaccio/issues/1878)) ([3c48670](https://github.com/verdaccio/verdaccio/commit/3c4867059a0a929439b8715ca4dd2c38d7e22322))
+
+### [4.7.2](https://github.com/verdaccio/verdaccio/compare/v4.7.1...v4.7.2) (2020-06-26)
+
+
+### Bug Fixes
+
+* package.json & yarn.lock to reduce vulnerabilities ([#1863](https://github.com/verdaccio/verdaccio/issues/1863)) ([b559d75](https://github.com/verdaccio/verdaccio/commit/b559d75f70a4ab961fd92beb6f0cf2493e6b9c7b))
+
+### [4.7.1](https://github.com/verdaccio/verdaccio/compare/v4.7.0...v4.7.1) (2020-06-22)
+
+
+### Bug Fixes
+
+* move search v1 endpoint as experimental ([#1850](https://github.com/verdaccio/verdaccio/issues/1850)) ([0bfdeaa](https://github.com/verdaccio/verdaccio/commit/0bfdeaa2e43c43c93f79b6f443445e8b0bd717f6))
+
+## [4.7.0](https://github.com/verdaccio/verdaccio/compare/v4.6.2...v4.7.0) (2020-06-20)
+
+
+### Features
+
+* npm deprecation support ([#1842](https://github.com/verdaccio/verdaccio/issues/1842)) ([80ade97](https://github.com/verdaccio/verdaccio/commit/80ade9780195d023e61ff5c5e006b6d51122eaad))
+* restore Node 8 support ([#1832](https://github.com/verdaccio/verdaccio/issues/1832)) ([56b677a](https://github.com/verdaccio/verdaccio/commit/56b677a35a4e9d65895ac11ee10cf3ac04e002df))
+* update ui add new languages ([#1849](https://github.com/verdaccio/verdaccio/issues/1849)) ([4d01831](https://github.com/verdaccio/verdaccio/commit/4d0183184299a4d1dda92a248a20e1aad60545e2))
+* update verdaccio plugins and dependencies ([#1838](https://github.com/verdaccio/verdaccio/issues/1838)) ([03c7feb](https://github.com/verdaccio/verdaccio/commit/03c7feb64d4d5790ffa6e1d1828ffb2735311b54))
+
+
+### Bug Fixes
+
+* [Snyk] upgrade @verdaccio/streams from 9.4.0 to 9.5.0 ([#1819](https://github.com/verdaccio/verdaccio/issues/1819)) ([1e2159a](https://github.com/verdaccio/verdaccio/commit/1e2159a34516301e0925b6f67c4b6e81316375f1))
+* move bodyParse to the upper level ([#1841](https://github.com/verdaccio/verdaccio/issues/1841)) ([67c31b6](https://github.com/verdaccio/verdaccio/commit/67c31b69cac11436a5dcbc5961748eaab0bae99b))
+* updated nodejs version to fix vulnerability in 12.x https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/ ([#1836](https://github.com/verdaccio/verdaccio/issues/1836)) ([aee69a9](https://github.com/verdaccio/verdaccio/commit/aee69a9453385dc39139f40aa963067e3070fb5c))
+* upgrade mkdirp from 1.0.3 to 1.0.4 ([#1782](https://github.com/verdaccio/verdaccio/issues/1782)) ([50f6c71](https://github.com/verdaccio/verdaccio/commit/50f6c71a375f34ef769a293f862b8603e1a03490))
+
+### [4.6.2](https://github.com/verdaccio/verdaccio/compare/v4.6.1...v4.6.2) (2020-05-01)
+
+
+### Bug Fixes
+
+* avoid access to sidebar without login ([#1794](https://github.com/verdaccio/verdaccio/issues/1794)) ([c2e0e1e](https://github.com/verdaccio/verdaccio/commit/c2e0e1e0bfa1daee45c458215877555244cbb414))
+* update core dependencies ([#1790](https://github.com/verdaccio/verdaccio/issues/1790)) ([f9e7f86](https://github.com/verdaccio/verdaccio/commit/f9e7f8671bec0f29820667cad7ef065a8bfc6a7e))
+
+### [4.6.1](https://github.com/verdaccio/verdaccio/compare/v4.6.0...v4.6.1) (2020-04-27)
+
+
+### Bug Fixes
+
+* improve token validation ([#1784](https://github.com/verdaccio/verdaccio/issues/1784)) ([416d41f](https://github.com/verdaccio/verdaccio/commit/416d41fa08a92422365599c29b78a49b5e34ec3f))
+
+## [4.6.0](https://github.com/verdaccio/verdaccio/compare/v4.5.1...v4.6.0) (2020-04-24)
+
+
+### Features
+
+* add dark mode on and chinese translation for web ([#1765](https://github.com/verdaccio/verdaccio/issues/1765)) ([4a81262](https://github.com/verdaccio/verdaccio/commit/4a812620cf44fd167b97249cb390a34807476c3e))
+* update @verdaccio/ui-theme@1.5.0 ([#1780](https://github.com/verdaccio/verdaccio/issues/1780)) ([656ec55](https://github.com/verdaccio/verdaccio/commit/656ec55897f01bb1588c80be12d31dbfe27ec9ce))
+* update docker node to 12.16.2 ([#1776](https://github.com/verdaccio/verdaccio/issues/1776)) ([61faa33](https://github.com/verdaccio/verdaccio/commit/61faa33de11939c0fc9ff9903b67d466426a65fb))
+
+
+### Bug Fixes
+
+* fatal exception and crash when log rotate signal event is called ([#1774](https://github.com/verdaccio/verdaccio/issues/1774)) ([1a9a12e](https://github.com/verdaccio/verdaccio/commit/1a9a12e9183cc2e3829c60841e7116d06b9849c3)), closes [#1709](https://github.com/verdaccio/verdaccio/issues/1709)
+* incorrect primary_color crash the ui ([#1771](https://github.com/verdaccio/verdaccio/issues/1771)) ([d689260](https://github.com/verdaccio/verdaccio/commit/d68926050dc7f1f8b6066c3480843082d3a1bd23))
+* upgrade async from 3.1.1 to 3.2.0 ([#1756](https://github.com/verdaccio/verdaccio/issues/1756)) ([3ec8d13](https://github.com/verdaccio/verdaccio/commit/3ec8d13578fee6711b77cbf8034c08f0db682392))
+* upgrade dayjs from 1.8.20 to 1.8.21 ([#1759](https://github.com/verdaccio/verdaccio/issues/1759)) ([ebae410](https://github.com/verdaccio/verdaccio/commit/ebae410c8164ac3e42c73c9d7cec6a8162a74457))
+* upgrade dayjs from 1.8.21 to 1.8.22 ([b2d00e4](https://github.com/verdaccio/verdaccio/commit/b2d00e4330e6dd31251e1e7caf670b5563b4180c))
+
+### [4.5.1](https://github.com/verdaccio/verdaccio/compare/v4.5.0...v4.5.1) (2020-03-14)
+
+
+### Bug Fixes
+
+* update docs to support minimum node v10 ([#1753](https://github.com/verdaccio/verdaccio/issues/1753)) ([17c3324](https://github.com/verdaccio/verdaccio/commit/17c3324e9324ab47afe765f62ecaca2ec3bb5969))
+
+## [4.5.0](https://github.com/verdaccio/verdaccio/compare/v4.4.4...v4.5.0) (2020-03-14)
+
+
+### Features
+
+*  i18n on web ([#1750](https://github.com/verdaccio/verdaccio/issues/1750)) ([c493b31](https://github.com/verdaccio/verdaccio/commit/c493b316b1663f189f8249a111b50bbc5facb7a8))
+* add support for new search endpoint([#1732](https://github.com/verdaccio/verdaccio/issues/1732)) ([9ac307a](https://github.com/verdaccio/verdaccio/commit/9ac307adc5cb06be570efaa8c65d9d9895d99491))
+
+
+### Bug Fixes
+
+* adding Content-Type to response in GET /-/all ([#1697](https://github.com/verdaccio/verdaccio/issues/1697)) ([#1728](https://github.com/verdaccio/verdaccio/issues/1728)) ([3aaa048](https://github.com/verdaccio/verdaccio/commit/3aaa04829acb49ec40448a42707c98ac07b2f92f))
+* package.json & yarn.lock to reduce vulnerabilities ([#1746](https://github.com/verdaccio/verdaccio/issues/1746)) ([3c49777](https://github.com/verdaccio/verdaccio/commit/3c497778683df1fd021b202e4c3f6b9962c4a7f0))
+* update @verdaccio/readme@9.3.2 ([#1745](https://github.com/verdaccio/verdaccio/issues/1745)) ([9213526](https://github.com/verdaccio/verdaccio/commit/92135265cd5945fde3129d1542d8673a5beb0706))
+* update acorn@7.1.1 ([#1739](https://github.com/verdaccio/verdaccio/issues/1739)) ([1968fa8](https://github.com/verdaccio/verdaccio/commit/1968fa82a2ced8aaffad082929a64c4739d8675e))
+* update dependencies security warnings ([#1748](https://github.com/verdaccio/verdaccio/issues/1748)) ([1e664bd](https://github.com/verdaccio/verdaccio/commit/1e664bdfa54b27eb2566399aebb204c0711a7c67))
+* upgrade dayjs from 1.8.19 to 1.8.20 ([#1721](https://github.com/verdaccio/verdaccio/issues/1721)) ([6849ef9](https://github.com/verdaccio/verdaccio/commit/6849ef969718ec92c88f5bc8f565e70189012ebc))
+* upgrade handlebars from 4.7.2 to 4.7.3 ([#1726](https://github.com/verdaccio/verdaccio/issues/1726)) ([11fed6d](https://github.com/verdaccio/verdaccio/commit/11fed6d3c3c1eb5248f006c97a15f06e254dcd50))
+* upgrade mkdirp from 1.0.0 to 1.0.3 ([#1747](https://github.com/verdaccio/verdaccio/issues/1747)) ([981efa5](https://github.com/verdaccio/verdaccio/commit/981efa557143c68f159ebbbeaa1743b693153771))
+* upgrade semver from 7.1.2 to 7.1.3 ([#1735](https://github.com/verdaccio/verdaccio/issues/1735)) ([64e2543](https://github.com/verdaccio/verdaccio/commit/64e2543d599bbdc35e813148724dbe8ab2f914c4))
+
+### [4.4.4](https://github.com/verdaccio/verdaccio/compare/v4.4.3...v4.4.4) (2020-02-26)
+
+
+### Bug Fixes
+
+* tarball urls for web/package (fix [#1714](https://github.com/verdaccio/verdaccio/issues/1714)) ([#1716](https://github.com/verdaccio/verdaccio/issues/1716)) ([70a93da](https://github.com/verdaccio/verdaccio/commit/70a93da1fc8f16110874409e5fe20fd00adcf68d))
+* upgrade @verdaccio/local-storage from 9.0.0 to 9.3.0 ([#1717](https://github.com/verdaccio/verdaccio/issues/1717)) ([1f3f8cd](https://github.com/verdaccio/verdaccio/commit/1f3f8cd72c28d869f47f16213940017a5a06d2de))
+* upgrade semver from 7.1.1 to 7.1.2 ([#1719](https://github.com/verdaccio/verdaccio/issues/1719)) ([c3e931e](https://github.com/verdaccio/verdaccio/commit/c3e931efa10f7be581ca2450ebb03f302085fe5b))
+
+### [4.4.3](https://github.com/verdaccio/verdaccio/compare/v4.4.2...v4.4.3) (2020-02-19)
+
+
+### Bug Fixes
+
+* update @verdaccio/ui-theme@0.3.13 ([#1710](https://github.com/verdaccio/verdaccio/issues/1710)) ([d94f838](https://github.com/verdaccio/verdaccio/commit/d94f838cd9731b8d97f637bd4aceb6abe159d5fa))
+* upgrade async from 3.1.0 to 3.1.1 ([#1708](https://github.com/verdaccio/verdaccio/issues/1708)) ([a32e431](https://github.com/verdaccio/verdaccio/commit/a32e4318136f3704f1ec572d5343d60b9df14063))
+* upgrade dayjs from 1.8.17 to 1.8.19 ([#1700](https://github.com/verdaccio/verdaccio/issues/1700)) ([5320b13](https://github.com/verdaccio/verdaccio/commit/5320b13473eef583877e59b63d925b513f31a3a5))
+* upgrade handlebars from 4.5.3 to 4.7.2 ([#1699](https://github.com/verdaccio/verdaccio/issues/1699)) ([8c2e58b](https://github.com/verdaccio/verdaccio/commit/8c2e58b6af3c04716431e6d98c6442d39d3373e3))
+* upgrade lockfile-lint from 2.0.1 to 2.2.0 ([#1698](https://github.com/verdaccio/verdaccio/issues/1698)) ([17ddf3e](https://github.com/verdaccio/verdaccio/commit/17ddf3e6266f4821e2b9c379766d56b67f10e6be))
+* use https to resolve mixed content errors ([#1674](https://github.com/verdaccio/verdaccio/issues/1674)) ([fd6c649](https://github.com/verdaccio/verdaccio/commit/fd6c6497fa66a523fac744f214fcea86b653171c))
+
+### [4.4.2](https://github.com/verdaccio/verdaccio/compare/v4.4.1...v4.4.2) (2020-01-11)
+
+
+### Bug Fixes
+
+* use hasProxyTo to find correct uplink for tarballs ([#1644](https://github.com/verdaccio/verdaccio/issues/1644)) ([19d9fc2](https://github.com/verdaccio/verdaccio/commit/19d9fc2fa5b228cda379a870642d08d247d8c515)), closes [#1642](https://github.com/verdaccio/verdaccio/issues/1642) [#1642](https://github.com/verdaccio/verdaccio/issues/1642)
+* **deps:** bump @verdaccio/local-storage from 8.5.0 to 9.0.0 ([7b67bea](https://github.com/verdaccio/verdaccio/commit/7b67bea4b8ec5de29ffc04b1f99c9d041c14ac57)), closes [#1663](https://github.com/verdaccio/verdaccio/issues/1663) [#1639](https://github.com/verdaccio/verdaccio/issues/1639)
+* **deps:** bump @verdaccio/ui-theme from 0.3.10 to 0.3.11 ([#1657](https://github.com/verdaccio/verdaccio/issues/1657)) ([9a2fd81](https://github.com/verdaccio/verdaccio/commit/9a2fd8162640a7ef9901a57ccea50649b6ed29bc))
+* **deps:** bump @verdaccio/ui-theme from 0.3.11 to 0.3.12 ([#1657](https://github.com/verdaccio/verdaccio/issues/1657)) ([#1665](https://github.com/verdaccio/verdaccio/issues/1665)) ([aac6709](https://github.com/verdaccio/verdaccio/commit/aac6709ac21cf4b7fd6073ee1c499080d881a910))
+* updated combine url fix method ([#1647](https://github.com/verdaccio/verdaccio/issues/1647)) ([4f43347](https://github.com/verdaccio/verdaccio/commit/4f43347b509446c93f6e6255a863775d35ed7a13))
+
+### [4.4.1](https://github.com/verdaccio/verdaccio/compare/v4.4.0...v4.4.1) (2020-01-03)
+
+
+### Bug Fixes
+
+* prevent issue with leading hyphen in package name - fixes [#1429](https://github.com/verdaccio/verdaccio/issues/1429) ([#1636](https://github.com/verdaccio/verdaccio/issues/1636)) ([f89bf27](https://github.com/verdaccio/verdaccio/commit/f89bf27f5a8704bbaa48024ad7b5a4647a2d5813))
+* warning due ui dependecy ([#1638](https://github.com/verdaccio/verdaccio/issues/1638)) ([fbc87fc](https://github.com/verdaccio/verdaccio/commit/fbc87fc26e7d2bcbe3410500eb08f6cee4d74120))
+
+## [4.4.0](https://github.com/verdaccio/verdaccio/compare/v4.3.5...v4.4.0) (2019-12-15)
+
+
+### Bug Fixes
+
+* search api will not set magic date header when return array ([#1598](https://github.com/verdaccio/verdaccio/issues/1598)) ([158de3f](https://github.com/verdaccio/verdaccio/commit/158de3f))
+
+
+### Features
+
+* bumb up docker to node 12 ([#1622](https://github.com/verdaccio/verdaccio/issues/1622)) ([287ed3f](https://github.com/verdaccio/verdaccio/commit/287ed3f))
+* update @verdaccio/ui-theme@0.3.9 ([#1623](https://github.com/verdaccio/verdaccio/issues/1623)) ([1b4a5dc](https://github.com/verdaccio/verdaccio/commit/1b4a5dc))
+
+### [4.3.5](https://github.com/verdaccio/verdaccio/compare/v4.3.4...v4.3.5) (2019-11-21)
+
+
+### Bug Fixes
+
+* changed the exit code for info flag ([#1537](https://github.com/verdaccio/verdaccio/issues/1537)) ([cbea2ed](https://github.com/verdaccio/verdaccio/commit/cbea2ed))
+* package.json to reduce vulnerabilities ([#1552](https://github.com/verdaccio/verdaccio/issues/1552)) ([cd8228b](https://github.com/verdaccio/verdaccio/commit/cd8228b))
+* package.json to reduce vulnerabilities ([#1577](https://github.com/verdaccio/verdaccio/issues/1577)) ([e459881](https://github.com/verdaccio/verdaccio/commit/e459881))
+* package.json to reduce vulnerabilities ([#1583](https://github.com/verdaccio/verdaccio/issues/1583)) ([2f3ba93](https://github.com/verdaccio/verdaccio/commit/2f3ba93))
+
+### [4.3.4](https://github.com/verdaccio/verdaccio/compare/v4.3.3...v4.3.4) (2019-10-23)
+
+
+### Bug Fixes
+
+* minor grammatical tweak ([#1513](https://github.com/verdaccio/verdaccio/issues/1513)) ([35f816b](https://github.com/verdaccio/verdaccio/commit/35f816b))
+* minor typos, formatting, and docs ([#1512](https://github.com/verdaccio/verdaccio/issues/1512)) ([549f474](https://github.com/verdaccio/verdaccio/commit/549f474))
+* security vulnerability at readme in dompurify dep ([#1532](https://github.com/verdaccio/verdaccio/issues/1532)) ([2ac7770](https://github.com/verdaccio/verdaccio/commit/2ac7770))
+
+### [4.3.3](https://github.com/verdaccio/verdaccio/compare/v4.3.2...v4.3.3) (2019-10-03)
+
+
+### Bug Fixes
+
+* allow add to request agentOptions ([#1506](https://github.com/verdaccio/verdaccio/issues/1506)) ([65d6a93](https://github.com/verdaccio/verdaccio/commit/65d6a93))
+
+### [4.3.2](https://github.com/verdaccio/verdaccio/compare/v4.3.1...v4.3.2) (2019-10-02)
+
+
+### Bug Fixes
+
+* comment out experiments from configuration files ([#1505](https://github.com/verdaccio/verdaccio/issues/1505)) ([3438b75](https://github.com/verdaccio/verdaccio/commit/3438b75))
+* fixing the lint issues ([#1503](https://github.com/verdaccio/verdaccio/issues/1503)) ([02aee3a](https://github.com/verdaccio/verdaccio/commit/02aee3a))
+* fixing typos in comments ([#1504](https://github.com/verdaccio/verdaccio/issues/1504)) ([72314e4](https://github.com/verdaccio/verdaccio/commit/72314e4))
+
+### [4.3.1](https://github.com/verdaccio/verdaccio/compare/v4.3.0...v4.3.1) (2019-10-01)
+
+
+### Bug Fixes
+
+* remove jwt from default config ([#1499](https://github.com/verdaccio/verdaccio/issues/1499)) ([e9616f9](https://github.com/verdaccio/verdaccio/commit/e9616f9))
+* remove jwt from docker config ([#1500](https://github.com/verdaccio/verdaccio/issues/1500)) ([bc6b084](https://github.com/verdaccio/verdaccio/commit/bc6b084))
+
+## [4.3.0](https://github.com/verdaccio/verdaccio/compare/v4.2.2...v4.3.0) (2019-09-30)
+
+
+### Bug Fixes
+
+* package.json to reduce vulnerabilities ([#1474](https://github.com/verdaccio/verdaccio/issues/1474)) ([b1cd070](https://github.com/verdaccio/verdaccio/commit/b1cd070))
+
+
+### Features
+
+* browse web package version ([#1457](https://github.com/verdaccio/verdaccio/issues/1457)) ([d5303f4](https://github.com/verdaccio/verdaccio/commit/d5303f4))
+* ensure every log file has at least one record ([#1414](https://github.com/verdaccio/verdaccio/issues/1414)) ([962d5d5](https://github.com/verdaccio/verdaccio/commit/962d5d5))
+* npm token command support ([#1427](https://github.com/verdaccio/verdaccio/issues/1427)) ([dbf2017](https://github.com/verdaccio/verdaccio/commit/dbf2017))
+* **docker:** Node.js update to 10.16.3 ([#1473](https://github.com/verdaccio/verdaccio/issues/1473)) ([e081a58](https://github.com/verdaccio/verdaccio/commit/e081a58))
+
+### [4.2.2](https://github.com/verdaccio/verdaccio/compare/v4.2.1...v4.2.2) (2019-08-25)
+
+
+### Bug Fixes
+
+* mkdir failed and ec2 infinitely re-launch ([342d284](https://github.com/verdaccio/verdaccio/commit/342d284))
+* update @verdaccio/ui-theme@0.2.3 ([#1451](https://github.com/verdaccio/verdaccio/issues/1451)) 
+* use test + mkdir for strict dir check ([9006146](https://github.com/verdaccio/verdaccio/commit/9006146))
+
+### [4.2.1](https://github.com/verdaccio/verdaccio/compare/v4.2.0...v4.2.1) (2019-08-10)
+
+
+### Bug Fixes
+
+* fixed user creation endpoint to properly import groups ([50e115f](https://github.com/verdaccio/verdaccio/commit/50e115f))
+* remove stub type definition for handlebars ([de8dc43](https://github.com/verdaccio/verdaccio/commit/de8dc43))
+* unpublish and add or remove star collision ([#1434](https://github.com/verdaccio/verdaccio/issues/1434)) ([c264f94](https://github.com/verdaccio/verdaccio/commit/c264f94))
+* **deps:** add missing prod dependency ([849f5bc](https://github.com/verdaccio/verdaccio/commit/849f5bc))
+
+
+
+## [4.2.0](https://github.com/verdaccio/verdaccio/compare/v4.1.0...v4.2.0) (2019-07-29)
+
+
+### Bug Fixes
+
+* **security:** add secrets baseline ([2b218ce](https://github.com/verdaccio/verdaccio/commit/2b218ce))
+* allows pkg names that start with dash ([e319435](https://github.com/verdaccio/verdaccio/commit/e319435)), closes [/github.com/rlidwka/sinopia/commit/9f662a69e19a15dd90f568fc3a3ebf65b33cbd80#diff-50e3aa130a4f97a42ee2cf111c7b1d9](https://github.com/verdaccio/verdaccio/issues/diff-50e3aa130a4f97a42ee2cf111c7b1d9)
+* upgrade to 1.0.2 which solves the docker issue ([aa8f1d3](https://github.com/verdaccio/verdaccio/commit/aa8f1d3))
+
+
+### Build System
+
+* **deps:** bump lodash.template from 4.4.0 to 4.5.0 ([#1384](https://github.com/verdaccio/verdaccio/issues/1384)) ([b453681](https://github.com/verdaccio/verdaccio/commit/b453681))
+* fix semver missing type on build with docker ([12b60f6](https://github.com/verdaccio/verdaccio/commit/12b60f6))
+* update issue templates for use info new flag ([#1377](https://github.com/verdaccio/verdaccio/issues/1377)) ([495bb0a](https://github.com/verdaccio/verdaccio/commit/495bb0a))
+
+
+### Features
+
+* add new prop to audit middleware ([d93e76b](https://github.com/verdaccio/verdaccio/commit/d93e76b))
+* convert project to typescript ([#1374](https://github.com/verdaccio/verdaccio/issues/1374)) ([66f4197](https://github.com/verdaccio/verdaccio/commit/66f4197))
+* docker image bump to node.js 10.16 ([802c796](https://github.com/verdaccio/verdaccio/commit/802c796))
+* plugins can throw http status codes ([3c53997](https://github.com/verdaccio/verdaccio/commit/3c53997))
+* prevent secrets from leaking to source control ([9ef6808](https://github.com/verdaccio/verdaccio/commit/9ef6808))
+* update to @verdaccio/ui-theme@0.2.2 ([9dd1c8f](https://github.com/verdaccio/verdaccio/commit/9dd1c8f))
+
+
+### Tests
+
+* add unit test for parser logger strings ([3beb57f](https://github.com/verdaccio/verdaccio/commit/3beb57f))
+
+
+
+## [4.1.0](https://github.com/verdaccio/verdaccio/compare/v4.0.4...v4.1.0) (2019-07-08)
+
+
+### Features
+
+* parse YAML/JSON/JS config file ([#1258](https://github.com/verdaccio/verdaccio/issues/1258)) ([95d134b](https://github.com/verdaccio/verdaccio/commit/95d134b))
+* plugin support to filter packages ([b9ffac5](https://github.com/verdaccio/verdaccio/commit/b9ffac5)), closes [#818](https://github.com/verdaccio/verdaccio/issues/818)
+* **chore:** Included provision to show up local environment information ([#1365](https://github.com/verdaccio/verdaccio/issues/1365)) ([eb6bf51](https://github.com/verdaccio/verdaccio/commit/eb6bf51)), closes [#1364](https://github.com/verdaccio/verdaccio/issues/1364)
+
+
+### Tests
+
+*  increase usage of constants ([2f3ec2c](https://github.com/verdaccio/verdaccio/commit/2f3ec2c))
+* fix broken test for validate parameters ([4bf6b3b](https://github.com/verdaccio/verdaccio/commit/4bf6b3b))
+* relocate api spec test ([8786a37](https://github.com/verdaccio/verdaccio/commit/8786a37))
+* relocate helpers ([d052bce](https://github.com/verdaccio/verdaccio/commit/d052bce))
+* relocate notification test ([596c727](https://github.com/verdaccio/verdaccio/commit/596c727))
+* relocate plugin storage ([e7400ce](https://github.com/verdaccio/verdaccio/commit/e7400ce))
+* relocate spec test ([b4c42c1](https://github.com/verdaccio/verdaccio/commit/b4c42c1))
+* relocate test ([3929633](https://github.com/verdaccio/verdaccio/commit/3929633))
+* relocate unit test ([ca2e23c](https://github.com/verdaccio/verdaccio/commit/ca2e23c))
+* relocate unit test cli, proxy, utils ([b1eb7c6](https://github.com/verdaccio/verdaccio/commit/b1eb7c6))
+
+
+
+## [4.0.4](https://github.com/verdaccio/verdaccio/compare/v4.0.3...v4.0.4) (2019-06-20)
+
+
+### Bug Fixes
+
+* correctly check the keepAliveTimeout value, fixes [#1352](https://github.com/verdaccio/verdaccio/issues/1352) ([#1353](https://github.com/verdaccio/verdaccio/issues/1353)) ([a92bd5f](https://github.com/verdaccio/verdaccio/commit/a92bd5f))
+
+
+
+## [4.0.3](https://github.com/verdaccio/verdaccio/compare/v4.0.2...v4.0.3) (2019-06-14)
+
+
+### Bug Fixes
+
+* **api:** return 503 to npm/yarn on uplink connection timeout ([#1331](https://github.com/verdaccio/verdaccio/issues/1331))  ([eb7a8e3](https://github.com/verdaccio/verdaccio/commit/eb7a8e3)), closes [#1328](https://github.com/verdaccio/verdaccio/issues/1328) [#720](https://github.com/verdaccio/verdaccio/issues/720) [#1328](https://github.com/verdaccio/verdaccio/issues/1328) [#720](https://github.com/verdaccio/verdaccio/issues/720)
+
+
+
+## [4.0.2](https://github.com/verdaccio/verdaccio/compare/v4.0.1...v4.0.2) (2019-06-13)
+
+
+### Bug Fixes
+
+* correctly check if the proxy setting evaluates to false ([#1336](https://github.com/verdaccio/verdaccio/issues/1336)) ([df834f4](https://github.com/verdaccio/verdaccio/commit/df834f4))
+* update dependencies ([e581634](https://github.com/verdaccio/verdaccio/commit/e581634)), closes [#1339](https://github.com/verdaccio/verdaccio/issues/1339)
+* update security policy details ([#1342](https://github.com/verdaccio/verdaccio/issues/1342)) ([ddcd89d](https://github.com/verdaccio/verdaccio/commit/ddcd89d))
+* **api:** force authenticate on login ([#1347](https://github.com/verdaccio/verdaccio/issues/1347)) ([85c1bd1](https://github.com/verdaccio/verdaccio/commit/85c1bd1))
+* **ui:** failed to load all packages after login ([192fb77](https://github.com/verdaccio/verdaccio/commit/192fb77))
+
+
+
+## [4.0.1](https://github.com/verdaccio/verdaccio/compare/v4.0.0...v4.0.1) (2019-05-28)
+
+
+### Bug Fixes
+
+* **web:** fix sidebar tarball protocol ([#1326](https://github.com/verdaccio/verdaccio/issues/1326)) ([de04463](https://github.com/verdaccio/verdaccio/commit/de04463)), closes [#1320](https://github.com/verdaccio/verdaccio/issues/1320)
+
+
+
 # [4.0.0](https://github.com/verdaccio/verdaccio/compare/v4.0.0-beta.8...v4.0.0) (2019-05-26)
 
 

CONTRIBUTING.md

@@ -1,5 +1,7 @@
 # Contributing to Verdaccio
 
+> ⚠️ If you intend to file a PR with a new feature, please use the 5.x branch for it 🥰 . master branch is available only for **bug fixing** and dependencies updates.
+
 We are happy that you wish to contribute to this project. For that reason, we
 present you with this guide.
 
@@ -156,10 +158,9 @@ fix: xxxxxxxxxx
 ```
 
 Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
-and `chore:` are valid but have no effect on versioning. **It would be great
-if you use them.**
+and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
 
-Use `npm run commitmsg` to check your commit message format.
+All commits message are going to be validated when they are created using husky hooks.
 
 **PRs that do not follow the commit message guidelines will not be merged.**
 

CONTRIBUTORS.md

@@ -0,0 +1,41 @@
+<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
+<!-- prettier-ignore-start -->
+<!-- markdownlint-disable -->
+<table>
+  <tr>
+    <td align="center"><a href="https://www.linkedin.com/in/jotadeveloper/"><img src="https://avatars0.githubusercontent.com/u/558752?v=4" width="100px;" alt=""/><br /><sub><b>Juan Picado</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Documentation">📖</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Code">💻</a> <a href="#infra-juanpicado" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#eventOrganizing-juanpicado" title="Event Organizing">📋</a> <a href="#blog-juanpicado" title="Blogposts">📝</a> <a href="#maintenance-juanpicado" title="Maintenance">🚧</a></td>
+    <td align="center"><a href="https://github.com/sergiohgz"><img src="https://avatars3.githubusercontent.com/u/14012309?v=4" width="100px;" alt=""/><br /><sub><b>Sergio Herrera</b></sub></a><br /><a href="#infra-sergiohgz" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-sergiohgz" title="Maintenance">🚧</a></td>
+    <td align="center"><a href="https://daniel-ruf.de/"><img src="https://avatars1.githubusercontent.com/u/827205?v=4" width="100px;" alt=""/><br /><sub><b>Daniel Ruf</b></sub></a><br /><a href="#security-DanielRuf" title="Security">🛡️</a> <a href="#infra-DanielRuf" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-DanielRuf" title="Maintenance">🚧</a></td>
+    <td align="center"><a href="https://priscilawebdev.github.io/priscilaoliveira/"><img src="https://avatars1.githubusercontent.com/u/29228205?v=4" width="100px;" alt=""/><br /><sub><b>Priscila Oliveira</b></sub></a><br /><a href="#design-priscilawebdev" title="Design">🎨</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=priscilawebdev" title="Code">💻</a> <a href="#maintenance-priscilawebdev" title="Maintenance">🚧</a></td>
+    <td align="center"><a href="http://ayusharma.github.io/"><img src="https://avatars0.githubusercontent.com/u/6918450?v=4" width="100px;" alt=""/><br /><sub><b>Ayush Sharma</b></sub></a><br /><a href="#infra-ayusharma" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ayusharma" title="Code">💻</a> <a href="#design-ayusharma" title="Design">🎨</a></td>
+    <td align="center"><a href="https://github.com/trentearl"><img src="https://avatars2.githubusercontent.com/u/802857?v=4" width="100px;" alt=""/><br /><sub><b>Trent Earl</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=trentearl" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/jmwilkinson"><img src="https://avatars0.githubusercontent.com/u/17836030?v=4" width="100px;" alt=""/><br /><sub><b>jmwilkinson</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jmwilkinson" title="Code">💻</a></td>
+  </tr>
+  <tr>
+    <td align="center"><a href="https://github.com/bufferoverflow"><img src="https://avatars2.githubusercontent.com/u/378909?v=4" width="100px;" alt=""/><br /><sub><b>Roger Meier</b></sub></a><br /><a href="#plugin-bufferoverflow" title="Plugin/utility libraries">🔌</a></td>
+    <td align="center"><a href="https://ghuser.io/jamesgeorge007"><img src="https://avatars2.githubusercontent.com/u/25279263?v=4" width="100px;" alt=""/><br /><sub><b>James George</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jamesgeorge007" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/AvailCat"><img src="https://avatars3.githubusercontent.com/u/19658647?v=4" width="100px;" alt=""/><br /><sub><b>AvailCat</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=AvailCat" title="Code">💻</a> <a href="#infra-AvailCat" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-AvailCat" title="Maintenance">🚧</a></td>
+    <td align="center"><a href="https://www.luciusgaitan.com/"><img src="https://avatars0.githubusercontent.com/u/5970350?v=4" width="100px;" alt=""/><br /><sub><b>Lucius Gaitán</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lgaitan" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/ramonornela"><img src="https://avatars1.githubusercontent.com/u/187946?v=4" width="100px;" alt=""/><br /><sub><b>Ramon Henrique Ornelas</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ramonornela" title="Code">💻</a></td>
+    <td align="center"><a href="https://people.freebsd.org/~mi/resume/"><img src="https://avatars1.githubusercontent.com/u/1486340?v=4" width="100px;" alt=""/><br /><sub><b>UnitedMarsupials-zz</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=UnitedMarsupials-zz" title="Code">💻</a></td>
+    <td align="center"><a href="http://www.codingintrigue.co.uk/"><img src="https://avatars0.githubusercontent.com/u/9048902?v=4" width="100px;" alt=""/><br /><sub><b>Ryan Graham</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ryan-codingintrigue" title="Code">💻</a></td>
+  </tr>
+  <tr>
+    <td align="center"><a href="https://github.com/coolsp"><img src="https://avatars1.githubusercontent.com/u/1246647?v=4" width="100px;" alt=""/><br /><sub><b>coolsp</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=coolsp" title="Code">💻</a></td>
+    <td align="center"><a href="http://ashishsurana.in/"><img src="https://avatars0.githubusercontent.com/u/5610944?v=4" width="100px;" alt=""/><br /><sub><b>Ashish Surana</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ashishsurana" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/buffaybu"><img src="https://avatars3.githubusercontent.com/u/2025661?v=4" width="100px;" alt=""/><br /><sub><b>Wang Yifei</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=buffaybu" title="Code">💻</a></td>
+    <td align="center"><a href="https://twitter.com/liran_tal"><img src="https://avatars1.githubusercontent.com/u/316371?v=4" width="100px;" alt=""/><br /><sub><b>Liran Tal</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lirantal" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/brenordr"><img src="https://avatars2.githubusercontent.com/u/19731692?v=4" width="100px;" alt=""/><br /><sub><b>Breno Rodrigues</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=brenordr" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/jachstet-sea"><img src="https://avatars0.githubusercontent.com/u/7993508?v=4" width="100px;" alt=""/><br /><sub><b>jachstet-sea</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jachstet-sea" title="Code">💻</a></td>
+    <td align="center"><a href="https://patrik.votocek.cz/"><img src="https://avatars1.githubusercontent.com/u/112567?v=4" width="100px;" alt=""/><br /><sub><b>Patrik Votoček</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=Vrtak-CZ" title="Code">💻</a></td>
+  </tr>
+  <tr>
+    <td align="center"><a href="https://github.com/monkeywithacupcake"><img src="https://avatars3.githubusercontent.com/u/7316730?v=4" width="100px;" alt=""/><br /><sub><b>jess</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=monkeywithacupcake" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/toolsofraj"><img src="https://avatars0.githubusercontent.com/u/2507152?v=4" width="100px;" alt=""/><br /><sub><b>toolsofraj</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=toolsofraj" title="Code">💻</a></td>
+    <td align="center"><a href="https://github.com/ddhp"><img src="https://avatars1.githubusercontent.com/u/1715380?v=4" width="100px;" alt=""/><br /><sub><b>Jian-Chen Chen (jesse)</b></sub></a><br /><a href="#translation-ddhp" title="Translation">🌍</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ddhp" title="Code">💻</a></td>
+  </tr>
+</table>
+
+<!-- markdownlint-enable -->
+<!-- prettier-ignore-end -->
+<!-- ALL-CONTRIBUTORS-LIST:END -->

Dockerfile

@@ -1,7 +1,7 @@
-FROM node:10.15.3-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder
 
 ENV NODE_ENV=production \
-    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org
+    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
 
 RUN apk --no-cache add openssl ca-certificates wget && \
     apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
@@ -12,16 +12,18 @@ RUN apk --no-cache add openssl ca-certificates wget && \
 WORKDIR /opt/verdaccio-build
 COPY . .
 
-RUN yarn config set registry $VERDACCIO_BUILD_REGISTRY && \
-    yarn install --production=false --no-lockfile && \
+RUN yarn config set npmRegistryServer $VERDACCIO_BUILD_REGISTRY && \
+    yarn config set enableProgressBars false && \
+    yarn config set enableTelemetry false && \
+    yarn install && \
     yarn lint && \
     yarn code:docker-build && \
     yarn cache clean && \
-    yarn install --production=true --no-lockfile
+    yarn workspaces focus --production
 
 
 
-FROM node:10.15.3-alpine
+FROM node:14.16.1-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

README.md

@@ -2,7 +2,7 @@
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version 4
+# Version 5
 
 [Verdaccio](https://verdaccio.org/) is a simple, **zero-config-required local private npm registry**.
 No need for an entire database just to get started! Verdaccio comes out of the box with
@@ -14,18 +14,16 @@ Google Cloud Storage** or create your own plugin.
 
 
 [![verdaccio (latest)](https://img.shields.io/npm/v/verdaccio/latest.svg)](https://www.npmjs.com/package/verdaccio)
-[![verdaccio (downloads)](http://img.shields.io/npm/dy/verdaccio.svg)](https://www.npmjs.com/package/verdaccio)
+[![verdaccio (downloads)](https://img.shields.io/npm/dy/verdaccio.svg)](https://www.npmjs.com/package/verdaccio)
 [![docker pulls](https://img.shields.io/docker/pulls/verdaccio/verdaccio.svg?maxAge=43200)](https://verdaccio.org/docs/en/docker.html)
 [![backers](https://opencollective.com/verdaccio/tiers/backer/badge.svg?label=Backer&color=brightgreen)](https://opencollective.com/verdaccio)
 [![stackshare](https://img.shields.io/badge/Follow%20on-StackShare-blue.svg?logo=stackshare&style=flat)](https://stackshare.io/verdaccio)
 
-![circle ci status](https://circleci.com/gh/verdaccio/verdaccio.svg?style=shield&circle-token=:circle-token)
-[![codecov](https://img.shields.io/codecov/c/github/verdaccio/verdaccio/master.svg)](https://codecov.io/gh/verdaccio/verdaccio)
 [![discord](https://img.shields.io/discord/388674437219745793.svg)](http://chat.verdaccio.org/)
 [![node](https://img.shields.io/node/v/verdaccio/latest.svg)](https://www.npmjs.com/package/verdaccio)
-![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)
+[![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
-
+[![TODOs](https://badgen.net/https/api.tickgit.com/badgen/github.com/verdaccio/verdaccio)](https://www.tickgit.com/browse?repo=github.com/verdaccio/verdaccio)
 
 [![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
@@ -36,9 +34,19 @@ Google Cloud Storage** or create your own plugin.
 Install with npm:
 
 ```bash
-npm install --global verdaccio
+npm install --global verdaccio@next
 ```
 
+> Node.js v12 is required for Verdaccio 5
+
+Are you still using **Verdaccio 4**?. Check the [migration guide](https://verdaccio.org/blog/2021/04/14/verdaccio-5-migration-guide).
+
+## Donations
+
+Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider making a donation - **your logo might end up in this readme.** 😉
+
+**[Donate](https://opencollective.com/verdaccio)** 💵👍🏻 starting from *$1/month* or just one single contribution.
+
 ## What does Verdaccio do for me?
 
 ### Use private packages
@@ -57,13 +65,29 @@ If you use multiples registries in your organization and need to fetch packages
 
 ### Override public packages
 
-If you want to use a modified version of some 3rd-party package (for example, you found a bug, but maintainer didn't accept pull request yet), you can publish your version locally under the same name. See in detail each of these [use cases](https://github.com/verdaccio/verdaccio/tree/master/docs/use-cases.md).
+If you want to use a modified version of some 3rd-party package (for example, you found a bug, but maintainer didn't accept pull request yet), you can publish your version locally under the same name. See in detail [here](https://verdaccio.org/docs/en/best#override-public-packages).
 
 ### E2E Testing
 
 Verdaccio has proved to be a lightweight registry that can be
 booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **alfresco** or **eclipse theia**. You can read more in dedicated article to E2E in our blog.
 
+## Talks
+
+### **Node.js Dependency Confusion Attacks & Vulnerabilities in Go Binaries**.
+
+[RSVP](https://www.meetup.com/es-ES/devseccon-germany/events/276990087) to join the talk.
+
+[![verdaccio openjsworld](https://cdn.verdaccio.dev/readme/devseccon.png)](https://www.meetup.com/es-ES/devseccon-germany/events/276990087/)
+
+
+You might want to check out as well our previous talks: 
+
+* [**OpenJS World 2020** about *Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado***](https://www.youtube.com/watch?v=oVCjDWeehAQ)
+* [ViennaJS Meetup - Introduction to Verdaccio by **Priscila Olivera** and **Juan Picado**](https://www.youtube.com/watch?v=hDIFKzmoCa)
+* [Open Source? trivago - Verdaccio (**Ayush** and **Juan Picado**) January 2020](https://www.youtube.com/watch?v=A5CWxJC9xzc)
+* [GitNation Open Source Stage - How we have built a Node.js Registry with React - **Juan Picado** December 2019](https://www.youtube.com/watch?v=gpjC8Qp9B9A)
+* [Verdaccio - A lightweight Private Proxy Registry built in Node.js | **Juan Picado** at The Destro Dev Show](https://www.youtube.com/watch?reload=9&v=P_hxy7W-IL4&ab_channel=TheDestroDevShow)
 
 ## Get Started
 
@@ -79,13 +103,18 @@ You would need set some npm configuration, this is optional.
 $ npm set registry http://localhost:4873/
 ```
 
+For one-off commands or to avoid setting the registry globally:
+```bash
+NPM_CONFIG_REGISTRY=http://localhost:4873 npm i
+```
+
 Now you can navigate to [http://localhost:4873/](http://localhost:4873/) where your local packages will be listed and can be searched.
 
 > Warning: Verdaccio [does not currently support PM2's cluster mode](https://github.com/verdaccio/verdaccio/issues/1301#issuecomment-489302298), running it with cluster mode may cause unknown behavior.
 
 ## Publishing
 
-#### 1. create an user and log in
+#### 1. create a user and log in
 
 ```bash
 npm adduser --registry http://localhost:4873
@@ -108,7 +137,7 @@ This will prompt you for user credentials which will be saved on the `verdaccio`
 
 ## Docker
 
-Below are the most commonly needed informations,
+Below are the most commonly needed information,
 every aspect of Docker and verdaccio is [documented separately](https://www.verdaccio.org/docs/en/docker.html)
 
 
@@ -119,7 +148,7 @@ docker pull verdaccio/verdaccio
 Available as [tags](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
 
 ```
-docker pull verdaccio/verdaccio:4
+docker pull verdaccio/verdaccio:5.x-next
 ```
 
 ### Running verdaccio using Docker
@@ -145,14 +174,14 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 - Unpublishing packages (npm unpublish) - **supported**
 - Tagging (npm tag) - **supported**
-- Deprecation (npm deprecate) - not supported - *PR-welcome*
+- Deprecation (npm deprecate) - **supported**
 
 ### User management
 
 - Registering new users (npm adduser {newuser}) - **supported**
 - Change password (npm profile set password)  - **supported**
 - Transferring ownership (npm owner add {user} {pkg}) - not supported, *PR-welcome*
-- Token (npm token) - wip [#1271](https://github.com/verdaccio/verdaccio/pull/1271)
+- Token (npm token) - (more info [#1427](https://github.com/verdaccio/verdaccio/pull/1427)) - **supported**
 
 ### Miscellany
 
@@ -170,34 +199,40 @@ If you want to report a security vulnerability, please follow the steps which we
 
 ## Core Team
 
-The core team is the responsable for drive this project, team is ordered by antiquity and areas of responsability.
+The core team is responsible for driving this project ahead, team is ordered by antiquity and areas of responsibility.
 
-|  [Juan Picado](https://github.com/juanpicado) |  [Ayush Sharma](https://github.com/ayusharma)  | [Sergio Hg](https://github.com/sergiohgz)  |  [Priscila Oliveria](https://github.com/priscilawebdev) | 
-|---|---|---|---|
-| ![jotadeveloper](https://avatars3.githubusercontent.com/u/558752?s=120&v=4)   | ![ayusharma](https://avatars2.githubusercontent.com/u/6918450?s=120&v=4)     | ![sergiohgz](https://avatars2.githubusercontent.com/u/14012309?s=120&v=4)       | ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=120&v=4) | 
-| [@jotadeveloper](https://twitter.com/jotadeveloper)  | [@ayusharma_](https://twitter.com/ayusharma_) | [@sergiohgz](https://twitter.com/sergiohgz)  | [@priscilawebdev](https://twitter.com/priscilawebdev) |
-| All areas  |  All areas | Docker,Builds,Stack |  UI, Stack  | 
+|  [Juan Picado](https://github.com/juanpicado) |  [Ayush Sharma](https://github.com/ayusharma)  | [Sergio Hg](https://github.com/sergiohgz)  |
+|---|---|---|
+| ![jotadeveloper](https://avatars3.githubusercontent.com/u/558752?s=120&v=4)  | ![ayusharma](https://avatars2.githubusercontent.com/u/6918450?s=120&v=4)     | ![sergiohgz](https://avatars2.githubusercontent.com/u/14012309?s=120&v=4) |
+| [@jotadeveloper](https://twitter.com/jotadeveloper)  | [@ayusharma_](https://twitter.com/ayusharma_) | [@sergiohgz](https://twitter.com/sergiohgz)  |
+| All areas  |  All areas | Docker,Builds,Stack, Monorepo |
+| [Priscila Oliveria](https://github.com/priscilawebdev) | [Daniel Ruf](https://github.com/DanielRuf) |
+| ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=120&v=4) | ![DanielRuf](https://avatars3.githubusercontent.com/u/827205?s=120&v=4) |
+| [@priscilawebdev](https://twitter.com/priscilawebdev) | [@DanielRufde](https://twitter.com/DanielRufde) |
+| UI, Stack  | All areas  |
 
 You can find and chat with then over Discord, click [here](http://chat.verdaccio.org) or follow them at *Twitter*.
 
 ## Who is using Verdaccio?
 
-* [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#contributing-to-e2e-end-to-end-tests) *(+67k ⭐️)*
-* [Storybook](https://github.com/storybooks/storybook) *(+37k ⭐️)*
-* [Gatsby](https://github.com/gatsbyjs/gatsby) *(+34k ⭐️)* 
-* [Uppy](https://github.com/transloadit/uppy) *(+19k ⭐️)*
-* [Aurelia Framework](https://github.com/aurelia) *(+11k ⭐️)*
-* [bit](https://github.com/teambit/bit) *(+6k ⭐️)*
-* [pnpm](https://github.com/pnpm/pnpm) *(+5k ⭐️)*
-* [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) *(+3k ⭐️)*
-* [Hyperledger Composer](https://github.com/hyperledger/composer) *(+1.6k ⭐️)*
-* [webiny-js](https://github.com/Webiny/webiny-js) *(+1k ⭐️)*
+* [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#customizing-e2e-registry-configuration) *(+86.2k ⭐️)*
+* [Gatsby](https://github.com/gatsbyjs/gatsby) *(+49.2k ⭐️)*
+* [Babel.js](https://github.com/babel/babel) *(+38.5k ⭐️)*
+* [Vue CLI](https://github.com/vuejs/vue-cli) *(+27.4k ⭐️)*
+* [Angular CLI](https://github.com/angular/angular-cli) *(+24.3k ⭐️)*
+* [Uppy](https://github.com/transloadit/uppy) *(+23.8k ⭐️)*
+* [bit](https://github.com/teambit/bit) *(+13k ⭐️)*
+* [Aurelia Framework](https://github.com/aurelia/framework) *(+11.6k ⭐️)*
+* [pnpm](https://github.com/pnpm/pnpm) *(+10.1k ⭐️)*
+* [ethereum/web3.js](https://github.com/ethereum/web3.js) *(+9.8k ⭐️)*
+* [NX](https://github.com/nrwl/nx) *(+6.1k ⭐️)*
+* [webiny-js](https://github.com/webiny/webiny-js) *(+4.3k ⭐️)*
+* [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) *(+3.7k ⭐️)*
+* [workshopper how to npm](https://github.com/workshopper/how-to-npm) *(+1k ⭐️)*
+* [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
+* [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)
 
-🤓 Don't be shy, you also can be in [the list](https://github.com/verdaccio/website/blob/master/docs/who-is-using.md). 
-
-## Sponsorship
-
-If you are a *company/project* and you 😍 Verdaccio and FOSS, your **logo can be here** 😉 if you support our activities. [Donate](https://opencollective.com/verdaccio).
+🤓 Don't be shy, you also can be in [the list](https://github.com/verdaccio/website/blob/master/docs/who-is-using.md).
 
 ## Open Collective Sponsors
 
@@ -226,13 +261,14 @@ Thanks to the following companies to help us to achieve our goals providing free
 
 [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)
 [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)
+[![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)
 [![balsamiq](assets/thanks/balsamiq/logo.jpg)](https://balsamiq.com/)
 
 ## Contributors
 
 This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
 
-[![contrubitors](https://opencollective.com/verdaccio/contributors.svg?width=890&button=true)](../../graphs/contributors)
+[![contributors](https://opencollective.com/verdaccio/contributors.svg?width=890&button=true)](../../graphs/contributors)
 
 ### FAQ / Contact / Troubleshoot
 
@@ -253,4 +289,4 @@ If you have any issue you can try the following options, do no desist to ask or
 Verdaccio is [MIT licensed](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
 
 The Verdaccio documentation and logos (excluding /thanks, e.g., .md, .png, .sketch)  files within the /assets folder) is
- [Creative Commons licensed](https://github.com/verdaccio/verdaccio/blob/master/LICENSE-docs).
+ [Creative Commons licensed](https://creativecommons.org/licenses/by/4.0/).

SECURITY.md

@@ -1,30 +1,77 @@
 # Security Policy
 
-## Supported Versions
+## Supported versions
 
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
+The following table describes the versions of this project that are currently supported with security updates:
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 2.x   | :x:                |
-| 3.x   | :white_check_mark: |
-| 4.x   | :white_check_mark: |
+| 2.x   | :x:                  |
+| 3.x   | :x:   |
+| 4.x   | :white_check_mark: (until 1st July 2021)  |
+| 5.x   | :white_check_mark:   |
 
-## Reporting a Vulnerability
 
-At Verdaccio, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present. If you've discovered a vulnerability, please follow the guidelines below to report it to our team:
+## Responsible disclosure security policy
 
-* Report it either [Snyk Security Team](https://snyk.io/vulnerability-disclosure/) or [npmjs Security Team](https://www.npmjs.com/advisories/report?package=verdaccio), they will be in contact with us in case of confirming the vulnerability.
-* E-mail your findings to [verdaccio@pm.me](mailto:verdaccio@pm.me). If the report contains highly sensitive information, please consider encrypting your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc).
+A responsible disclosure policy helps protect users of the project from publicly disclosed security vulnerabilities without a fix by employing a process where vulnerabilities are first triaged in a private manner, and only publicly disclosed after a reasonable time period that allows patching the vulnerability and provides an upgrade path for users.
 
-Please follow these rules when testing/reporting vulnerabilities:
-* Do not take advantage of the vulnerability you have discovered, for example by downloading more data than is necessary to demonstrate the vulnerability.
-* Do not read, modify or delete data that isn't your own.
-* We ask that you do not disclose the findings to third parties until it has been resolved.
+When contacting us directly via email, we will do our best efforts to respond in a reasonable time to resolve the issue. When contacting a security program their disclosure policy will provide details on timeframe, processes and paid bounties.
 
-What we promise:
-* We will respond to your report within 3 business days with our evaluation of the report and an expected resolution date.
-* We will keep you informed during all stages of resolving the problem.
-* To show our appreciation for your effort and cooperation during the report, we will list your name and a link to a personal website/social network profile on the page below so that the public can know you've helped keep Verdaccio secure.
+We kindly ask you to refrain from malicious acts that put our users, the project, or any of the project’s team members at risk.
 
+## Reporting a security issue
+
+> Please do not use the provided email address to report issues which are not related to security vulnerabilities
+
+At Verdaccio, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present.
+
+If you discover a security vulnerability, please use one of the following means of communications to report it to us:
+
+* Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
+
+Note that time-frame and processes are subject to each program’s own policy.
+
+* Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
+
+Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
+
+## PGP key
+
+The following is this project’s PGP key which should be used to encrypt any sensitive information shared on unsecured medium such as e-mails:
+
+```
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: OpenPGP.js v4.5.1
+Comment: https://openpgpjs.org
+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+=QWXs
+-----END PGP PUBLIC KEY BLOCK-----
+```

babel.config.js

@@ -0,0 +1,22 @@
+module.exports = {
+  presets: [
+    [
+      '@babel/env',
+      {
+        targets: {
+          node: '12',
+        },
+      },
+    ],
+    '@babel/typescript',
+  ],
+  plugins: [
+    'babel-plugin-dynamic-import-node',
+    '@babel/proposal-class-properties',
+    '@babel/proposal-object-rest-spread',
+    '@babel/plugin-proposal-optional-chaining',
+    '@babel/plugin-proposal-nullish-coalescing-operator',
+    '@babel/syntax-dynamic-import',
+  ],
+  ignore: ['**/*.d.ts'],
+};

codecov.yml

@@ -0,0 +1,29 @@
+codecov:
+  require_ci_to_pass: yes
+
+coverage:
+  precision: 2
+  round: down
+  range: "80...85"
+
+  status:
+    project:
+      default:
+        target: auto
+        threshold: 1%
+        base: auto
+    patch: no
+    changes: no
+
+parsers:
+  gcov:
+    branch_detection:
+      conditional: yes
+      loop: yes
+      method: no
+      macro: no
+
+comment:
+  layout: "diff,flags,tree"
+  behavior: default
+  require_changes: no

conf/README.md

@@ -4,6 +4,6 @@ This directory host the default configuration file, but you can find more here:
 
 * [https://verdaccio.org/docs/en/installation](https://verdaccio.org/docs/en/installation)
 * [Chat with us](http://chat.verdaccio.org) <- You need a Discord account
-* [Follou us on Twitter](https://twitter.com/verdaccio_npm)
+* [Follow us on Twitter](https://twitter.com/verdaccio_npm)
 
 Enjoy Verdaccio !

conf/default.yaml

@@ -17,6 +17,13 @@ web:
   # gravatar: false
   # by default packages are ordercer ascendant (asc|desc)
   # sort_packages: asc
+  # convert your UI to the dark side
+  # darkMode: true
+
+# translate your registry, api i18n not available yet
+# i18n:
+# list of the available translations https://github.com/verdaccio/ui/tree/master/i18n/translations
+#   web: en-US
 
 auth:
   htpasswd:
@@ -25,17 +32,6 @@ auth:
     # You can set this to -1 to disable registration.
     # max_users: 1000
 
-security:
-  api:
-    jwt:
-      sign:
-        expiresIn: 60d
-        notBefore: 1
-  web:
-    sign:
-      expiresIn: 7d
-      notBefore: 1
-
 # a list of other known repositories we can talk to
 uplinks:
   npmjs:
@@ -65,9 +61,9 @@ packages:
     # if package is not available locally, proxy requests to 'npmjs' registry
     proxy: npmjs
 
-# You can specify HTTP/1.1 server keep alive timeout in seconds for incomming connections.
+# You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
 # A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
-# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enought.
+# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
 server:
   keepAliveTimeout: 60
 
@@ -76,7 +72,16 @@ middlewares:
     enabled: true
 
 # log settings
-logs:
-  - { type: stdout, format: pretty, level: http }
-  #- {type: file, path: verdaccio.log, level: info}
+logs: { type: stdout, format: pretty, level: http }
 
+#experiments:
+#  # support for npm token command
+#  token: false
+#  # support for the new v1 search endpoint, functional by incomplete read more on ticket 1732
+#  search: false
+#  # disable writing body size to logs, read more on ticket 1912
+#  bytesin_off: false
+
+# This affect the web and api (not developed yet)
+#i18n:
+#web: en-US

conf/docker.yaml

@@ -23,6 +23,12 @@ web:
   # gravatar: false
   # by default packages are ordercer ascendant (asc|desc)
   # sort_packages: asc
+  # darkMode: true
+
+# translate your registry, api i18n not available yet
+# i18n:
+# list of the available translations https://github.com/verdaccio/ui/tree/master/i18n/translations
+#   web: en-US
 
 auth:
   htpasswd:
@@ -31,17 +37,6 @@ auth:
     # You can set this to -1 to disable registration.
     # max_users: 1000
 
-security:
-  api:
-    jwt:
-      sign:
-        expiresIn: 60d
-        notBefore: 1
-  web:
-    sign:
-      expiresIn: 7d
-      notBefore: 1
-
 # a list of other known repositories we can talk to
 uplinks:
   npmjs:
@@ -71,11 +66,25 @@ packages:
     # if package is not available locally, proxy requests to 'npmjs' registry
     proxy: npmjs
 
+# You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
+# A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
+# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
+server:
+  keepAliveTimeout: 60
+
 middlewares:
   audit:
     enabled: true
 
 # log settings
-logs:
-  - { type: stdout, format: pretty, level: http }
-  #- {type: file, path: verdaccio.log, level: info}
+logs: { type: stdout, format: pretty, level: http }
+
+#experiments:
+#  # support for npm token command
+#  token: false
+#  # support for the new v1 search endpoint, functional by incomplete read more on ticket 1732
+#  search: false
+
+# This affect the web and api (not developed yet)
+#i18n:
+#web: en-US

contrib/aws/cloudformation-ec2-efs.yaml

@@ -22,11 +22,6 @@ Parameters:
     Description: >
       The route 53 hosted zone name to create the `npm.<zone>` record in. Do not
       include the trailing dot!
-  Route53RecordHostedZoneId:
-    Type: String
-    Description: >
-      Hosted Zone ID for the load balancer. Find it here:
-      https://docs.aws.amazon.com/general/latest/gr/rande.html
   Vpc:
     Type: AWS::EC2::VPC::Id
     Description: VPC to create this stack inside
@@ -159,7 +154,7 @@ Resources:
             mount -a -t efs defaults
 
             # Create/update the config & password files.
-            mkdir "$BASE/conf"
+            [[ -d "$BASE/conf" ]] || mkdir "$BASE/conf"
             curl -o "$BASE/conf/htpasswd" "${VerdaccioHtpasswdUrl}"
             curl -o "$BASE/conf/config.yaml" "${VerdaccioConfigUrl}"
 
@@ -261,7 +256,9 @@ Resources:
             - Lb
             - DNSName
         HostedZoneId:
-          Ref: Route53RecordHostedZoneId
+          Fn::GetAtt:
+            - Lb
+            - CanonicalHostedZoneID
       HostedZoneName:
         Fn::Sub: ${DnsHostedZoneName}.
       Name:

debug/bootstrap.js

@@ -1,4 +1,6 @@
 // this file aims to help local debugging with hot transpilation
 // it requires BABEL_ENV=registry set as env variable
-require('@babel/register')();
+require('@babel/register')({
+	extensions: [".ts", ".js"]
+});
 require('../src/lib/cli');

docker-examples/README.md

@@ -0,0 +1,51 @@
+# Docker + Kubernetes Examples
+
+This folder aims to create a collection of Docker and Kubernetes examples.
+
+For more information about the **Helm** Chart, please check it [owns repo](https://github.com/verdaccio/charts).
+
+> Feel free to contribute whether you consider any use case is relevant for the public in general.
+
+## Examples
+
+The following examples aim to be demonstrative and can be either improved or updated.
+
+### Verdaccio 4
+
+#### Proxies
+
+- [Docker + Apache + Verdaccio](v4/apache-verdaccio/README.md)
+- [Docker + Nginx + Verdaccio](v4/reverse_proxy/nginx/README.md)
+- [Docker + https-portal Example](v4/https-portal-example/README.md)
+
+#### Plugins
+
+- [Docker + Uplinks Multi Registry](v4/multi-registry-uplink/README.md)
+- [Docker + Local Storage](v4/docker-local-storage-volume/readme.md)
+- [Docker + External Plugins](v4/docker-plugin-external/README.md)
+
+#### Auth
+
+- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](v4/ldap-verdaccio/readme.md) by **@kopax**
+- [Docker + Gitlab](gitlab-verdaccio/README.md)
+- [Docker + Active Directory](https://github.com/Mateus-Oli/verdaccio-ad-docker)
+
+#### Storage
+
+- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](v4/amazon-s3-docker-example/v4/README.md)
+- [Docker + Minio](https://github.com/barolab/verdaccio-minio/tree/master/example)
+
+### Kubernetes
+
+- Kubernetes (minikube) + Verdaccio (Basic Configuration)
+- Kubernetes Helm and Verdaccio Chart (Basic Tutorial)
+
+### External
+
+- [
+  Verdaccio examples for Google Cloud and K8s setups. https://github.com/papezt/verdaccio-examples](https://github.com/papezt/verdaccio-examples)
+
+### Articles
+
+- [https://medium.com/@tompape/kubernetes-private-npm-registry-fb5f450fa611](https://medium.com/@tompape/kubernetes-private-npm-registry-fb5f450fa611)
+- [Déployer Verdaccio sur rancher avec un helm](https://tommygingras.com/deployer-verdaccio-sur-rancher-avec-un-helm/)

docker-examples/v4/amazon-s3-docker-example/README.md

@@ -0,0 +1,13 @@
+# Amazon S3 Bucket (Localstack) and Verdaccio 4.x
+
+Verdaccio running with [Localstack](https://github.com/localstack/localstack) provides an easy-to-use test/mocking framework for developing cloud applications (AWS S3 in our example).
+
+## Usage
+
+```
+docker-compose up --force-recreate --build --always-recreate-deps
+```
+
+## Articles
+
+- [How to fake AWS locally with LocalStack](https://dev.to/goodidea/how-to-fake-aws-locally-with-localstack-27me)

docker-examples/v4/amazon-s3-docker-example/conf/config.yaml

@@ -0,0 +1,29 @@
+storage: /verdaccio/storage
+
+store:
+  aws-s3-storage:
+    bucket: localstack.s3.plugin.test
+    keyPrefix: docker-test-prefix
+    region: eu-west-2
+    endpoint: http://localstack-s3:4572
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@*/*':
+    # scoped packages
+    access: $all
+    publish: $all
+    proxy: npmjs
+  '**':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+logs:
+  - { type: stdout, format: pretty, level: trace }
+
+listen:
+  - 0.0.0.0:4873

docker-examples/v4/amazon-s3-docker-example/docker-compose.yaml

@@ -0,0 +1,58 @@
+version: '2.1'
+
+services:
+  aws-resources:
+    build: localStack-resources/
+    environment:
+      - AWS_ACCESS_KEY_ID=foobar
+      - AWS_SECRET_ACCESS_KEY=foobar
+      - AWS_DEFAULT_REGION=eu-west-2
+      - AWS_S3_ENDPOINT=http://localstack-s3:4572
+    depends_on:
+      localstack-s3:
+        condition: service_healthy
+    links:
+      - localstack-s3
+  localstack-s3:
+    image: localstack/localstack:latest
+    container_name: localstack-s3-1
+    environment:
+      - DEBUG=0
+      - SERVICES=s3
+      - DEFAULT_REGION=eu-west-2
+      - DATA_DIR=/tmp/localstack/data
+    ports:
+      - '4572:4572'
+      - '9999:8080'
+    healthcheck:
+      test: ['CMD', 'curl', '-f', 'http://localhost:4572']
+      interval: 15s
+      timeout: 10s
+      retries: 4
+    volumes:
+      - localstack-data:/tmp/localstack
+  verdaccio:
+    container_name: verdaccio-s3-plugin
+    build: s3Plugin/
+    environment:
+      - AWS_ACCESS_KEY_ID=foobar
+      - AWS_SECRET_ACCESS_KEY=foobar
+      - AWS_DEFAULT_REGION=eu-west-2
+      - AWS_S3_ENDPOINT=http://localstack-s3:4572
+      - AWS_S3_PATH_STYLE=true
+    ports:
+      - '4874:4873'
+    volumes:
+      - './conf:/verdaccio/conf'
+    depends_on:
+      localstack-s3:
+        condition: service_healthy
+    links:
+      - localstack-s3
+volumes:
+  verdaccio:
+    driver: local
+  aws-resources:
+    driver: local
+  localstack-data:
+    name: localstack-data

docker-examples/v4/amazon-s3-docker-example/localStack-resources/Dockerfile

@@ -0,0 +1,10 @@
+FROM python:2.7
+
+ENV AWS_ACCESS_KEY_ID='[something]'
+ENV AWS_SECRET_ACCESS_KEY='[something]'
+ENV AWS_S3_ENDPOINT='http://localstack-s3:4572'
+
+RUN pip install awscli
+COPY entry.sh /entry.sh
+RUN chmod +x /entry.sh
+ENTRYPOINT ["/entry.sh"]

docker-examples/v4/amazon-s3-docker-example/localStack-resources/entry.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+aws --endpoint-url http://localstack-s3:4572 s3 mb s3://localstack.s3.plugin.test --region eu-west-2

docker-examples/v4/amazon-s3-docker-example/s3Plugin/Dockerfile

@@ -0,0 +1,15 @@
+FROM verdaccio/verdaccio:4
+
+USER root
+
+ENV NODE_ENV=production
+
+## perhaps all of this is not fully required
+RUN apk --no-cache add openssl ca-certificates wget && \
+    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
+    wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
+    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
+    apk add glibc-2.25-r0.apk
+
+RUN npm i && npm install verdaccio-aws-s3-storage
+USER verdaccio

docker-examples/v4/apache-verdaccio/README.md

@@ -0,0 +1,93 @@
+# Verdaccio and Apache2
+
+Running `verdaccio` via reverse proxy is a common practice. This configuration provides a quick way to run the application through **apache2** as reverse proxy.
+
+To run the containers, run the following command in this folder, it should start the containers in detach mode.
+
+```bash
+ docker-compose up -d
+```
+
+To recreate the nginx image you can force the build.
+
+```bash
+ docker-compose up --build -d
+
+ Building apacheproxy
+Step 1/5 : FROM eboraas/apache
+ ---> 1ba66e3f5580
+Step 2/5 : MAINTAINER Juan Picado <juanpicado19@gmail.com>
+ ---> Using cache
+ ---> 4317b29c20ec
+Step 3/5 : RUN a2enmod proxy
+ ---> Using cache
+ ---> b9334b33e2f1
+Step 4/5 : COPY ./conf/000-default.conf /etc/apache2/sites-enabled/000-default.conf
+ ---> Using cache
+ ---> 6d464388db8f
+Step 5/5 : COPY ./conf/env.load /etc/apache2/mods-enabled/env.load
+ ---> Using cache
+ ---> 66740b6ffb97
+Successfully built 66740b6ffb97
+Recreating verdaccio
+Recreating apacheverdaccio_apacheproxy_1
+```
+
+To force recreate the images.
+
+```bash
+docker-compose up --build --force-recreate -d
+```
+
+To stop all containers
+
+```bash
+docker-compose stop
+```
+
+To display container logs
+
+```bash
+$> docker-compose logs
+Attaching to apacheverdaccio_apacheproxy_1, verdaccio
+verdaccio    |  warn --- config file  - /verdaccio/conf/config.yaml
+verdaccio    |  warn --- http address - http://0.0.0.0:4873/ - verdaccio/2.1.7
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /', bytes: 0/0
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /-/static/jquery.min.js', bytes: 0/0
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /-/static/main.css', bytes: 0/0
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /-/static/main.js', bytes: 0/0
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /-/logo', bytes: 0/0
+verdaccio    |  http <-- 304, user: undefined, req: 'GET /-/static/fontello.woff?10872183', bytes: 0/0
+verdaccio    |  http <-- 200, user: undefined, req: 'GET /-/static/favicon.png', bytes: 0/315
+```
+
+To access the apache logs
+
+```bash
+&> docker exec -it {ID} /bin/bash
+
+root@da8ee3cb484c:~# tail -f /var/log/apache2/verdaccio-access.log
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /xmlhttprequest-ssl HTTP/1.1" 200 2616 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /yeast HTTP/1.1" 200 2706 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /has-cors HTTP/1.1" 200 1347 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /parsejson HTTP/1.1" 200 1234 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /better-assert HTTP/1.1" 200 2462 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /callsite HTTP/1.1" 200 1369 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /dot-access HTTP/1.1" 200 1477 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /skipper-disk HTTP/1.1" 200 3801 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /native-or-bluebird HTTP/1.1" 200 2257 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+172.20.0.1 - - [31/May/2017:21:16:37 +0000] "GET /foreachasync HTTP/1.1" 200 2742 "install sails" "npm/5.0.0 node/v4.6.1 darwin x64"
+tail: unrecognized file system type 0x794c7630 for '/var/log/apache2/verdaccio-access.log'. please report this to bug-coreutils@gnu.org. reverting to polling
+```
+
+### Display Information
+
+To display the containers running
+
+```bash
+&> docker-compose ps
+            Name                           Command               State              Ports
+----------------------------------------------------------------------------------------------------
+apacheverdaccio_apacheproxy_1   /usr/sbin/apache2ctl -D FO ...   Up      443/tcp, 0.0.0.0:80->80/tcp
+verdaccio                       /usr/src/app/bin/verdaccio ...   Up      0.0.0.0:4873->4873/tcp
+```

docker-examples/v4/apache-verdaccio/apache_proxy/Dockerfile

@@ -0,0 +1,6 @@
+FROM eboraas/apache
+MAINTAINER Juan Picado <juanpicado19@gmail.com>
+# http://pierrecaserta.com/apache-proxy-one-docker-server-many-domains/
+RUN a2enmod proxy
+COPY ./conf/000-default.conf /etc/apache2/sites-enabled/000-default.conf
+COPY ./conf/env.load /etc/apache2/mods-enabled/env.load

docker-examples/v4/apache-verdaccio/apache_proxy/conf/000-default.conf

@@ -0,0 +1,17 @@
+ServerName localhost:80
+ServerAdmin admin@localhost
+
+<VirtualHost *:80>
+    ServerName localhost
+    <Proxy *>
+        Allow from localhost
+    </Proxy>
+    SSLProxyEngine          On
+    ProxyRequests           Off
+    ProxyPreserveHost       On
+    AllowEncodedSlashes     NoDecode
+    ProxyPass               /       http://verdaccio:4873/ nocanon
+    ProxyPassReverse        /       http://verdaccio:4873/
+    CustomLog /var/log/apache2/verdaccio-access.log combined
+    ErrorLog /var/log/apache2/verdaccio-error.log
+</VirtualHost>

docker-examples/v4/apache-verdaccio/apache_proxy/conf/env.load

@@ -0,0 +1,4 @@
+LoadModule env_module /usr/lib/apache2/modules/mod_env.so
+LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
+LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
+LoadModule socache_shmcb_module /usr/lib/apache2/modules/mod_socache_shmcb.so

docker-examples/v4/apache-verdaccio/docker-compose.yaml

@@ -0,0 +1,23 @@
+version: '2'
+
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:latest
+    container_name: verdaccio
+    ports:
+      - '4873:4873'
+    volumes:
+      - verdaccio:/verdaccio
+
+  apacheproxy:
+    build: apache_proxy/
+    links:
+      - verdaccio
+    ports:
+      - '80:80'
+    volumes_from:
+      - verdaccio
+
+volumes:
+  verdaccio:
+    driver: local

docker-examples/v4/docker-local-storage-volume/conf/config.yaml

@@ -0,0 +1,71 @@
+#
+# This is the config file used for the docker images.
+# It allows all users to do anything, so don't use it on production systems.
+#
+# Do not configure host and port under `listen` in this file
+# as it will be ignored when using docker.
+# see https://github.com/verdaccio/verdaccio/blob/master/wiki/docker.md#docker-and-custom-port-configuration
+#
+# Look here for more config file examples:
+# https://github.com/verdaccio/verdaccio/tree/master/conf
+#
+
+# path to a directory with all packages
+storage: /verdaccio/storage
+
+auth:
+  htpasswd:
+    file: /verdaccio/conf/htpasswd
+    # Maximum amount of users allowed to register, defaults to "+inf".
+    # You can set this to -1 to disable registration.
+    #max_users: 1000
+security:
+  api:
+    jwt:
+      sign:
+        expiresIn: 60d
+        notBefore: 1
+  web:
+    sign:
+      expiresIn: 7d
+
+# a list of other known repositories we can talk to
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@jota/*':
+    access: $all
+    publish: $all
+
+  '@*/*':
+    # scoped packages
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+  '**':
+    # allow all users (including non-authenticated users) to read and
+    # publish all packages
+    #
+    # you can specify usernames/groupnames (depending on your auth plugin)
+    # and three keywords: "$all", "$anonymous", "$authenticated"
+    access: $all
+
+    # allow all known users to publish packages
+    # (anyone can register by default, remember?)
+    publish: $all
+
+    # if package is not available locally, proxy requests to 'npmjs' registry
+    proxy: npmjs
+
+# To use `npm audit` uncomment the following section
+middlewares:
+  audit:
+    enabled: true
+
+# log settings
+logs:
+  - { type: stdout, format: pretty, level: trace }
+  #- {type: file, path: verdaccio.log, level: info}

docker-examples/v4/docker-local-storage-volume/conf/htpasswd

@@ -0,0 +1 @@
+jpicado:$6vkdNgRX2npc:autocreated 2017-07-11T18:48:38.003Z

docker-examples/v4/docker-local-storage-volume/docker-compose.yaml

@@ -0,0 +1,13 @@
+version: '2.1'
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:4
+    container_name: verdaccio-docker-local-storage-vol
+    ports:
+      - '4873:4873'
+    volumes:
+      - './storage:/verdaccio/storage'
+      - './conf:/verdaccio/conf'
+volumes:
+  verdaccio:
+    driver: local

docker-examples/v4/docker-local-storage-volume/readme.md

@@ -0,0 +1,31 @@
+# Verdaccio and simple local storage
+
+This example shows a simple configuration for `verdaccio` plus the default local storage with the minimum configuration required using `docker-compose`.
+
+Contains
+
+- conf: Configuration file and default user httpasswd
+- storage: A published default package with 2 versions.
+
+```bash
+$> docker-compose up
+```
+
+## Login
+
+If you want to login into the Verdaccio instance created via these Docker Examples, please try:
+
+Username: jpicado
+Password: jpicado
+
+## Running in Dokku
+
+If you use Dokku, an open-source alternative for Heroku, you can run this example using the following steps:
+
+1. Create a new application `dokku apps:create verdaccio`
+2. Pull the verdaccio image `docker pull verdaccio/verdaccio:`
+3. Tag the docker image for the app: `docker tag verdaccio/verdaccio:4 dokku/verdaccio:v1`
+4. Create the directories for persistent storage `mkdir -p /var/lib/dokku/data/storage/verdaccio/storage`, `mkdir -p /var/lib/dokku/data/storage/verdaccio/storage`
+5. Mount the volumes: `dokku storage:mount verdaccio /var/lib/dokku/data/storage/verdaccio/storage:/verdaccio/storage` and `dokku storage:mount verdaccio /var/lib/dokku/data/storage/verdaccio/conf:/verdaccio/conf`
+6. Deploy the docker image `dokku tags:deploy verdaccio v1`
+7. Enjoy the application

docker-examples/v4/docker-local-storage-volume/storage/@jota/pk1-juan-1/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@jota/pk1-juan-1",
+  "versions": {
+    "1.0.0": {
+      "name": "@jota/pk1-juan-1",
+      "version": "1.0.0",
+      "description": "Simple React Webpack Babel Starter Kit",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": {
+        "name": "Juan Picado",
+        "email": "juan@jotadeveloper.com"
+      },
+      "license": "ISC",
+      "dependencies": {
+        "angular": "^1.6.8",
+        "angular2": "^2.0.0-beta.21",
+        "babel-core": "^6.26.0",
+        "babel-env": "^2.4.1",
+        "jquery": "^3.2.1",
+        "react": "^16.2.0",
+        "test_npm_18": "^1.0.1",
+        "typescript": "^2.6.2",
+        "verdaccio": "^2.7.2",
+        "verdaccio-memory": "0.0.3",
+        "webpack": "^3.10.0"
+      },
+      "readmeFilename": "README.md",
+      "_id": "@jota/pk1-juan-1@1.0.0",
+      "_npmVersion": "5.5.1",
+      "_nodeVersion": "8.7.0",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-aKXCuBayXFdSVt4+94B7lqvsPsM0KIsIcXvc7Ghkir3OsE6FQl2bXBBWe6deNuTwJihsFvDbCDiMq+0TIUENBQ==",
+        "shasum": "faf627d746ce7c670aed088b761960716e68e186",
+        "tarball": "http://0.0.0.0:4873/@jota/pk1-juan-1/-/@jota/pk1-juan-1-1.0.0.tgz"
+      }
+    }
+  },
+  "dist-tags": {
+    "latest": "1.0.0"
+  },
+  "time": {
+    "modified": "2018-01-17T18:32:18.049Z",
+    "created": "2018-01-17T18:32:18.049Z",
+    "1.0.0": "2018-01-17T18:32:18.049Z"
+  },
+  "_distfiles": {},
+  "_attachments": {
+    "pk1-juan-1-1.0.0.tgz": {
+      "shasum": "faf627d746ce7c670aed088b761960716e68e186",
+      "version": "1.0.0"
+    }
+  },
+  "_uplinks": {},
+  "_rev": "3-5cf06458deec6f04",
+  "readme": "# react-webpack-babel\nSimple React Webpack Babel Starter Kit\n\nTired of complicated starters with 200MB of dependencies which are hard to understand and modify?\n\nTry this is a simple [React](https://facebook.github.io/react/), [Webpack](http://webpack.github.io/) and [Babel](https://babeljs.io/) application with nothing else in it.\n\n### What's in it?\n\n* Simple src/index.jsx and src/index.css (local module css).\n* Webpack configuration for development (with hot reloading) and production (with minification).\n* CSS module loading, so you can include your css by ```import styles from './path/to.css';```.\n* Both js(x) and css hot loaded during development.\n* [Webpack Dashboard Plugin](https://github.com/FormidableLabs/webpack-dashboard) on dev server.\n\n### To run\n\n* You'll need to have [git](https://git-scm.com/) and [node](https://nodejs.org/en/) installed in your system.\n* Fork and clone the project:\n\n```\ngit clone https://github.com/alicoding/react-webpack-babel.git\n```\n\n* Then install the dependencies:\n\n```\nnpm install\n```\n\n* Run development server:\n\n```\nnpm start\n```\n\n* Or you can run development server with [webpack-dashboard](https://github.com/FormidableLabs/webpack-dashboard):\n\n```\nnpm run dev\n```\n\nOpen the web browser to `http://localhost:8888/`\n\n### To build the production package\n\n```\nnpm run build\n```\n\n### Nginx Config\n\nHere is an example Nginx config:\n```\nserver {\n\t# ... root and other options\n\n\tgzip on;\n\tgzip_http_version 1.1;\n\tgzip_types text/plain text/css text/xml application/javascript image/svg+xml;\n\n\tlocation / {\n\t\ttry_files $uri $uri/ /index.html;\n\t}\n\n\tlocation ~ \\.html?$ {\n\t\texpires 1d;\n\t}\n\n\tlocation ~ \\.(svg|ttf|js|css|svgz|eot|otf|woff|jpg|jpeg|gif|png|ico)$ {\n\t\taccess_log off;\n\t\tlog_not_found off;\n\t\texpires max;\n\t}\n}\n```\n\n### Eslint\nThere is a .eslint.yaml config for eslint ready with React plugin.\nTo use it, you need to install additional dependencies though:\n\n```\nnpm install --save-dev eslint eslint-plugin-react\n```\n\nTo do the actual linting, run:\n\n```\nnpm run lint\n```\n\n### Notes on importing css styles\n* styles having /src/ in their absolute path are considered part of the application and exported as local css modules.\n* other styles are considered global styles used by many components and are included in the css bundle directly.\n\n### Contribute\nPlease contribute to the project if you know how to make it better, including this README :)"
+}

docker-examples/v4/docker-local-storage-volume/storage/@jota/pk1-juan/package.json

@@ -0,0 +1,105 @@
+{
+  "name": "@jota/pk1-juan",
+  "versions": {
+    "1.0.0": {
+      "name": "@jota/pk1-juan",
+      "version": "1.0.0",
+      "description": "Simple React Webpack Babel Starter Kit",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": {
+        "name": "Juan Picado",
+        "email": "juan@jotadeveloper.com"
+      },
+      "license": "ISC",
+      "dependencies": {
+        "angular": "^1.6.8",
+        "angular2": "^2.0.0-beta.21",
+        "babel-core": "^6.26.0",
+        "babel-env": "^2.4.1",
+        "jquery": "^3.2.1",
+        "react": "^16.2.0",
+        "test_npm_18": "^1.0.1",
+        "typescript": "^2.6.2",
+        "verdaccio": "^2.7.2",
+        "verdaccio-memory": "0.0.3",
+        "webpack": "^3.10.0"
+      },
+      "readmeFilename": "README.md",
+      "_id": "@jota/pk1-juan@1.0.0",
+      "_npmVersion": "5.5.1",
+      "_nodeVersion": "8.7.0",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-JC4y+iHrUpD+li3Pf9z2oFxw2Mtbqi6vgnIDBB3H/P/t0gAuCKK/LJ86kV7TRyvQwVvyJk1qI61iOVLiMwjZ8Q==",
+        "shasum": "95a21c648054c7144a23995a519930255f35b6c2",
+        "tarball": "http://0.0.0.0:4873/@jota/pk1-juan/-/@jota/pk1-juan-1.0.0.tgz"
+      }
+    },
+    "1.0.1": {
+      "name": "@jota/pk1-juan",
+      "version": "1.0.1",
+      "description": "Simple React Webpack Babel Starter Kit",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": {
+        "name": "Juan Picado",
+        "email": "juan@jotadeveloper.com"
+      },
+      "license": "ISC",
+      "dependencies": {
+        "angular": "^1.6.8",
+        "angular2": "^2.0.0-beta.21",
+        "babel-core": "^6.26.0",
+        "babel-env": "^2.4.1",
+        "jquery": "^3.2.1",
+        "react": "^16.2.0",
+        "test_npm_18": "^1.0.1",
+        "typescript": "^2.6.2",
+        "verdaccio": "^2.7.2",
+        "verdaccio-memory": "0.0.3",
+        "webpack": "^3.10.0"
+      },
+      "readmeFilename": "README.md",
+      "_id": "@jota/pk1-juan@1.0.1",
+      "_npmVersion": "5.5.1",
+      "_nodeVersion": "8.7.0",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-copZNn2mMX8S3W9czxd3GXKj8vKu1v7JrUD9zOtriP8v9AvZOHIt6nW8+1114cumNGukFxjBO+2VlZC793ynTA==",
+        "shasum": "ed59869c54d1bec7bc19732c4c23c97633ea30e2",
+        "tarball": "http://0.0.0.0:4873/@jota/pk1-juan/-/@jota/pk1-juan-1.0.1.tgz"
+      }
+    }
+  },
+  "dist-tags": {
+    "latest": "1.0.0",
+    "beta2": "1.0.1"
+  },
+  "time": {
+    "modified": "2018-01-17T18:49:09.087Z",
+    "created": "2018-01-17T18:27:39.952Z",
+    "1.0.0": "2018-01-17T18:27:39.952Z",
+    "1.0.1": "2018-01-17T18:49:09.087Z"
+  },
+  "_distfiles": {},
+  "_attachments": {
+    "pk1-juan-1.0.0.tgz": {
+      "shasum": "95a21c648054c7144a23995a519930255f35b6c2",
+      "version": "1.0.0"
+    },
+    "pk1-juan-1.0.1.tgz": {
+      "shasum": "ed59869c54d1bec7bc19732c4c23c97633ea30e2",
+      "version": "1.0.1"
+    }
+  },
+  "_uplinks": {},
+  "_rev": "18-5118c5019a188840",
+  "readme": "# react-webpack-babel\nSimple React Webpack Babel Starter Kit\n\nTired of complicated starters with 200MB of dependencies which are hard to understand and modify?\n\nTry this is a simple [React](https://facebook.github.io/react/), [Webpack](http://webpack.github.io/) and [Babel](https://babeljs.io/) application with nothing else in it.\n\n### What's in it?\n\n* Simple src/index.jsx and src/index.css (local module css).\n* Webpack configuration for development (with hot reloading) and production (with minification).\n* CSS module loading, so you can include your css by ```import styles from './path/to.css';```.\n* Both js(x) and css hot loaded during development.\n* [Webpack Dashboard Plugin](https://github.com/FormidableLabs/webpack-dashboard) on dev server.\n\n### To run\n\n* You'll need to have [git](https://git-scm.com/) and [node](https://nodejs.org/en/) installed in your system.\n* Fork and clone the project:\n\n```\ngit clone https://github.com/alicoding/react-webpack-babel.git\n```\n\n* Then install the dependencies:\n\n```\nnpm install\n```\n\n* Run development server:\n\n```\nnpm start\n```\n\n* Or you can run development server with [webpack-dashboard](https://github.com/FormidableLabs/webpack-dashboard):\n\n```\nnpm run dev\n```\n\nOpen the web browser to `http://localhost:8888/`\n\n### To build the production package\n\n```\nnpm run build\n```\n\n### Nginx Config\n\nHere is an example Nginx config:\n```\nserver {\n\t# ... root and other options\n\n\tgzip on;\n\tgzip_http_version 1.1;\n\tgzip_types text/plain text/css text/xml application/javascript image/svg+xml;\n\n\tlocation / {\n\t\ttry_files $uri $uri/ /index.html;\n\t}\n\n\tlocation ~ \\.html?$ {\n\t\texpires 1d;\n\t}\n\n\tlocation ~ \\.(svg|ttf|js|css|svgz|eot|otf|woff|jpg|jpeg|gif|png|ico)$ {\n\t\taccess_log off;\n\t\tlog_not_found off;\n\t\texpires max;\n\t}\n}\n```\n\n### Eslint\nThere is a .eslint.yaml config for eslint ready with React plugin.\nTo use it, you need to install additional dependencies though:\n\n```\nnpm install --save-dev eslint eslint-plugin-react\n```\n\nTo do the actual linting, run:\n\n```\nnpm run lint\n```\n\n### Notes on importing css styles\n* styles having /src/ in their absolute path are considered part of the application and exported as local css modules.\n* other styles are considered global styles used by many components and are included in the css bundle directly.\n\n### Contribute\nPlease contribute to the project if you know how to make it better, including this README :)"
+}

docker-examples/v4/docker-local-storage-volume/storage/npm_test_pkg1/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "npm_test_pkg1",
+  "versions": {
+    "1.0.0": {
+      "name": "npm_test_pkg1",
+      "version": "1.0.0",
+      "description": "",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": "",
+      "license": "ISC",
+      "_id": "npm_test_pkg1@1.0.0",
+      "_npmVersion": "5.1.0",
+      "_nodeVersion": "4.6.1",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-qq8u/xKpYFCfmANLg5ohY4ZBkzM7NsKjIpYH+eSXji69aceMQvltRXx0O1qo7yAIORiCFsMTGLlkDCQtbhByxg==",
+        "shasum": "d058de16fdf8bde775ef2898e682faacc3eaa67f",
+        "tarball": "http://localhost:4873/npm_test_pkg1/-/npm_test_pkg1-1.0.0.tgz"
+      }
+    },
+    "1.0.1": {
+      "name": "npm_test_pkg1",
+      "version": "1.0.1",
+      "description": "",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": "",
+      "license": "ISC",
+      "_id": "npm_test_pkg1@1.0.1",
+      "_npmVersion": "5.1.0",
+      "_nodeVersion": "4.6.1",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-0YLdKRIAbZJoLpOFqXZE/JldTnGRKjIX999xV4PMJ+sUO6pWiLO8NbG4wuT5738Re3D5WTRa743y9uPvgrTD0A==",
+        "shasum": "1f6251ce59e375a6328958202ec07eb7de38dae6",
+        "tarball": "http://localhost:4873/npm_test_pkg1/-/npm_test_pkg1-1.0.1.tgz"
+      }
+    }
+  },
+  "dist-tags": {
+    "latest": "1.0.1"
+  },
+  "time": {
+    "modified": "2017-07-11T18:52:35.061Z",
+    "created": "2017-07-11T18:49:27.417Z",
+    "1.0.0": "2017-07-11T18:49:27.417Z",
+    "1.0.1": "2017-07-11T18:52:35.061Z"
+  },
+  "_distfiles": {},
+  "_attachments": {
+    "npm_test_pkg1-1.0.0.tgz": {
+      "shasum": "d058de16fdf8bde775ef2898e682faacc3eaa67f",
+      "version": "1.0.0"
+    },
+    "npm_test_pkg1-1.0.1.tgz": {
+      "shasum": "1f6251ce59e375a6328958202ec07eb7de38dae6",
+      "version": "1.0.1"
+    }
+  },
+  "_uplinks": {},
+  "_rev": "11-382567c9979db3fd",
+  "readme": "ERROR: No README data found!"
+}

docker-examples/v4/docker-local-storage-volume/storage/pk1-juan/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "pk1-juan",
+  "versions": {
+    "1.0.0": {
+      "name": "pk1-juan",
+      "version": "1.0.0",
+      "description": "Simple React Webpack Babel Starter Kit",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [],
+      "author": {
+        "name": "Juan Picado",
+        "email": "juan@jotadeveloper.com"
+      },
+      "license": "ISC",
+      "dependencies": {
+        "angular": "^1.6.8",
+        "angular2": "^2.0.0-beta.21",
+        "babel-core": "^6.26.0",
+        "babel-env": "^2.4.1",
+        "jquery": "^3.2.1",
+        "react": "^16.2.0",
+        "test_npm_18": "^1.0.1",
+        "typescript": "^2.6.2",
+        "verdaccio": "^2.7.2",
+        "verdaccio-memory": "0.0.3",
+        "webpack": "^3.10.0"
+      },
+      "readmeFilename": "README.md",
+      "_id": "pk1-juan@1.0.0",
+      "_npmVersion": "5.5.1",
+      "_nodeVersion": "8.7.0",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-K3ifqa0DEndma1RPhM83TBVISIY3wq2JdTL0GafvJno6z6JvFBp4iQgyrKn7Yjkd0J/LZ9IJvhNWsGQZuoXMPQ==",
+        "shasum": "5d670df046b9bc4bc1714efe8873a614c522e41d",
+        "tarball": "http://0.0.0.0:4873/pk1-juan/-/pk1-juan-1.0.0.tgz"
+      }
+    }
+  },
+  "dist-tags": {
+    "latest": "1.0.0"
+  },
+  "time": {
+    "modified": "2018-01-17T18:27:09.087Z",
+    "created": "2018-01-17T18:27:09.087Z",
+    "1.0.0": "2018-01-17T18:27:09.087Z"
+  },
+  "_distfiles": {},
+  "_attachments": {
+    "pk1-juan-1.0.0.tgz": {
+      "shasum": "5d670df046b9bc4bc1714efe8873a614c522e41d",
+      "version": "1.0.0"
+    }
+  },
+  "_uplinks": {},
+  "_rev": "5-e7a0e845b8b0cdc8",
+  "readme": "# react-webpack-babel\nSimple React Webpack Babel Starter Kit\n\nTired of complicated starters with 200MB of dependencies which are hard to understand and modify?\n\nTry this is a simple [React](https://facebook.github.io/react/), [Webpack](http://webpack.github.io/) and [Babel](https://babeljs.io/) application with nothing else in it.\n\n### What's in it?\n\n* Simple src/index.jsx and src/index.css (local module css).\n* Webpack configuration for development (with hot reloading) and production (with minification).\n* CSS module loading, so you can include your css by ```import styles from './path/to.css';```.\n* Both js(x) and css hot loaded during development.\n* [Webpack Dashboard Plugin](https://github.com/FormidableLabs/webpack-dashboard) on dev server.\n\n### To run\n\n* You'll need to have [git](https://git-scm.com/) and [node](https://nodejs.org/en/) installed in your system.\n* Fork and clone the project:\n\n```\ngit clone https://github.com/alicoding/react-webpack-babel.git\n```\n\n* Then install the dependencies:\n\n```\nnpm install\n```\n\n* Run development server:\n\n```\nnpm start\n```\n\n* Or you can run development server with [webpack-dashboard](https://github.com/FormidableLabs/webpack-dashboard):\n\n```\nnpm run dev\n```\n\nOpen the web browser to `http://localhost:8888/`\n\n### To build the production package\n\n```\nnpm run build\n```\n\n### Nginx Config\n\nHere is an example Nginx config:\n```\nserver {\n\t# ... root and other options\n\n\tgzip on;\n\tgzip_http_version 1.1;\n\tgzip_types text/plain text/css text/xml application/javascript image/svg+xml;\n\n\tlocation / {\n\t\ttry_files $uri $uri/ /index.html;\n\t}\n\n\tlocation ~ \\.html?$ {\n\t\texpires 1d;\n\t}\n\n\tlocation ~ \\.(svg|ttf|js|css|svgz|eot|otf|woff|jpg|jpeg|gif|png|ico)$ {\n\t\taccess_log off;\n\t\tlog_not_found off;\n\t\texpires max;\n\t}\n}\n```\n\n### Eslint\nThere is a .eslint.yaml config for eslint ready with React plugin.\nTo use it, you need to install additional dependencies though:\n\n```\nnpm install --save-dev eslint eslint-plugin-react\n```\n\nTo do the actual linting, run:\n\n```\nnpm run lint\n```\n\n### Notes on importing css styles\n* styles having /src/ in their absolute path are considered part of the application and exported as local css modules.\n* other styles are considered global styles used by many components and are included in the css bundle directly.\n\n### Contribute\nPlease contribute to the project if you know how to make it better, including this README :)"
+}

docker-examples/v4/docker-plugin-external/README.md

@@ -0,0 +1,43 @@
+# Verdaccio loading external plugins
+
+This example aims to show how to set up external plugins without the need to create a custom Docker Image.
+
+This example uses the folder `plugins/` as entry point to locate external plugins.
+
+```
+plugins: /verdaccio/plugins
+```
+
+at the same time we define the plugin we want to load `verdaccio-memory`.
+
+```
+store:
+  memory:
+    limit: 1000
+```
+
+### Prerequisites
+
+- verdaccio `>3.3.0`
+
+### Example
+
+To run the containers, run the following command in this folder, it should start the containers in detach mode.
+
+```bash
+$> docker-compose up -d
+
+Recreating verdaccio-3-docker-plugin-external ... done
+Attaching to verdaccio-3-docker-plugin-external
+verdaccio-3-docker-plugin-external |  warn --- config file  - /verdaccio/conf/config.yaml
+verdaccio-3-docker-plugin-external |  warn --- Plugin successfully loaded: memory
+verdaccio-3-docker-plugin-external |  warn --- Plugin successfully loaded: htpasswd
+verdaccio-3-docker-plugin-external |  warn --- Plugin successfully loaded: audit
+verdaccio-3-docker-plugin-external |  warn --- http address - http://0.0.0.0:4873/ - verdaccio/3.2.0
+```
+
+To stop all containers
+
+```bash
+docker-compose stop
+```

docker-examples/v4/docker-plugin-external/conf/config.yaml

@@ -0,0 +1,31 @@
+plugins: /verdaccio/plugins
+
+auth:
+  htpasswd:
+    file: /verdaccio/conf/htpasswd
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+store:
+  memory:
+    limit: 1000
+
+middlewares:
+  audit:
+    enabled: true
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+  '**':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+logs:
+  - { type: stdout, format: pretty, level: trace }

docker-examples/v4/docker-plugin-external/docker-compose.yml

@@ -0,0 +1,12 @@
+version: '2'
+
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:latest
+    container_name: verdaccio-3-docker-plugin-external
+    ports:
+      - '4873:4873'
+    volumes:
+      - './storage:/verdaccio/storage'
+      - './conf:/verdaccio/conf'
+      - './plugins:/verdaccio/plugins'

docker-examples/v4/docker-plugin-external/plugins/.eslintrc

@@ -0,0 +1,8 @@
+{
+  "rules": {
+    "max-len": 0,
+    "@typescript-eslint/prefer-optional-chain": 0,
+    "@typescript-eslint/no-unused-vars": 0,
+    "@typescript-eslint/explicit-member-accessibility": 0
+  }
+}

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', {
+  value: true,
+});
+exports.LocalMemory = undefined;
+
+let _localMemory = require('./local-memory');
+
+let _localMemory2 = _interopRequireDefault(_localMemory);
+
+function _interopRequireDefault(obj) {
+  return obj && obj.__esModule ? obj : { default: obj };
+}
+
+exports.LocalMemory = _localMemory2.default;
+exports.default = _localMemory2.default;

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/local-memory.js

@@ -0,0 +1,96 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', {
+  value: true,
+});
+
+let _memoryHandler = require('./memory-handler');
+
+let _memoryHandler2 = _interopRequireDefault(_memoryHandler);
+
+function _interopRequireDefault(obj) {
+  return obj && obj.__esModule ? obj : { default: obj };
+}
+
+const DEFAULT_LIMIT = 1000;
+
+class LocalMemory {
+  constructor(config, options) {
+    this.config = config;
+    this.limit = config.limit || DEFAULT_LIMIT;
+    this.logger = options.logger;
+    this.data = this._createEmtpyDatabase();
+  }
+
+  getSecret() {
+    return Promise.resolve(this.data.secret);
+  }
+
+  setSecret(secret) {
+    return new Promise((resolve, reject) => {
+      this.data.secret = secret;
+      resolve(null);
+    });
+  }
+
+  add(name, cb) {
+    const list = this.data.list;
+
+    if (list.length < this.limit) {
+      if (list.indexOf(name) === -1) {
+        list.push(name);
+      }
+      cb(null);
+    } else {
+      this.logger.info(
+        { limit: this.limit },
+        'Storage memory has reached limit of @{limit} packages'
+      );
+      cb(new Error('Storage memory has reached limit of limit packages'));
+    }
+  }
+
+  search(onPackage, onEnd, validateName) {
+    // TODO: pending to implement
+    onEnd();
+  }
+
+  remove(name, cb) {
+    const list = this.data.list;
+
+    const item = list.indexOf(name);
+
+    if (item !== -1) {
+      list.splice(item, 1);
+    }
+
+    cb(null);
+  }
+
+  get(cb) {
+    cb(null, this.data.list);
+  }
+
+  sync() {
+    // nothing to do
+  }
+
+  getPackageStorage(packageInfo) {
+    // eslint-disable-next-line new-cap
+    return new _memoryHandler2.default(packageInfo, this.data.files, this.logger);
+  }
+
+  _createEmtpyDatabase() {
+    const list = [];
+    const files = {};
+    const emptyDatabase = {
+      list,
+      files,
+      secret: '',
+    };
+
+    return emptyDatabase;
+  }
+}
+
+exports.default = LocalMemory;

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/memory-handler.js

@@ -0,0 +1,182 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', {
+  value: true,
+});
+exports.fileExist = exports.noSuchFile = undefined;
+
+let _httpErrors = require('http-errors');
+
+let _httpErrors2 = _interopRequireDefault(_httpErrors);
+
+let _memoryFs = require('memory-fs');
+
+let _memoryFs2 = _interopRequireDefault(_memoryFs);
+
+let _streams = require('@verdaccio/streams');
+
+function _interopRequireDefault(obj) {
+  return obj && obj.__esModule ? obj : { default: obj };
+}
+
+// $FlowFixMe
+const noSuchFile = (exports.noSuchFile = 'ENOENT');
+
+const fileExist = (exports.fileExist = 'EEXISTS');
+
+const fSError = function fSError(message, code = 404) {
+  const err = (0, _httpErrors2.default)(code, message);
+  // $FlowFixMe
+  err.code = message;
+
+  return err;
+};
+
+const noPackageFoundError = function noPackageFoundError(message = 'no such package') {
+  const err = (0, _httpErrors2.default)(404, message);
+  // $FlowFixMe
+  err.code = noSuchFile;
+  return err;
+};
+
+// eslint-disable-next-line new-cap
+const fs = new _memoryFs2.default();
+
+class MemoryHandler {
+  constructor(packageName, data, logger) {
+    // this is not need it
+    this.data = data;
+    this.name = packageName;
+    this.logger = logger;
+  }
+
+  updatePackage(pkgFileName, updateHandler, onWrite, transformPackage, onEnd) {
+    let json = this._getStorage(pkgFileName);
+
+    try {
+      json = JSON.parse(json);
+    } catch (err) {
+      return onEnd(err);
+    }
+
+    updateHandler(json, (err) => {
+      if (err) {
+        return onEnd(err);
+      }
+      try {
+        onWrite(pkgFileName, transformPackage(json), onEnd);
+      } catch (err) {
+        return onEnd(fSError('error on parse', 500));
+      }
+    });
+  }
+
+  deletePackage(pkgName, callback) {
+    delete this.data[pkgName];
+    callback(null);
+  }
+
+  removePackage(callback) {
+    callback(null);
+  }
+
+  createPackage(name, value, cb) {
+    this.savePackage(name, value, cb);
+  }
+
+  savePackage(name, value, cb) {
+    try {
+      const json = JSON.stringify(value, null, '\t');
+
+      this.data[name] = json;
+    } catch (err) {
+      cb(fSError(err.message, 500));
+    }
+
+    cb(null);
+  }
+
+  readPackage(name, cb) {
+    const json = this._getStorage(name);
+    const isJson = typeof json === 'undefined';
+
+    try {
+      cb(isJson ? noPackageFoundError() : null, JSON.parse(json));
+    } catch (err) {
+      cb(noPackageFoundError());
+    }
+  }
+
+  writeTarball(name) {
+    const uploadStream = new _streams.UploadTarball();
+    const temporalName = `/${name}`;
+
+    process.nextTick(function () {
+      fs.exists(temporalName, function (exists) {
+        if (exists) {
+          return uploadStream.emit('error', fSError(fileExist));
+        }
+
+        try {
+          const file = fs.createWriteStream(temporalName);
+
+          uploadStream.pipe(file);
+
+          uploadStream.done = function () {
+            const onEnd = function onEnd() {
+              uploadStream.emit('success');
+            };
+
+            uploadStream.on('end', onEnd);
+          };
+
+          uploadStream.abort = function () {
+            uploadStream.emit('error', fSError('transmision aborted', 400));
+            file.end();
+          };
+
+          uploadStream.emit('open');
+        } catch (err) {
+          uploadStream.emit('error', err);
+        }
+      });
+    });
+
+    return uploadStream;
+  }
+
+  readTarball(name) {
+    const pathName = `/${name}`;
+
+    const readTarballStream = new _streams.ReadTarball();
+
+    process.nextTick(function () {
+      fs.exists(pathName, function (exists) {
+        if (!exists) {
+          readTarballStream.emit('error', noPackageFoundError());
+        } else {
+          const readStream = fs.createReadStream(pathName);
+
+          readTarballStream.emit('content-length', fs.data[name].length);
+          readTarballStream.emit('open');
+          readStream.pipe(readTarballStream);
+          readStream.on('error', (error) => {
+            readTarballStream.emit('error', error);
+          });
+
+          readTarballStream.abort = function () {
+            readStream.destroy(fSError('read has been aborted', 400));
+          };
+        }
+      });
+    });
+
+    return readTarballStream;
+  }
+
+  _getStorage(name = '') {
+    return this.data[name];
+  }
+}
+
+exports.default = MemoryHandler;

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/lib/types.js

@@ -0,0 +1 @@
+'use strict';

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "verdaccio-memory",
+  "version": "1.0.3",
+  "description": "storage implementation in memory",
+  "main": "lib/index.js",
+  "scripts": {
+    "release": "standard-version -a -s",
+    "pretest": "npm run lint",
+    "test": "jest",
+    "precommit": "lint-staged",
+    "format": "prettier --single-quote --trailing-comma none --write \"{src,test}/**/*.js\"",
+    "lint": "npm run flow && eslint .",
+    "flow": "flow",
+    "prepublish": "npm run build",
+    "commitmsg": "commitlint -e $GIT_PARAMS",
+    "build": "babel src/ --out-dir lib/ --copy-files --ignore ___tests___"
+  },
+  "dependencies": {
+    "@verdaccio/streams": "^1.0.0",
+    "http-errors": "1.6.3",
+    "memory-fs": "^0.4.1"
+  },
+  "devDependencies": {
+    "@commitlint/cli": "7.0.0",
+    "@commitlint/config-conventional": "7.0.1",
+    "@commitlint/travis-cli": "7.0.0",
+    "@verdaccio/types": "3.3.0",
+    "babel-cli": "6.26.0",
+    "babel-core": "6.26.3",
+    "babel-eslint": "8.2.6",
+    "babel-jest": "23.4.0",
+    "babel-plugin-flow-runtime": "0.17.0",
+    "babel-plugin-transform-async-to-generator": "6.24.1",
+    "babel-preset-env": "1.7.0",
+    "babel-preset-flow": "6.23.0",
+    "cross-env": "5.2.0",
+    "eslint": "5.1.0",
+    "eslint-config-google": "0.9.1",
+    "eslint-config-prettier": "2.9.0",
+    "eslint-plugin-flowtype": "2.50.0",
+    "eslint-plugin-jest": "21.17.0",
+    "eslint-plugin-prettier": "2.6.2",
+    "flow-bin": "0.76.0",
+    "flow-runtime": "0.17.0",
+    "husky": "0.14.3",
+    "jest": "23.4.1",
+    "lint-staged": "7.2.0",
+    "prettier": "1.13.7",
+    "rmdir-sync": "1.0.1",
+    "standard-version": "4.3.0"
+  },
+  "keywords": [
+    "verdaccio",
+    "plugin",
+    "storage"
+  ],
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
+  "lint-staged": {
+    "*.js": [
+      "npm run format",
+      "npm run lint",
+      "git add"
+    ]
+  },
+  "author": "Juan Picado <juanpicado19@gmail.com>",
+  "private": false,
+  "license": "MIT"
+}

docker-examples/v4/gitlab-verdaccio/README.md

@@ -0,0 +1,17 @@
+# Verdaccio and Gitlab Authentication
+
+The [verdaccio-gitlab](https://github.com/bufferoverflow/verdaccio-gitlab) plugin can be used to authenticate users against gitlab.
+
+## Running with the provided verdaccio-gitlab docker image
+
+If the only extra plugin you require is verdaccio-gitlab, [you can use the image provided by the plugin project](https://hub.docker.com/r/bufferoverflow/verdaccio-gitlab/). It takes care of the whole plugin setup and is based on the [official verdaccio docker image](https://hub.docker.com/r/verdaccio/verdaccio/).
+
+More information about the configuration required can be found in the [verdaccio-gitlab readme](https://github.com/bufferoverflow/verdaccio-gitlab/blob/master/README.md).
+
+https://hub.docker.com/r/bufferoverflow/verdaccio-gitlab/
+
+## Building your own docker image
+
+There's a [sample docker-compose file in the verdaccio-gitlab repo](https://github.com/bufferoverflow/verdaccio-gitlab/blob/master/docker-compose.yml) that shows how to build & start both gitlab and verdaccio with support for the gitlab plugin, but this is generic enough to be used with any other extra plugins.
+
+You can also extend the [official verdaccio-gitlab image Dockerfile](https://github.com/bufferoverflow/verdaccio-gitlab/blob/master/Dockerfile).

docker-examples/v4/https-portal-example/README.md

@@ -0,0 +1,69 @@
+# Verdaccio and https-portal Example
+
+Run `verdaccio` under fully automated HTTPS server powered by Nginx, Let's Encrypt was never so easy. Using [https-portal](https://github.com/SteveLTN/https-portal) all is builtin and no need for extra configuration.
+
+## Prerequisites
+
+In order to make it work, this is just a local setup, so you must update your `host` file.
+
+On Mac
+
+```
+➜ sudo vi /etc/hosts
+
+##
+# Host Database
+#
+# localhost is used to configure the loopback interface
+# when the system is booting.  Do not change this entry.
+##
+127.0.0.1       localhost
+127.0.0.1       example.com
+```
+
+## Usage
+
+To run the containers, run the followingcommands in this folder, it should start the containers in detach mode.
+
+```bash
+ docker-compose up -d
+```
+
+To recreate the nginx image you can force the build.
+
+```bash
+ docker-compose up --build -d
+```
+
+To force recreate the images.
+
+```bash
+docker-compose up --build --force-recreate  -d
+```
+
+To stop all containers
+
+```bash
+docker-compose stop
+```
+
+From your Javascript project
+
+```bash
+npm publish --registry https://example.com
+```
+
+## NPM and self-signed certificates
+
+Be aware of disabling strict SSL in `./npmrc`config file as explained [here](https://stackoverflow.com/questions/9626990/receiving-error-error-ssl-error-self-signed-cert-in-chain-while-using-npm).
+
+```bash
+npm config set strict-ssl false
+```
+
+## Login
+
+If you want to login into the Verdaccio instance created via these Docker Examples, please try:
+
+Username: jpicado
+Password: jpicado

docker-examples/v4/https-portal-example/conf/config.yaml

@@ -0,0 +1,28 @@
+plugins: /verdaccio/plugins
+storage: /verdaccio/storage
+
+auth:
+  htpasswd:
+    file: /verdaccio/conf/htpasswd
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+middlewares:
+  audit:
+    enabled: true
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+  '**':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+logs:
+  - { type: stdout, format: pretty, level: trace }

docker-examples/v4/https-portal-example/conf/htpasswd

@@ -0,0 +1 @@
+jpicado:$6vkdNgRX2npc:autocreated 2018-09-22T10:24:17.535Z

docker-examples/v4/https-portal-example/docker-compose.yml

@@ -0,0 +1,22 @@
+version: '2'
+
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:4
+    container_name: verdaccio-https
+    ports:
+      - '4873:4873'
+    volumes:
+      - './storage:/verdaccio/storage'
+      - './conf:/verdaccio/conf'
+  https-portal:
+    image: steveltn/https-portal:1
+    ports:
+      - '80:80'
+      - '443:443'
+    links:
+      - verdaccio:verdaccio
+    environment:
+      DOMAINS: 'example.com -> http://verdaccio:4873'
+      STAGE: local
+      FORCE_RENEW: 'true'

docker-examples/v4/https-portal-example/storage/@scope/example/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@scope/example",
+  "versions": {
+    "1.0.0": {
+      "name": "@scope/example",
+      "version": "1.0.0",
+      "description": "exampled scoped module",
+      "main": "index.js",
+      "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1"
+      },
+      "keywords": [
+        "example"
+      ],
+      "author": {
+        "name": "Juan Picado"
+      },
+      "license": "ISC",
+      "dependencies": {
+        "jquery": "^3.3.1"
+      },
+      "_id": "@scope/example@1.0.0",
+      "_npmVersion": "6.3.0",
+      "_nodeVersion": "10.1.0",
+      "_npmUser": {},
+      "dist": {
+        "integrity": "sha512-UrpRhmCAwyGF2pWWd+fGDN8tFsVcCoLmK/qHaVAamphR+E4ZUjGf6N5GGgneFwbSeZ0FQrDYtUTPKrysxGIihQ==",
+        "shasum": "4c36e40e65049b32cd49599f65cb50b81b9d8810",
+        "tarball": "http://example.com/@scope/example/-/@scope/example-1.0.0.tgz"
+      }
+    }
+  },
+  "time": {
+    "modified": "2018-09-22T10:27:32.723Z",
+    "created": "2018-09-22T10:27:32.723Z",
+    "1.0.0": "2018-09-22T10:27:32.723Z"
+  },
+  "dist-tags": {
+    "latest": "1.0.0"
+  },
+  "_uplinks": {},
+  "_distfiles": {},
+  "_attachments": {
+    "example-1.0.0.tgz": {
+      "shasum": "4c36e40e65049b32cd49599f65cb50b81b9d8810",
+      "version": "1.0.0"
+    }
+  },
+  "_rev": "7-24f17006c03f69b9",
+  "readme": "ERROR: No README data found!"
+}