chore: update versions (next-7) (#4474)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -1,245 +0,0 @@
-{
-  "projectName": "verdaccio",
-  "projectOwner": "verdaccio",
-  "repoType": "github",
-  "repoHost": "https://github.com",
-  "commitConvention": "none",
-  "files": [
-    "CONTRIBUTORS.md"
-  ],
-  "contributors": [
-    {
-      "login": "juanpicado",
-      "name": "Juan Picado",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
-      "profile": "https://www.linkedin.com/in/jotadeveloper/",
-      "contributions": [
-        "doc",
-        "code",
-        "infra",
-        "eventOrganizing",
-        "blog",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "sergiohgz",
-      "name": "Sergio Herrera",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
-      "profile": "https://github.com/sergiohgz",
-      "contributions": [
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "DanielRuf",
-      "name": "Daniel Ruf",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
-      "profile": "https://daniel-ruf.de/",
-      "contributions": [
-        "security",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "priscilawebdev",
-      "name": "Priscila Oliveira",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
-      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
-      "contributions": [
-        "design",
-        "code",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "ayusharma",
-      "name": "Ayush Sharma",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
-      "profile": "http://ayusharma.github.io/",
-      "contributions": [
-        "infra",
-        "code",
-        "design"
-      ]
-    },
-    {
-      "login": "trentearl",
-      "name": "Trent Earl",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
-      "profile": "https://github.com/trentearl",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jmwilkinson",
-      "name": "jmwilkinson",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
-      "profile": "https://github.com/jmwilkinson",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "bufferoverflow",
-      "name": "Roger Meier",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
-      "profile": "https://github.com/bufferoverflow",
-      "contributions": [
-        "plugin"
-      ]
-    },
-    {
-      "login": "jamesgeorge007",
-      "name": "James George",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
-      "profile": "https://ghuser.io/jamesgeorge007",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "AvailCat",
-      "name": "AvailCat",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
-      "profile": "https://github.com/AvailCat",
-      "contributions": [
-        "code",
-        "infra",
-        "maintenance"
-      ]
-    },
-    {
-      "login": "lgaitan",
-      "name": "Lucius Gaitán",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
-      "profile": "https://www.luciusgaitan.com/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ramonornela",
-      "name": "Ramon Henrique Ornelas",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
-      "profile": "https://github.com/ramonornela",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "UnitedMarsupials-zz",
-      "name": "UnitedMarsupials-zz",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
-      "profile": "https://people.freebsd.org/~mi/resume/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ryan-codingintrigue",
-      "name": "Ryan Graham",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
-      "profile": "http://www.codingintrigue.co.uk/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "coolsp",
-      "name": "coolsp",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
-      "profile": "https://github.com/coolsp",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ashishsurana",
-      "name": "Ashish Surana",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
-      "profile": "http://ashishsurana.in/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "buffaybu",
-      "name": "Wang Yifei",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
-      "profile": "https://github.com/buffaybu",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "lirantal",
-      "name": "Liran Tal",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
-      "profile": "https://twitter.com/liran_tal",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "brenordr",
-      "name": "Breno Rodrigues",
-      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
-      "profile": "https://github.com/brenordr",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "jachstet-sea",
-      "name": "jachstet-sea",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
-      "profile": "https://github.com/jachstet-sea",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "Vrtak-CZ",
-      "name": "Patrik Votoček",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
-      "profile": "https://patrik.votocek.cz/",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "monkeywithacupcake",
-      "name": "jess",
-      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
-      "profile": "https://github.com/monkeywithacupcake",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "toolsofraj",
-      "name": "toolsofraj",
-      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
-      "profile": "https://github.com/toolsofraj",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "ddhp",
-      "name": "Jian-Chen Chen (jesse)",
-      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
-      "profile": "https://github.com/ddhp",
-      "contributions": [
-        "translation",
-        "code"
-      ]
-    }
-  ],
-  "skipCi": true,
-  "contributorsPerLine": 7
-}

.babelrc

@@ -0,0 +1,18 @@
+{
+  "presets": [
+    [
+      "@babel/env",
+      {
+        "targets": {
+          "node": 12
+        }
+      }
+    ],
+    "@babel/typescript"
+  ],
+  "ignore": ["**/*.d.ts"],
+  "plugins": [
+    "@babel/plugin-proposal-optional-chaining",
+    "@babel/plugin-proposal-nullish-coalescing-operator"
+  ]
+}

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/master/docs/common-questions.md)

.changeset/angry-trees-tie.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/ui-theme': patch
+---
+
+- fixed login state when token is expired (@ku3mi41 in #3980)

.changeset/breezy-mayflies-pull.md

@@ -0,0 +1,44 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/core': major
+'@verdaccio/file-locking': major
+'@verdaccio/tarball': major
+'@verdaccio/types': major
+'@verdaccio/url': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-7': major
+'@verdaccio/logger-commons': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/node-api': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/proxy': major
+'@verdaccio/search': major
+'@verdaccio/server': major
+'@verdaccio/server-fastify': major
+'@verdaccio/signature': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/store': major
+'docusaurus-plugin-contributors': major
+'@verdaccio/eslint-config': major
+'@verdaccio/test-helper': major
+'customprefix-auth': major
+'@verdaccio/ui-components': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+'@verdaccio/website': major
+'@verdaccio/local-publish': patch
+---
+
+feat!: bump to v7

.changeset/chilled-carrots-guess.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+- added `onClick` prop to `Link` component in @verdaccio/ui-components. (@moglerdev in #3989)
+- resolved issue in the `Package` component where the download button was incorrectly opening a new tab to the homepage. (@moglerdev in #3989)

.changeset/config.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@1.3.0/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [
+    [
+      "verdaccio",
+      "@verdaccio/cli",
+      "@verdaccio/core",
+      "@verdaccio/config",
+      "@verdaccio/node-api",
+      "@verdaccio/ui-theme"
+    ]
+  ],
+  "access": "public",
+  "baseBranch": "master",
+  "updateInternalDependencies": "patch"
+}

.changeset/eight-squids-judge.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+fix: display labels for engine versions

.changeset/long-jars-collect.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+---
+
+feat: ui improvements
+
+Some UI improvements
+
+- download progress indicator: https://github.com/verdaccio/verdaccio/discussions/4068
+- fix dark mode and readme css support https://github.com/verdaccio/verdaccio/discussions/3942 https://github.com/verdaccio/verdaccio/discussions/3467
+- fix global for yarn packages and add version to the packages on copy
+- feat: hide deprecated versions option
+- fix: improve deprecated package style
+- feat: display deprecated versions

.changeset/old-turkeys-heal.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/file-locking': minor
+'@verdaccio/tarball': minor
+'@verdaccio/url': minor
+'@verdaccio/logger-7': minor
+'@verdaccio/logger-commons': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'verdaccio-audit': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/search': minor
+'@verdaccio/signature': minor
+'@verdaccio/utils': minor
+---
+
+restore legacy support

.changeset/olive-bananas-wink.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/tarball': patch
+---
+
+- Fixes polynomial regular expression when determining the file name of tarball
+- Add tests for extracting tarball name

.changeset/perfect-chairs-act.md

@@ -0,0 +1,36 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/core': major
+'@verdaccio/file-locking': major
+'@verdaccio/tarball': major
+'@verdaccio/types': major
+'@verdaccio/url': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-commons': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/node-api': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/proxy': major
+'@verdaccio/search': major
+'@verdaccio/server': major
+'@verdaccio/server-fastify': major
+'@verdaccio/signature': major
+'@verdaccio/store': major
+'@verdaccio/ui-components': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+update major dependencies, remove old nodejs support

.changeset/pre.json

@@ -0,0 +1,78 @@
+{
+  "mode": "pre",
+  "tag": "next-7",
+  "initialVersions": {
+    "@verdaccio/test-cli-commons": "1.1.0",
+    "@verdaccio/e2e-cli-npm6": "1.0.1",
+    "@verdaccio/e2e-cli-npm7": "1.0.1",
+    "@verdaccio/e2e-cli-npm8": "1.0.1",
+    "@verdaccio/e2e-cli-npm9": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm6": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm7": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm8": "1.0.1",
+    "@verdaccio/e2e-cli-yarn1": "1.0.1",
+    "@verdaccio/e2e-cli-yarn2": "1.0.1",
+    "@verdaccio/e2e-cli-yarn3": "1.0.1",
+    "@verdaccio/e2e-cli-yarn4": "1.0.1",
+    "@verdaccio/e2e-ui": "2.0.0",
+    "@verdaccio/api": "6.0.0",
+    "@verdaccio/auth": "6.0.0",
+    "@verdaccio/cli": "6.0.0",
+    "@verdaccio/config": "6.0.0",
+    "@verdaccio/core": "6.0.0",
+    "@verdaccio/file-locking": "11.0.0",
+    "@verdaccio/tarball": "11.0.0",
+    "@verdaccio/types": "11.0.0",
+    "@verdaccio/url": "11.0.0",
+    "@verdaccio/hooks": "6.0.0",
+    "@verdaccio/loaders": "6.0.0",
+    "@verdaccio/logger": "6.0.0",
+    "@verdaccio/logger-7": "6.0.0",
+    "@verdaccio/logger-commons": "6.0.0",
+    "@verdaccio/logger-prettify": "6.0.0",
+    "@verdaccio/middleware": "6.0.0",
+    "@verdaccio/node-api": "6.0.0",
+    "verdaccio-audit": "11.0.0",
+    "verdaccio-auth-memory": "11.0.0",
+    "verdaccio-htpasswd": "11.0.0",
+    "@verdaccio/local-storage": "11.0.0",
+    "verdaccio-memory": "11.0.0",
+    "@verdaccio/ui-theme": "6.0.0",
+    "@verdaccio/proxy": "6.0.0",
+    "@verdaccio/search": "6.0.0",
+    "@verdaccio/server": "6.0.0",
+    "@verdaccio/server-fastify": "6.0.0",
+    "@verdaccio/signature": "6.0.0",
+    "@verdaccio/cli-standalone": "6.0.0",
+    "@verdaccio/store": "6.0.0",
+    "docusaurus-plugin-contributors": "1.0.1",
+    "@verdaccio/eslint-config": "2.0.0",
+    "@verdaccio/test-helper": "2.0.0",
+    "@verdaccio/crowdin-translations": "1.0.0",
+    "customprefix-auth": "1.0.0",
+    "@verdaccio/ui-components": "2.0.0",
+    "@verdaccio/utils": "6.0.0",
+    "verdaccio": "6.0.0",
+    "@verdaccio/web": "6.0.0",
+    "@verdaccio/website": "5.20.2",
+    "@verdaccio/local-publish": "0.0.1"
+  },
+  "changesets": [
+    "angry-trees-tie",
+    "breezy-mayflies-pull",
+    "chilled-carrots-guess",
+    "eight-squids-judge",
+    "long-jars-collect",
+    "old-turkeys-heal",
+    "olive-bananas-wink",
+    "perfect-chairs-act",
+    "real-socks-vanish",
+    "shiny-worms-retire",
+    "shy-carrots-compare",
+    "shy-garlics-cry",
+    "strange-points-repair",
+    "weak-fans-explain",
+    "wild-otters-talk",
+    "young-donuts-own"
+  ]
+}

.changeset/real-socks-vanish.md

@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore: test release

.changeset/shiny-worms-retire.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/search': patch
+---
+
+fix: keyword undefined errors

.changeset/shy-carrots-compare.md

@@ -0,0 +1,14 @@
+---
+'@verdaccio/server': minor
+'@verdaccio/test-helper': minor
+'@verdaccio/types': minor
+'@verdaccio/middleware': minor
+'@verdaccio/core': minor
+'@verdaccio/signature': minor
+'@verdaccio/url': minor
+'@verdaccio/config': minor
+'@verdaccio/auth': minor
+'@verdaccio/api': minor
+---
+
+refactor: auth with legacy sign support

.changeset/shy-garlics-cry.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/signature': patch
+---
+
+chore: export signature options type

.changeset/strange-points-repair.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+fix: render READMEs with correct font and highlighting

.changeset/weak-fans-explain.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+fix: Avoid 404 error when getting favicon from root

.changeset/wild-otters-talk.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+fix: bug on change password npm profile

.changeset/young-donuts-own.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore(config): increase test coverage

.dockerignore

@@ -8,19 +8,22 @@
 .*
 # you can add exceptions like in .gitignore to maintain a whitelist:
 # e.g.
-!babel.config.js
+!.babelrc
 !.eslintrc
-!.prettierrc
+!.prettierrc.json
+!.prettierignore
 !.eslintignore
 !.stylelintrc
-!.jest.config.js
-!.jestEnvironment.js
-!.yarnrc.yml
-!.yarn/releases/yarn-berry.cjs
-!.yarn/plugins/*
 
-# do not copy over node_modules we will run `npm install` anyway
+# do not copy over node_modules we will run `pnpm install` anyway
 node_modules
+website
+jest
+docs
+contrib
+docker-examples
+website
+systemd
 
 # output from test runs and similar things
 *.log

.editorconfig

@@ -7,6 +7,7 @@ end_of_line = lf
 insert_final_newline = true
 
 # 2 space indentation
-[{.,}*.{js,jsx,yml,yaml}]
+[{.,}*.{ts,tsx,js,jsx,yml,yaml}]
 indent_style = space
 indent_size = 2
+quote_type = single

.eslintignore

@@ -1,22 +1,20 @@
-node_modules
-coverage/
-wiki/
-static/
-flow-typed/
-website/
+**/fixtures/**
+**/mock/store/**
+**/partials/**
+**/types/custom.d.ts
 build/
-*.md
-*.lock
-*.yaml
-Dockerfile
-*.rpi
-*.html
-*.scss
-*.png
-*.jpg
-*.sh
-*.ico
-test/unit/partials/
-types/custom.d.ts
-docker-examples/
-LICENSE
+coverage/
+node_modules/
+static/
+website/
+wiki/
+dist/
+docs/
+test/functional/store/*
+docker-examples/**/lib/**/*.js
+test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
+yarn.js
+# storybook
+packages/ui-components/storybook-static
+dist.js
+bundle.js

.eslintrc

@@ -1,102 +0,0 @@
-{
-  "extends": [
-    "eslint:recommended",
-    "google",
-    "plugin:react/recommended",
-    "plugin:jest/recommended",
-    "plugin:@typescript-eslint/eslint-recommended",
-    "plugin:@typescript-eslint/recommended",
-    "plugin:import/typescript",
-    "plugin:jsx-a11y/recommended",
-    "prettier"
-  ],
-  "plugins": ["import", "jest", "jsx-a11y", "react-hooks"],
-  "env": {
-    "es6": true,
-    "node": true,
-    "jest": true
-  },
-  "globals": {
-    "__APP_VERSION__": true
-  },
-  "parserOptions": {
-    "allowImportExportEverywhere": true,
-    "sourceType": "module",
-    "ecmaVersion": 11,
-    "ecmaFeatures": {
-      "impliedStrict": true,
-      "jsx": true
-    }
-  },
-  "settings": {
-    "import/resolver": {
-      "node": {
-        "extensions": [".js", ".jsx", ".ts", ".tsx"]
-      }
-    }
-  },
-  "parser": "@typescript-eslint/parser",
-  "rules": {
-    "curly": ["error", "all"],
-    "react/prop-types": 0,
-    "jest/no-export": 0,
-    "jest/no-test-callback": 0,
-    "jest/expect-expect": 0,
-    "jest/no-try-expect": 0,
-    "jest/no-done-callback": "off",
-    "jest/no-conditional-expect": "off",
-    "keyword-spacing": "off",
-    "no-tabs": "off",
-    "no-useless-escape": "off",
-    "padded-blocks": "off",
-    "require-jsdoc": "off",
-    "valid-jsdoc": "off",
-    "import/order": ["error"],
-    "eol-last": "error",
-    "no-irregular-whitespace": "error",
-    "no-mixed-spaces-and-tabs": ["error", "smart-tabs"],
-    "no-trailing-spaces": "error",
-    "camelcase": "off",
-    "guard-for-in": "error",
-    "new-cap": "error",
-    "max-len": ["error", 180],
-    "no-console": ["error", { "allow": ["warn"] }],
-    "no-constant-condition": "error",
-    "no-debugger": "error",
-    "no-empty": "error",
-    "no-fallthrough": "error",
-    "no-invalid-this": "error",
-    "no-new-require": "error",
-    "no-undef": "error",
-    "no-unreachable": "error",
-    "no-var": "error",
-    "one-var": "error",
-    "prefer-rest-params": "error",
-    "prefer-spread": "error",
-    "handle-callback-err": 0,
-    "prefer-const": 0,
-    "@typescript-eslint/camelcase": 0,
-    "@typescript-eslint/ban-ts-ignore": 0,
-    "@typescript-eslint/no-var-requires": 0,
-    "@typescript-eslint/no-inferrable-types": 0,
-    "@typescript-eslint/no-empty-function": 0,
-    "@typescript-eslint/no-this-alias": 0,
-    "@typescript-eslint/no-use-before-define": 0,
-    "@typescript-eslint/array-type": ["error"],
-    "@typescript-eslint/no-explicit-any": 0,
-    "@typescript-eslint/indent": 0,
-    "@typescript-eslint/ban-ts-comment": 0,
-    "@typescript-eslint/ban-types": 0,
-    "@typescript-eslint/explicit-module-boundary-types": 0,
-
-    // rules to fix
-    "no-unused-vars": ["warn", { "vars": "all", "args": "none" }],
-    "jest/no-identical-title": ["warn"],
-    "prefer-promise-reject-errors": ["warn"],
-    "jest/no-disabled-tests": ["warn"],
-    "jest/no-commented-out-tests": ["warn"],
-    "@typescript-eslint/prefer-optional-chain": ["warn"],
-    "@typescript-eslint/explicit-member-accessibility": ["warn"],
-    "@typescript-eslint/no-unused-vars": ["warn"]
-  }
-}

.eslintrc.js

@@ -0,0 +1,3 @@
+module.exports = {
+  extends: ['@verdaccio/eslint-config'],
+};

.gitattributes

@@ -0,0 +1,199 @@
+## GITATTRIBUTES FOR WEB PROJECTS
+#
+# These settings are for any web project.
+#
+# Details per file setting:
+#   text    These files should be normalized (i.e. convert CRLF to LF).
+#   binary  These files are binary and should be left untouched.
+#
+# Note that binary is a macro for -text -diff.
+######################################################################
+
+# Auto detect
+##   Handle line endings automatically for files detected as
+##   text and leave all files detected as binary untouched.
+##   This will handle all files NOT defined below.
+*                 text=lf
+
+# Source code
+*.bash            text eol=lf
+*.bat             text eol=crlf
+*.cmd             text eol=crlf
+*.coffee          text eol=lf
+*.css             text eol=lf
+*.htm             text diff=html
+*.html            text diff=html
+*.inc             text eol=lf
+*.ini             text eol=lf
+*.js              text eol=lf
+*.json            text eol=lf
+*.jsx             text eol=lf
+*.less            text eol=lf
+*.ls              text eol=lf
+*.map             text -diff
+*.od              text eol=lf
+*.onlydata        text eol=lf
+*.php             text diff=php
+*.pl              text eol=lf
+*.ps1             text eol=crlf
+*.py              text diff=python
+*.rb              text diff=ruby
+*.sass            text eol=lf
+*.scm             text eol=lf
+*.scss            text diff=css
+*.sh              text eol=lf
+*.sql             text eol=lf
+*.styl            text eol=lf
+*.tag             text eol=lf
+*.ts              text eol=lf
+*.tsx             text eol=lf
+*.xml             text eol=lf
+*.xhtml           text diff=html
+
+# Docker
+Dockerfile        text eol=lf
+
+# Documentation
+*.ipynb           text eol=lf
+*.markdown        text eol=lf
+*.md              text eol=lf
+*.mdwn            text eol=lf
+*.mdown           text eol=lf
+*.mkd             text eol=lf
+*.mkdn            text eol=lf
+*.mdtxt           text eol=lf
+*.mdtext          text eol=lf
+*.txt             text eol=lf
+AUTHORS           text eol=lf
+CHANGELOG         text eol=lf
+CHANGES           text eol=lf
+CONTRIBUTING      text eol=lf
+COPYING           text eol=lf
+copyright         text eol=lf
+*COPYRIGHT*       text eol=lf
+INSTALL           text eol=lf
+license           text eol=lf
+LICENSE           text eol=lf
+NEWS              text eol=lf
+readme            text eol=lf
+*README*          text eol=lf
+TODO              text eol=lf
+
+# Templates
+*.dot             text eol=lf
+*.ejs             text eol=lf
+*.haml            text eol=lf
+*.handlebars      text eol=lf
+*.hbs             text eol=lf
+*.hbt             text eol=lf
+*.jade            text eol=lf
+*.latte           text eol=lf
+*.mustache        text eol=lf
+*.njk             text eol=lf
+*.phtml           text eol=lf
+*.tmpl            text eol=lf
+*.tpl             text eol=lf
+*.twig            text eol=lf
+*.vue             text eol=lf
+
+# Configs
+*.cnf             text eol=lf
+*.conf            text eol=lf
+*.config          text eol=lf
+.editorconfig     text eol=lf
+.env              text eol=lf
+.gitattributes    text eol=lf
+.gitconfig        text eol=lf
+.htaccess         text eol=lf
+*.lock            text -diff
+package-lock.json text -diff
+*.toml            text eol=lf
+*.yaml            text eol=lf
+*.yml             text eol=lf
+browserslist      text eol=lf
+Makefile          text eol=lf
+makefile          text eol=lf
+
+# Heroku
+Procfile          text eol=lf
+
+# Graphics
+*.ai              binary
+*.bmp             binary
+*.eps             binary
+*.gif             binary
+*.gifv            binary
+*.ico             binary
+*.jng             binary
+*.jp2             binary
+*.jpg             binary
+*.jpeg            binary
+*.jpx             binary
+*.jxr             binary
+*.pdf             binary
+*.png             binary
+*.psb             binary
+*.psd             binary
+# SVG treated as an asset (binary) by default.
+*.svg             text eol=lf
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg           binary
+*.svgz            binary
+*.tif             binary
+*.tiff            binary
+*.wbmp            binary
+*.webp            binary
+
+# Audio
+*.kar             binary
+*.m4a             binary
+*.mid             binary
+*.midi            binary
+*.mp3             binary
+*.ogg             binary
+*.ra              binary
+
+# Video
+*.3gpp            binary
+*.3gp             binary
+*.as              binary
+*.asf             binary
+*.asx             binary
+*.fla             binary
+*.flv             binary
+*.m4v             binary
+*.mng             binary
+*.mov             binary
+*.mp4             binary
+*.mpeg            binary
+*.mpg             binary
+*.ogv             binary
+*.swc             binary
+*.swf             binary
+*.webm            binary
+
+# Archives
+*.7z              binary
+*.gz              binary
+*.jar             binary
+*.rar             binary
+*.tar             binary
+*.zip             binary
+
+# Fonts
+*.ttf             binary
+*.eot             binary
+*.otf             binary
+*.woff            binary
+*.woff2           binary
+
+# Executables
+*.exe             binary
+*.pyc             binary
+
+# RC files (like .babelrc or .eslintrc)
+*.*rc             text eol=lf
+
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text eol=lf

.github/ISSUE_TEMPLATE/bug_report.md

@@ -6,10 +6,31 @@ title: ''
 assignees: ''
 ---
 
+<!-- PLEASE READ THIS:  
+ - If you are not sure is a bug, OPEN a DISCUSSION, if is a legitimate bug, is easy to create a bug from a discussion.
+ - Empty reports won't be considered and eventually be closed by a bot.
+ - Include debugging notes will help to fix it faster, HOW TO: https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio 
+ - If you remove this template, ticket will be closed immediately.
+ - No English perfect is required, use public translators if is need it, we will do our best to help you.
+ - Extra bonus: The most complete this report is delivered, the faster you will get a response.
+ - Extra bonus: include screenshots, logs (remove sensitive data).
+ - If you are willing to fix it, there is a checkbox at the bottom.
+-->
+
+**Your Environment**
+  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
+ * **verdaccio version**: 5.x.x
+ * **node version** [12.x.x, 14.x.x]:
+ * **package manager**: [npm@7, pnpm@6, yarn@2]
+ * **os**: [mac, windows@10, linux]
+ * **platform**: [npm, docker, helm, other]
+
 **Describe the bug**
+
 <!-- A clear and concise description of what the bug is. -->
 
 **To Reproduce**
+
 <!-- IMPORTANT:
  - How to reproduce the issue
  - Steps to reproduce the issue
@@ -18,9 +39,11 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 -->
 
 **Expected behavior**
+
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots**
+**Screenshots, server logs, package manager log**
+
 <!-- If applicable, add screenshots to help explain your problem.  -->
 
 **Configuration File (cat ~/.config/verdaccio/config.yaml)**
@@ -28,16 +51,21 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 <!-- Please be careful do not leak any sensitive information, remove tokens -->
 
 **Environment information**
+
 <!-- Please paste the results of running `verdaccio --info` -->
 
 **Debugging output**
- - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
- - `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
- - `$ npm -ddd` prints:
- - `$ npm config get registry` prints:
+
+- `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
+- `$ DEBUG=verdaccio* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+- `$ npm -ddd` prints:
+- `$ npm config get registry` prints:
+
+**Contribute to Verdaccio**
+
+- [ ] I'm willing to fix this bug 🥇 
 
 <!--
 
 IMPORTANT: please do not attach external files, all content should be visible from any device.
 -->
-

.github/ISSUE_TEMPLATE/config.yml

@@ -7,8 +7,5 @@ contact_links:
     url: https://github.com/verdaccio/verdaccio/security/policy
     about: I want to report a security vulnerability
   - name: Chat 🏘
-    url: http://chat.verdaccio.org
-    about: For a quick question you should do it through our community chat
-  - name: User Interface Report 👩🏼‍🎨👨🏼‍🎨
-    url: https://github.com/verdaccio/ui/issues/new/choose
-    about: Any report related with the User Interface should be posted in another repository
+    url: https://discord.gg/7qWJxBf
+    about: Quick question? Try out Discord chat, you can get faster feedback

.github/ISSUE_TEMPLATE/feature.md

@@ -1,21 +1,24 @@
 ---
-name: "Feature Request \U0001F52E"
+name: 'Feature Request 🔮'
 about: You want a feature request.
 title: ''
 labels: 'topic: feature request'
 assignees: ''
-
 ---
 
 <!--
+IMPORTANT: If you don't have an action plan, please consider create a DISCUSSION (idea) instead for an open a feature request issue.
+
+https://github.com/verdaccio/verdaccio/discussions/new
 
 Verdaccio is a project addressed for voluntaries, if you appreciate this project consider to donate.
+1$/5$ or custom amount single contribution
+
+or monthly
 1$/month - minimal contribution
 5$/month - nice contribution
-500$ - help to promote this project, marketing, stickers.
-2000$/year - sponsor status, your company logo will be in our readme, meetups talks and your request will have high priority
 
-https://opencollective.com/verdaccio
+https://github.com/sponsors/verdaccio
 
 As reminder, the Open Source must be sustainable.
 -->

.github/dependabot.yml

@@ -5,23 +5,21 @@
 
 version: 2
 updates:
-
   # Maintain dependencies for GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
 
   # Maintain dependencies for npm
-  - package-ecosystem: "npm"
-    directory: "/"
+  - package-ecosystem: 'npm'
+    directory: '/'
     schedule:
-      interval: "daily"
-    allow:   
-      - dependency-name: "@verdaccio/*"
-      - dependency-name: "verdaccio-*"
+      interval: 'daily'
+    allow:
+      - dependency-name: '@verdaccio/*'
+      - dependency-name: 'verdaccio-*'
     assignees:
-      - "verdacciobot"
+      - 'verdacciobot'
     labels:
-      - "bot: dependencies"
-      
+      - 'bot: dependencies'

.github/disabled/docker-plugins-e2e.yml

@@ -0,0 +1,39 @@
+name: E2E Docker Proxy Plugins Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      with:
+        node-version: 18
+
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry=http://localhost:4873
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost:4873
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost:4873
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost:4873
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down

.github/disabled/e2e-angular-cli-workflow.yml

@@ -0,0 +1,131 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Angular CLI with verdaccio'
+jobs:
+  # todo: fix yarn global issue, cannot find ng
+  #  yarn:
+  #    strategy:
+  #      fail-fast: false
+  #      matrix:
+  #        os: [ubuntu-latest, windows-latest]
+  #
+  #    name: '${{ matrix.os }} / yarn:angular example'
+  #    runs-on: ${{ matrix.os }}
+  #
+  #    steps:
+  #      - uses: actions/checkout@v2.3.1
+  #
+  #      - name: 'Use Node.js 10.x'
+  #        uses: actions/setup-node@v2.1.1
+  #        with:
+  #          node-version: 10.x
+  #      - name: Install Dependencies
+  #        run: yarn install --pure-lockfile
+  #      - name: 'Run verdaccio in the background'
+  #        run: |
+  #          nohup node ./scripts/run-verdaccio.js &
+  #      - name: 'Ping to verdaccio'
+  #        run: |
+  #          npm ping --registry http://localhost:4873
+  #      - name: 'Running the integration test'
+  #        run: |
+  #          source scripts/e2e-setup-ci.sh
+  #          yarn init --yes
+  #
+  #          yarn global add @angular/cli
+  #          which nodemon
+  #          ng new verdaccio-angular --interactive=false
+  #
+  #          cd verdaccio-angular
+  #          echo "registry=http://localhost:4873" > ~/.npmrc
+  #          yarn add @angular-devkit/core@next @babel/preset-env @babel/core -D
+  #
+  #          ng build --aot
+  npm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:angular example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest npm'
+        run: npm i -g npm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="http"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+
+#  pnpm throws errors worth to check why
+#  pnpm:
+#    strategy:
+#      fail-fast: false
+#      matrix:
+#        os: [ubuntu-latest, windows-latest]
+#
+#    name: '${{ matrix.os }} / pnpm:angular example'
+#    runs-on: ${{ matrix.os }}
+#
+#    steps:
+#      - uses: actions/checkout@v2.3.1
+#
+#      - name: 'Use Node.js 10.x'
+#        uses: actions/setup-node@v2.1.1
+#        with:
+#          node-version: 10.x
+#      - name: 'install latest pnpm'
+#        run: npm i -g pnpm
+#      - name: Install Dependencies
+#        run: yarn install --pure-lockfile
+#      - name: 'Run verdaccio in the background'
+#        run: |
+#          nohup node ./scripts/run-verdaccio.js &
+#      - name: 'Ping to verdaccio'
+#        run: |
+#          pnpm ping --registry http://localhost:4873
+#      - name: 'Running the integration test'
+#        run: |
+#          source scripts/e2e-setup-ci.sh
+#          pnpm init --force
+#
+#          pnpm install -g @angular/cli
+#          ng new verdaccio-angular --interactive=false
+#
+#          cd verdaccio-angular
+#          echo "registry=http://localhost:4873" > ~/.npmrc
+#          pnpm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+#
+#          pnpm run ng build --aot

.github/disabled/e2e-gatsbyjs-cli-workflow.yml

@@ -8,8 +8,13 @@ on:
 name: 'E2E Gatsby.js CLI with verdaccio'
 jobs:
   npm:
-    name: 'npm:gatsby example'
-    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:gatsby example'
+    runs-on: ${{ matrix.os }}
 
     steps:
       - uses: actions/checkout@v2.3.3

.github/disabled/e2e-jest-workflow.yml

@@ -0,0 +1,121 @@
+on:
+  schedule:
+    - cron: '0 3 * * 5'
+  pull_request:
+    branches:
+      - '**'
+
+name: 'E2E Jest with verdaccio'
+jobs:
+  yarn:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / yarn:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn add jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / npm:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest npm'
+        run: npm i -g npm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --force
+          npm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  pnpm:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+
+    name: '${{ matrix.os }} / pnpm:jest example'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v2.3.1
+
+      - name: 'Use Node.js 10.x'
+        uses: actions/setup-node@v2.1.1
+        with:
+          node-version: 10.x
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm
+      - name: Install Dependencies
+        run: yarn install --pure-lockfile
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init --force
+          pnpm install jest --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js

.github/disabled/registry.yml

@@ -2,7 +2,7 @@ name: Test local registry for js vulnerabilities
 
 on:
   schedule:
-  - cron: '0 */4 1 * *'
+    - cron: '0 4 * * 4'
 jobs:
   security:
     runs-on: ubuntu-latest
@@ -10,4 +10,4 @@ jobs:
       - name: Test for public javascript library vulnerabilities
         uses: lirantal/is-website-vulnerable@1.15.10
         with:
-          scan-url: "https://registry.verdaccio.org"
+          scan-url: 'https://registry.verdaccio.org'

.github/disabled/release-canary.yml

@@ -0,0 +1,35 @@
+name: Canary Release to Verdaccio
+
+on:
+  pull_request:
+    paths:
+      - .github/workflows/release-canary.yml
+      - 'packages/**'
+      - 'package.json'
+      - 'lerna.json'
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: Use Node (latest)
+        uses: actions/setup-node@v1
+        with:
+          node_version: 13
+      - name: Install
+        run: yarn --frozen-lockfile
+      - name: Clean
+        run: yarn clean
+      - name: Lint
+        run: yarn lint
+      - name: Build
+        run: yarn build
+      - name: Test
+        run: yarn test
+      - name: Publish
+        run: |
+          echo "//registry.verdaccio.org/:_authToken=${{ secrets.VERDACCIO_TOKEN }}" > .npmrc
+          git update-index --assume-unchanged .npmrc
+          yarn publish:canary

.github/lock.yml

@@ -13,10 +13,10 @@ lockLabel: false
 lockComment: >
   🤖This thread has been automatically locked 🔒 since there has not been
   any recent activity after it was closed. 
-  
+
   We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data 
   and to provide you better feedback 🤝and better visibility 👀. 
-  
+
   If you consider, you can attach this ticket 📨 to the new one as a reference for better context.
 
   Thanks for being a part of the Verdaccio community! 💘
@@ -26,10 +26,10 @@ lockComment: >
 
 # Optionally, specify configuration settings just for `issues` or `pulls`
 issues:
- exemptLabels:
-   - help-wanted
- lockLabel: outdated
+  exemptLabels:
+    - help-wanted
+  lockLabel: outdated
 
 pulls:
- daysUntilLock: 90
- lockLabel: outdated
+  daysUntilLock: 90
+  lockLabel: outdated

.github/stale.yml

@@ -1,7 +1,7 @@
 # Number of days of inactivity before an issue becomes stale
-daysUntilStale: 15
+daysUntilStale: 365
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 10
+daysUntilClose: 500
 # Issues with these labels will never be considered stale
 exemptLabels:
   - dev: high priority
@@ -10,17 +10,17 @@ exemptLabels:
   - issue: bug
   - dev: discuss
 # Label to use when marking an issue as stale
-staleLabel: issue: wontfix
+staleLabel: 'issue: wontfix'
 # Comment to post when marking an issue as stale. Set to `false` to disable
 markComment: >
- Hi pal 👋🏼!
+  Hi pal 👋🏼!
 
- This issue has gone quiet 😶.
+  This issue has gone quiet 😶.
 
-  We get a lot of issues, so we currently close issues after 25 days of inactivity. It’s been at least 15 days since the last update here.
-  If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
-  As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
+   We get a lot of issues, so we currently close issues after 180 days of inactivity. It’s been at least 90c days since the last update here.
+   If we missed this issue or if you want to keep it open, please reply here. You can also add/suggest the label "discuss" to keep this issue open!
+   As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request. Check out [https://github.com/verdaccio/contributing](https://github.com/verdaccio/contributing) for more information about opening PRs, triaging issues, and contributing!
 
-  Thanks for being a part of the Verdaccio community! 💘
+   Thanks for being a part of the Verdaccio community! 💘
 # Comment to post when closing a stale issue. Set to `false` to disable
 closeComment: false

.github/workflows/changesets.yml

@@ -0,0 +1,69 @@
+name: Changesets
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+
+  push:
+    branches:
+      - master
+
+env:
+  CI: true
+  PNPM_CACHE_FOLDER: .pnpm-store
+
+jobs:
+  # Update package versions from changesets.
+  version:
+    timeout-minutes: 14
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
+    steps:
+      - name: checkout code repository
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        with:
+          fetch-depth: 0
+
+      - name: setup node.js
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+
+      - name: setup pnpm config
+        run: pnpm config set store-dir $PNPM_CACHE_FOLDER
+      - name: setup pnpm config registry
+        run: pnpm config set registry https://registry.npmjs.org
+
+      - name: install dependencies
+        run: pnpm install
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+      - name: crowdin download
+        env:          
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download       
+      - name: build
+        run: pnpm build
+
+      - name: create versions
+        uses: changesets/action@master
+        with:
+          version: pnpm ci:version
+          commit: 'chore: update versions'
+          title: 'chore: update versions'
+          publish: pnpm ci:publish
+          createGithubReleases: false
+          setupGitUser: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.CHANGESET_RELEASE_TOKEN }}
+          NPM_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+          NPM_CONFIG_REGISTRY: https://registry.npmjs.org

.github/workflows/ci-e2e-ui.yml

@@ -1,27 +0,0 @@
-name: E2E UI
-
-on: [pull_request]
-
-jobs:
-  ci:
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest]
-        node_version: [14]
-
-    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
-    runs-on: ${{ matrix.os }}
-
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Install
-        run: yarn install --immutable
-      - name: Build
-        run: yarn code:build
-      - name: Test UI
-        run: yarn run test:e2e

.github/workflows/ci-e2e.yml

@@ -1,27 +0,0 @@
-name: E2E CLI
-
-on: [pull_request]
-
-jobs:
-  ci:
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest]
-        node_version: [14]
-
-    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
-    runs-on: ${{ matrix.os }}
-
-    steps:
-      - uses: actions/checkout@v2.3.1
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Install
-        run: yarn install
-      - name: Build
-        run: yarn code:build
-      - name: Test CLI
-        run: yarn test:e2e:cli

.github/workflows/ci-windows.yml

@@ -0,0 +1,150 @@
+name: CI windows
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '5 0 * * SUN' 
+permissions:
+  contents: read
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    name: setup verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:nightly-master
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production          
+    steps:
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - name: Node
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install pnpm
+      run: npm i pnpm@latest-8 -g
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store            
+    - name: Install
+      run: pnpm install --registry http://localhost:4873
+    - name: Cache .pnpm-store
+      uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+        restore-keys: |
+          pnpm-
+  lint:
+    runs-on: windows-latest
+    name: Lint
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts
+      - name: Lint
+        run: pnpm lint
+  format:
+    runs-on: windows-latest
+    name: Format
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store          
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts
+      - name: Lint
+        run: pnpm format:check
+  build:
+    needs: [format, lint]
+    strategy:
+      fail-fast: true
+      matrix:
+        os: [windows-latest]
+        node_version: [18]
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store          
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test
+        run: pnpm test
+  ci-e2e-ui:
+    needs: [format, lint]
+    runs-on: windows-latest
+    name: UI Test E2E
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: npm i pnpm@latest-8 -g
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store              
+      - name: Install
+        run: pnpm install --offline --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test UI
+        run: pnpm test:e2e:ui
+        # env:
+        #  DEBUG: verdaccio:e2e*

.github/workflows/ci.yml

@@ -1,29 +1,166 @@
 name: CI
 
-on: [push, pull_request]
+on:
+  push:
+  pull_request:
+    paths:
+      - .changeset/**
+      - .github/workflows/ci.yml
+      - 'packages/**'
+      - 'test/**'
+      - 'docker-examples/**'
+      - 'jest/**'
+      - 'package.json'
+      - 'pnpm-workspace.yaml'
+permissions:
+  contents: read
 
 jobs:
-  ci:
-    name: Node ${{ matrix.node_version }}
-
-    strategy:
-      fail-fast: false
-      matrix:
-        node_version: [12, 14, 15]
-
+  prepare:
     runs-on: ubuntu-latest
-
+    name: setup verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:5
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production
     steps:
-    - uses: actions/checkout@v2.3.3
-    - name: Use Node ${{ matrix.node_version }}
-      uses: actions/setup-node@v2.1.5
-      with:
-        node-version: ${{ matrix.node_version }}
-    - name: Install
-      run: yarn install --immutable
-    - name: Build
-      run: yarn code:build
-    - name: Lint
-      run: yarn lint
-    - name: Test
-      run: yarn test
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install  --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-
+  lint:
+    runs-on: ubuntu-latest
+    name: Lint
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts
+      - name: Lint
+        run: pnpm lint
+  format:
+    runs-on: ubuntu-latest
+    name: Format
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts
+      - name: Lint
+        run: pnpm format:check
+  test:
+    needs: [prepare]
+    strategy:
+      fail-fast: true
+      matrix:
+        os: [ubuntu-latest]
+        node_version: [18, 20, 21]
+    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node ${{ matrix.node_version }}
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --ignore-scripts --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test
+        run: pnpm test
+  sync-translations:
+    needs: [test]
+    runs-on: ubuntu-latest
+    name: synchronize translations
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        ## we need scripts, pupetter downloads aditional content
+        run: pnpm install --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: generate website translations
+        run: pnpm --filter ...@verdaccio/website write-translations
+      - name: sync
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:sync

.github/workflows/codeql-analysis.yml

@@ -1,52 +1,59 @@
-name: "Code scanning - action"
+name: 'Code scanning - action'
 
 on:
-  push:
   pull_request:
+    paths:
+      - .github/workflows/codeql-analysis.yml
+      - 'packages/**'
   schedule:
     - cron: '0 2 * * 4'
 
+permissions:
+  contents: read
+
 jobs:
   CodeQL-Build:
-
-    # CodeQL runs on ubuntu-latest and windows-latest
+    permissions:
+      actions: read  # for github/codeql-action/init to get workflow details
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/autobuild to send a status report
     runs-on: ubuntu-latest
 
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v2.3.3
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
+      - name: Checkout repository
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        with:
+          # We must fetch at least the immediate parents so that if this is
+          # a pull request then we can checkout the head.
+          fetch-depth: 2
+
+      # If this run was triggered by a pull request event, then checkout
+      # the head of the pull request instead of the merge commit.
+      - run: git checkout HEAD^2
+        if: ${{ github.event_name == 'pull_request' }}
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v2
 
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-      
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
       # Override language selection by uncommenting this and choosing your languages
       # with:
       #   languages: go, javascript, csharp, python, cpp, java
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v2
 
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
 
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+      #    and modify them (or add more) to build your code if your project
+      #    uses a compiled language
 
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
+      #- run: |
+      #   make bootstrap
+      #   make release
 
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@e8893c57a1f3a2b659b6b55564fdfdbbd2982911 # v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -0,0 +1,45 @@
+name: E2E Docker Proxy Apache Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+    - name: Checkout
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      with:
+        node-version-file: '.nvmrc'
+    - name: npm setup
+      run: |
+        npm config set fetch-retries="10"
+        npm config set fetch-retry-factor="50"
+        npm config set fetch-retry-mintimeout="20000"
+        npm config set fetch-retry-maxtimeout="80000"          
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    # - name: netlify cli 
+    #   run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -0,0 +1,42 @@
+name: E2E Docker Proxy Nginx Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+    - name: Checkout
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      with:
+        node-version-file: '.nvmrc'
+    - name: npm setup
+      run: |
+        npm config set fetch-retries="10"
+        npm config set fetch-retry-factor="50"
+        npm config set fetch-retry-mintimeout="20000"
+        npm config set fetch-retry-maxtimeout="80000"      
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    #- name: netlify cli 
+    #  run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down

.github/workflows/docker-publish-pre-check.yml

@@ -1,24 +0,0 @@
-name: Docker & Publish Pre-check
-
-on: [push, pull_request]
-
-jobs:
-  testDocker:
-    name: Test Docker Build
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2.3.3
-    - name: Build
-      run: docker build .
-      env:
-        VERDACCIO_BUILD_REGISTRY: https://registry.verdaccio.org
-
-  testVerdaccio:
-    name: Test Verdaccio Publish
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2.3.3
-    - name: Publish
-      uses: verdaccio/github-actions/publish@v0.4.0
-      with:
-        args: -d

.github/workflows/docker-publish.yml

@@ -4,24 +4,27 @@ on:
   push:
     paths:
       - .github/workflows/docker-publish.yml
-      - 'src/**'
-      - 'conf/**'
-      - 'types/**'
+      - .github/workflows/docker-publish.yml
+      - 'packages/**'
       - 'docker-bin/**'
-      - 'bin/**'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-*.yaml'
+      - 'Dockerfile'
+      - '.dockerignore'
     branches:
-      - '**'
+      - 'master'
     tags:
-     - 'v*'
+      - 'v*'
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
 
 jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: docker/setup-qemu-action@v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host
@@ -35,14 +38,14 @@ jobs:
         uses: crazy-max/ghaction-docker-meta@v1
         with:
           images: ${{ github.repository }}
-          tag-custom: 5.x-next
+          tag-custom: nightly-master
           tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
           tag-semver: |
             {{version}}
             {{major}}
             {{major}}.{{minor}}
       - name: Build & Push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v4
         with:
           context: .
           file: ./Dockerfile

.github/workflows/e2e-angular-cli-workflow.yml

@@ -1,153 +0,0 @@
-on:
-  schedule:
-  - cron: '0 3 * * 5'
-  pull_request:
-    branches:
-    - '**'
-
-name: 'E2E Angular CLI with verdaccio'
-jobs:
-# todo: fix yarn global issue, cannot find ng
-#  yarn:
-#    name: 'yarn:angular example'
-#    runs-on: ubuntu-latest
-#
-#    steps:
-#      - uses: actions/checkout@v2.3.3
-#
-#      - name: 'Use Node.js 10.x'
-#        uses: actions/setup-node@v2.1.5
-#        with:
-#          node-version: 10.x
-#      - name: Install Dependencies
-#        run: yarn install --pure-lockfile
-#      - name: 'Run verdaccio in the background'
-#        run: |
-#          nohup node ./scripts/run-verdaccio.js &
-#      - name: 'Ping to verdaccio'
-#        run: |
-#          npm ping --registry http://localhost:4873
-#      - name: 'Running the integration test'
-#        run: |
-#          source scripts/e2e-setup-ci.sh
-#          yarn init --yes
-#
-#          yarn global add @angular/cli
-#          which nodemon
-#          ng new verdaccio-angular --interactive=false
-#
-#          cd verdaccio-angular
-#          echo "registry=http://localhost:4873" > ~/.npmrc
-#          yarn add @angular-devkit/core@next @babel/preset-env @babel/core -D
-#
-#          ng build --aot
-  npm:
-    name: 'npm:angular example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 14.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 14.x
-      - name: 'install latest npm'
-        run: npm i -g npm@latest-6
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          echo "registry=http://localhost:4873" > ~/.npmrc
-          npm config set loglevel="http"
-          npm config set fetch-retries="5"
-          npm config set fetch-retry-factor="50"
-          npm config set fetch-retry-mintimeout="20000"
-          npm config set fetch-retry-maxtimeout="80000"
-          npm install -g @angular/cli
-          ng new verdaccio-angular --interactive=false
-
-          cd verdaccio-angular
-          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
-
-          npm run ng build --aot
-  npm7:
-    name: 'npm7:angular example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 14.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 14.x
-      - name: 'install latest npm'
-        run: npm i -g npm@next-7
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          echo "registry=http://localhost:4873" > ~/.npmrc
-          npm config set loglevel="silent"
-          npm config set fetch-retries="5"
-          npm config set fetch-retry-factor="50"
-          npm config set fetch-retry-mintimeout="20000"
-          npm config set fetch-retry-maxtimeout="80000"
-          npm install -g @angular/cli
-          ng new verdaccio-angular --interactive=false
-
-          cd verdaccio-angular
-          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
-
-          npm run ng build --aot
-
-#  pnpm throws errors worth to check why
-#  pnpm:
-#    name: 'pnpm:angular example'
-#    runs-on: ubuntu-latest
-#
-#    steps:
-#      - uses: actions/checkout@v2.3.3
-#
-#      - name: 'Use Node.js 10.x'
-#        uses: actions/setup-node@v2.1.1
-#        with:
-#          node-version: 10.x
-#      - name: 'install latest pnpm'
-#        run: npm i -g pnpm
-#      - name: Install Dependencies
-#        run: yarn install --pure-lockfile
-#      - name: 'Run verdaccio in the background'
-#        run: |
-#          nohup node ./scripts/run-verdaccio.js &
-#      - name: 'Ping to verdaccio'
-#        run: |
-#          pnpm ping --registry http://localhost:4873
-#      - name: 'Running the integration test'
-#        run: |
-#          source scripts/e2e-setup-ci.sh
-#          pnpm init --force
-#
-#          pnpm install -g @angular/cli
-#          ng new verdaccio-angular --interactive=false
-#
-#          cd verdaccio-angular
-#          echo "registry=http://localhost:4873" > ~/.npmrc
-#          pnpm install @angular-devkit/core@next @babel/preset-env @babel/core -D
-#
-#          pnpm run ng build --aot

.github/workflows/e2e-ci.yml

@@ -0,0 +1,216 @@
+name: E2E CLI
+
+on: [pull_request]
+permissions:
+  contents: read
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    name: setup e2e verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:nightly-master
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            pnpm-
+  build:
+    needs: [prepare]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node 16
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm recursive install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Cache packages
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        id: cache-packages
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            packages-
+      # - name: Cache test
+      #   uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   id: cache-test
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      #     restore-keys: |
+      #       test-
+  e2e-cli-npm:
+    needs: [prepare, build]
+    strategy:
+      fail-fast: false
+      matrix:
+        pkg:
+          [
+            npm6,
+            npm7,
+            npm8,
+            npm9,
+            npm10
+          ]
+        node: [20, 21]
+    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run: pnpm --filter @verdaccio/test-cli-commons build
+      - name: Test CLI
+        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+  # TODO: fix pnpm setup
+  # e2e-cli-pnpm:
+  #   needs: [prepare, build]
+  #   strategy:
+  #     fail-fast: true
+  #     matrix:
+  #       pkg:
+  #         [          
+  #           pnpm6,
+  #           pnpm7,
+  #           pnpm8          
+  #         ]
+  #       node: [20, 21]
+  #   name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+  #   runs-on: ubuntu-latest
+  #   steps:
+  #     - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+  #     - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+  #       with:
+  #         node-version: ${{ matrix.node }}
+  #     - name: Install pnpm
+  #       run: |
+  #         corepack enable
+  #         corepack prepare
+  #     - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+  #       with:
+  #         path: ~/.pnpm-store
+  #         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+  #     - name: set store
+  #       run: |
+  #         pnpm config set store-dir ~/.pnpm-store
+  #     - name: Install
+  #       run: pnpm install --loglevel debug --ignore-scripts --registry http://localhost:4873
+  #     - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+  #       with:
+  #         path: ./packages/
+  #         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+  #     # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+  #     #   with:
+  #     #     path: ./e2e/
+  #     #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+  #     - name: build e2e
+  #       run: pnpm --filter @verdaccio/test-cli-commons build
+  #     - name: Test CLI
+  #       run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+  e2e-cli-yarn:
+    needs: [prepare, build]
+    strategy:
+      fail-fast: false
+      matrix:
+        pkg:
+          [           
+            yarn1,
+            yarn2,
+            yarn3,
+            yarn4
+          ]
+        node: [20, 21]
+    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare 
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: set store
+        run: |
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ./packages/
+          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
+      #   with:
+      #     path: ./e2e/
+      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+      - name: build e2e
+        run: pnpm --filter @verdaccio/test-cli-commons build
+      - name: Test CLI
+        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+      

.github/workflows/e2e-jest-workflow.yml

@@ -1,209 +0,0 @@
-on:
-  schedule:
-    - cron: '0 3 * * 5'
-  pull_request:
-    branches:
-      - '**'
-
-name: 'E2E Jest with verdaccio'
-jobs:
-  yarn:
-    name: 'yarn:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          yarn init --yes
-          yarn add jest --registry http://localhost:4873
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-  yarn2:
-    name: 'yarn2:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          yarn init --yes
-          yarn set version berry
-          yarn config set npmRegistryServer "http://localhost:4873"
-          yarn config set unsafeHttpWhitelist --json '["localhost"]'
-          yarn add jest@26.0.0
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-  npm:
-    name: 'npm:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: 'install latest npm'
-        run: npm i -g npm@latest-6
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          npm init --force
-          npm install jest --registry http://localhost:4873
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-  npm7:
-    name: 'npm7:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: 'install latest npm'
-        run: npm i -g npm
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
-      - name: 'Ping to verdaccio'
-        run: |
-          npm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          npm init --force
-          npm install jest --registry http://localhost:4873
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-
-  pnpm:
-    name: 'pnpm:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: 'install latest pnpm'
-        run: npm i -g pnpm
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js &
-      - name: 'Ping to verdaccio'
-        run: |
-          pnpm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          pnpm init --force
-          pnpm install jest --registry http://localhost:4873
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-  pnpm6:
-    name: 'pnpm6:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v2.3.3
-
-      - name: 'Use Node.js 12.x'
-        uses: actions/setup-node@v2.1.5
-        with:
-          node-version: 12.x
-      - name: 'install latest pnpm'
-        run: sudo npm i pnpm@dev -g
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup node ./scripts/run-verdaccio.js &
-      - name: 'Ping to verdaccio'
-        run: |
-          pnpm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          pnpm init --force
-          pnpm install jest --registry http://localhost:4873
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-
-

.github/workflows/e2e-ui.yml

@@ -0,0 +1,36 @@
+name: E2E UI
+
+on: [pull_request]
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    name: UI Test E2E
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:5
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare
+      - name: Install
+        run: pnpm install --reporter=silence --registry http://localhost:4873
+      - name: build
+        run: pnpm build
+      - name: Test UI
+        run: pnpm test:e2e:ui
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        with:
+          name: videos
+          path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/release.yml

@@ -1,32 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - '*'
-
-jobs:
-  release:
-    name: Release
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2.3.3
-    - name: Use Node (latest)
-      uses: actions/setup-node@v2.1.5
-      with:
-        node-version: 14
-    - name: Install
-      run: yarn install
-    - name: Build
-      run: yarn code:build
-    - name: Lint
-      run: yarn lint
-    - name: Publish
-      run: sh scripts/publish.sh
-      env:
-        REGISTRY_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
-        REGISTRY_URL: registry.npmjs.org
-    - name: Create release notes
-      run: sh scripts/github-release.sh
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/static-data.yml

@@ -0,0 +1,54 @@
+---
+name: static data
+
+on:
+  workflow_dispatch:
+  schedule:
+    # twice peer week
+    - cron: '0 0 * * 1,4'
+  # for now, scheduled, we can enable on push master but not make much sense now
+  # push:
+  #   branches:
+  #     - master
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+jobs:
+  prepare:
+    name: Run script
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version: 18.x
+      - name: install pnpm
+        run: sudo npm i pnpm@latest-8 -g
+      - name: install dependencies
+        run: pnpm install
+      - name: Build Translations percentage
+        run: pnpm --filter @verdaccio/crowdin-translations build
+      - name: update contributors
+        run: pnpm run contributors
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: update addson data
+        run: pnpm script:addson
+      - name: update translations
+        run: pnpm run translations
+        env:
+          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}          
+      - name: format
+        run: pnpm format
+      - name: Commit & Push changes
+        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 # tag=v1.4
+        with:
+          github_token: ${{ secrets.TOKEN_VERDACCIOBOT_GITHUB }}
+          message: "chore: updated static data"
+          branch: master
+          author_email: verdaccio.npm@gmail.com
+          author_name: verdacciobot

.github/workflows/ui-components.yml

@@ -0,0 +1,71 @@
+name: UI Components
+
+on: 
+  workflow_dispatch:
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+env:
+  DEBUG: verdaccio*
+
+jobs:
+  deploy:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      deployments: write
+      pull-requests: write  #  to comment on pull-requests
+
+    runs-on: ubuntu-latest
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+
+      - name: Use Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache pnpm modules
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        env:
+          cache-name: cache-pnpm-modules
+        with:
+          path: ~/.pnpm-store
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+
+      - name: Install pnpm
+        run: |
+          corepack enable
+            corepack prepare --activate pnpm@8.9.0
+      - name: Install
+        run: pnpm install  
+      - name: Build storybook
+        run: pnpm ui:storybook:build
+      - name: Copy public content
+        # the msw.js worker is need it at the storybook-static folder in production
+        run: cp -R packages/ui-components/public/* packages/ui-components/storybook-static
+      - name: 🔥 Deploy Production UI Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        uses: verdaccio/action-netlify-deploy@1c086d59169edeec9254672c7de17d2ceac3928f # v2.0.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
+          build-dir: './packages/ui-components/storybook-static'          
+      - name: 🤖 Deploy Preview UI Components Netlify
+        if: github.repository == 'verdaccio/verdaccio'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        id: netlify_preview_ui
+        with:
+          draft: true
+          comment-on-pull-request: true
+          github-deployment-is-production: false
+          github-deployment-is-transient: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
+          build-dir: './packages/ui-components/storybook-static'

.github/workflows/website.yml

@@ -0,0 +1,155 @@
+name: Verdaccio Website CI
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches-ignore:
+      - 'renovate/*'
+      - 'dependabot/*'    
+    paths:
+        - 'website/**'
+        - './.github/workflows/website.yml'
+  schedule:
+    - cron: '0 0 * * *' 
+
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
+jobs:
+  build:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      deployments: write
+      pull-requests: write  #  to comment on pull-requests
+
+    runs-on: ubuntu-latest
+    name: setup verdaccio
+    services:
+      verdaccio:
+        image: verdaccio/verdaccio:5
+        ports:
+          - 4873:4873
+        env:
+          NODE_ENV: production    
+    env:
+      NODE_OPTIONS: --max_old_space_size=4096
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+
+      - name: Node
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install  --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-          
+      - name: Build 
+        run: pnpm build
+      - name: Build Translations percentage
+        run: pnpm --filter @verdaccio/crowdin-translations build
+      - name: Cache Docusaurus Build
+        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        with:
+          path: website/node_modules/.cache/webpack
+          key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: cache/webpack-${{github.ref}}
+
+      # Will deploy to production on:
+        # 1st: When a push occurs on master branch
+        # 2nd: When we force the worflow dispatch through the UI
+      - name: Build Production
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          SENTRY_KEY: ${{ secrets.SENTRY_KEY }}
+          CONTEXT: production
+        run: pnpm --filter @verdaccio/website netlify:build:production
+
+      - name: 🔥 Deploy Production Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      # Will deploy to Preview URL, only when a pull request is open with changes on the website
+      - name: Build Deployment Preview
+        env:
+          CONTEXT: deploy-preview
+        run: pnpm --filter ...@verdaccio/website netlify:build:deployPreview
+
+      - name: 🤖 Deploy Preview Netlify
+        if: github.repository == 'verdaccio/verdaccio'
+        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
+        id: netlify_preview
+        with:
+          draft: true
+          comment-on-pull-request: true
+          github-deployment-is-production: false
+          github-deployment-is-transient: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
+          build-dir: './website/build'
+
+      - name: Audit preview URL with Lighthouse
+        if: github.repository == 'verdaccio/verdaccio'
+        id: lighthouse_audit
+        uses: treosh/lighthouse-ci-action@1b0e7c33270fbba31a18a0fbb1de7cc5256b6d39 # tag=11.4.0
+        with:
+          urls: |
+            ${{ steps.netlify_preview.outputs.preview-url }}
+          uploadArtifacts: true
+          temporaryPublicStorage: true
+
+      - name: Format lighthouse score
+        id: format_lighthouse_score
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
+        with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
+          script: |
+            const result = ${{ steps.lighthouse_audit.outputs.manifest }}[0].summary
+            const links = ${{ steps.lighthouse_audit.outputs.links }}
+            const formatResult = (res) => Math.round((res * 100))
+            Object.keys(result).forEach(key => result[key] = formatResult(result[key]))
+            const score = res => res >= 90 ? '🟢' : res >= 50 ? '🟠' : '🔴'
+            const comment = [
+                `⚡️ [Lighthouse report](${Object.values(links)[0]}) for the changes in this PR:`,
+                '| Category | Score |',
+                '| --- | --- |',
+                `| ${score(result.performance)} Performance | ${result.performance} |`,
+                `| ${score(result.accessibility)} Accessibility | ${result.accessibility} |`,
+                `| ${score(result['best-practices'])} Best practices | ${result['best-practices']} |`,
+                `| ${score(result.seo)} SEO | ${result.seo} |`,
+                ' ',
+                `*Lighthouse ran on [${Object.keys(links)[0]}](${Object.keys(links)[0]})*`
+            ].join('\n')
+             core.setOutput("comment", comment);
+
+      - name: Add comment to PR
+        if: github.repository == 'verdaccio/verdaccio'
+        id: comment_to_pr
+        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # v2
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          number: ${{ github.event.issue.number }}
+          delete: true
+          header: lighthouse
+          message: |
+            ${{ steps.format_lighthouse_score.outputs.comment }}

.gitignore

@@ -1,45 +1,55 @@
-npm-debug.log
+*.log*
 verdaccio-*.tgz
 .DS_Store
 build/
+dist/
+.eslintcache
+node_modules
 
-### Test
-
-test/unit/partials/store/test-*-storage/*
-test/unit/partials/store/*-storage/*
-test/unit/partials/store/storage_default_storage/*
+### database
 .verdaccio-db.json
 .sinopia-db.json
 
-###
-!bin/verdaccio
+### test
 test-storage*
-access-storage*
 .verdaccio_test_env
-node_modules
-package-lock.json
-npm_test-fails-add-tarball*
-yarn-error.log
 
-# Istanbul
+# docker examples
+docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
+docker-examples/v5/**/storage/*
+
+# jest
 reports/
 coverage/
-.nyc*
 
+## IDE
 .idea/
 
-
-# React
-bundle.js
-bundle.js.map
-__tests__
-
 # Compiled script
-static/*
+packages/partials
+tsconfig.tsbuildinfo
 
-# This is the Yarn build state; it's local to each clone
-/.yarn/build-state.yml
+## bundle files
+packages/standalone/dist/
 
-# This is the Yarn install state cache, it can be rebuilt anytime
-/.yarn/install-state.gz
-.history
+## ui
+packages/plugins/ui-theme/static
+/packages/plugins/ui-theme/src/i18n/download_translations/
+!/packages/plugins/ui-theme/src/i18n/crowdin/ui.json
+
+
+# CI Pnpm cache
+.pnpm-store/
+
+#docs 
+website/docs/api/**/*.md
+website/docs/api/**/*.yml
+!website/docs/api/index.md
+packages/**/docs
+
+# cypress
+e2e/ui/cypress/videos/**/*
+e2e/ui/cypress/screenshots/**/*
+
+# storybook
+packages/ui-components/storybook-static

.husky/pre-commit

@@ -0,0 +1,5 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+#./node_modules/.bin/lint-staged
+npm run husky:pre-commit

.netlify/netlify-plugin-pnpm/index.js

@@ -0,0 +1,10 @@
+module.exports = {
+  onPreBuild: async ({ utils: { build, run } }) => {
+    try {
+      await run.command("npm install -g pnpm")
+      await run.command("pnpm install --ignore-scripts --frozen-lockfile")
+    } catch (error) {
+      return build.failBuild(error)
+    }
+  }
+}

.netlify/netlify-plugin-pnpm/manifest.yml

@@ -0,0 +1,2 @@
+name: netlify-plugin-pnpm
+inputs: []

.npmignore

@@ -1,4 +1,3 @@
-
 ## npm
 npm-debug.log
 yarn-error.log
@@ -23,7 +22,6 @@ docs/
 wiki/
 
 ## flow
-flow-typed/
 types/
 
 # jest

.nvmrc

@@ -1 +1 @@
-13
+20

.prettierignore

@@ -6,27 +6,34 @@
 **/pnpm-lock.yaml
 **/verdaccio-corrupted.db.json
 **/wrong.package.json
-/website/.cache/
-/website/crowdin/
-/website/public/
-/website/src/dictionaries/
+crowdin.yaml
+/docs/website
+/website/translated_docs/
 CHANGELOG.md
 CONTRIBUTORS.md
 node_modules/
 **/coverage/**
+**/static/*.js
+**/dist/*.js
+website/.docusaurus/**/*
+website/i18n/**/*
 **/build/*.js
-test/unit/partials/*
-build/*
-.github/
+packages/core/local-storage/_storage/**
+packages/partials/storage_default_storage/
+packages/standalone/dist/bundle.js
+packages/verdaccio/dist/bundle.js
+docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
+build/
 .vscode/
-wiki/
-.yarnrc.yml
-yarn-error.log
-.yarn/
-test/functional/store/*
-storage_default_storage/*
-docker-examples/
-.prettierignore
-.npmignore
-.gitignore
-*.ico
+.github/
+.netlify/
+packages/**/docs/**
+packages/mock/mock-store/**
+api/**
+packages/core/local-storage/tests/__fixtures__/test-storage/
+packages/plugins/ui-theme/static/
+.verdaccio-db.json
+test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
+yarn.js
+website/docs/api/*
+packages/ui-components/storybook-static/*

.prettierrc

@@ -0,0 +1,15 @@
+{
+  "endOfLine": "lf",
+  "useTabs": false,
+  "printWidth": 100,
+  "tabWidth": 2,
+  "singleQuote": true,
+  "bracketSpacing": true,
+  "trailingComma": "es5",
+  "semi": true,
+  "plugins": ["@trivago/prettier-plugin-sort-imports"],
+  "importOrder": ["^@verdaccio/(.*)$", "^[./]"],
+  "importOrderSeparation": true,
+  "importOrderParserPlugins": ["typescript", "classProperties", "jsx"],
+  "importOrderSortSpecifiers": true
+}

.prettierrc.json

@@ -1,11 +0,0 @@
-{
-  "endOfLine": "lf",
-  "useTabs": false,
-  "printWidth": 180,
-  "tabWidth": 2,
-  "singleQuote": true,
-  "bracketSpacing": true,
-  "jsxBracketSameLine": true,
-  "trailingComma": "es5",
-  "semi": true
-}

.project

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>verdaccio-dev</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+	</buildSpec>
+	<natures>
+	</natures>
+	<filteredResources>
+		<filter>
+			<id>1630305579538</id>
+			<name></name>
+			<type>26</type>
+			<matcher>
+				<id>org.eclipse.ui.ide.multiFilter</id>
+				<arguments>1.0-name-matches-true-false-node_modules</arguments>
+			</matcher>
+		</filter>
+	</filteredResources>
+</projectDescription>

.sonarcloud.properties

@@ -1 +0,0 @@
-

.vscode/launch.json

@@ -1,79 +1,15 @@
 {
-	// Use IntelliSense to learn about possible Node.js debug attributes.
-	// Hover to view descriptions of existing attributes.
-	// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
-	"version": "0.2.0",
-	"configurations": [
-		{
-			"type": "node",
-			"request": "launch",
-			"name": "CLI Babel Registry",
-			"stopOnEntry": false,
-			"program": "${workspaceFolder}/debug/bootstrap.js",
-			"args": ["-l", "0.0.0.0:4873"],
-			"env": {
-				"BABEL_ENV": "registry"
-			},
-			"preLaunchTask": "npm: build:webui",
-			"console": "integratedTerminal"
-		},
-		{
-			"name": "Unit Tests",
-			"type": "node",
-			"request": "launch",
-			"program": "${workspaceRoot}/node_modules/jest-cli/bin/jest.js",
-			"stopOnEntry": false,
-			"args": [
-				"--debug=true" ],
-			"cwd": "${workspaceRoot}",
-			"preLaunchTask": "pre-test",
-			"runtimeExecutable": null,
-			"runtimeArgs": [
-				"--nolazy"
-			],
-			"env": {
-				"NODE_ENV": "test",
-				"TZ": "UTC"
-			},
-			"console": "integratedTerminal"
-		},
-		{
-			"name": "Functional Tests",
-			"type": "node",
-			"request": "launch",
-			"program": "${workspaceRoot}/node_modules/.bin/jest",
-			"stopOnEntry": false,
-			"args": [
-				"--config",
-				"./test/jest.config.functional.js",
-				"--testPathPattern",
-				"./test/functional/index*",
-				"--debug=false",
-				"--verbose",
-				"--useStderr",
-				"--detectOpenHandles"],
-			"cwd": "${workspaceRoot}",
-			"env": {
-				"BABEL_ENV": "testOldEnv",
-				"VERDACCIO_DEBUG": "true",
-				"VERDACCIO_DEBUG_INJECT": "true",
-				"NODE_DEBUG": "TO_DEBUG_REQUEST_REMOVE_THIS_request"
-			},
-			"preLaunchTask": "pre-test",
-			"console": "integratedTerminal",
-			"runtimeExecutable": null,
-			"runtimeArgs": [
-				"--nolazy"
-			],
-		},
-		{
-			"type": "node",
-			"request": "launch",
-			"name": "Verdaccio Compiled",
-			"preLaunchTask": "npm: code:build",
-			"program": "${workspaceRoot}/bin/verdaccio",
-			"args": ["-l", "0.0.0.0:4873"],
-			"console": "integratedTerminal"
-		}
-	]
+  // Use IntelliSense to learn about possible Node.js debug attributes.
+  // Hover to view descriptions of existing attributes.
+  // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Attach",
+      "port": 9229,
+      "request": "attach",
+      "skipFiles": ["<node_internals>/**"],
+      "type": "pwa-node"
+    }
+  ]
 }

.vscode/settings.json

@@ -1,10 +1,10 @@
 // Place your settings in this file to overwrite default and user settings.
 {
-	"files.exclude": {
-		"**/.idea": false,
-		"**/.nyc_output": true,
-		"**/build": true,
-		"**/coverage": true
-	},
-	"typescript.tsdk": "node_modules/typescript/lib"
+  "files.exclude": {
+    "**/build": false,
+    "**/coverage": true,
+    ".idea": true,
+  },
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.formatOnSave": true
 }

.vscode/tasks.json

@@ -1,24 +0,0 @@
-{
-	// See https://go.microsoft.com/fwlink/?LinkId=733558
-	// for the documentation about the tasks.json format
-	"version": "2.0.0",
-	"tasks": [
-		{
-			"type": "npm",
-			"script": "build:webui",
-			"problemMatcher": []
-		},
-		{
-			"type": "npm",
-			"script": "code:build",
-			"problemMatcher": []
-		},
-		{
-			"label": "pre-test",
-			"dependsOn": [
-					"npm: code:build",
-					"npm: test:clean"
-			]
-	}
-	]
-}

.yarnrc.yml

@@ -1,21 +0,0 @@
-defaultSemverRangePrefix: ""
-
-enableGlobalCache: true
-
-enableTelemetry: false
-
-httpRetry: 10
-
-httpTimeout: 100000
-
-nodeLinker: node-modules
-
-npmRegistryServer: "https://registry.verdaccio.org"
-
-plugins:
-  - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs
-    spec: "@yarnpkg/plugin-workspace-tools"
-  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
-    spec: "@yarnpkg/plugin-interactive-tools"
-
-yarnPath: .yarn/releases/yarn-berry.cjs

CODE_OF_CONDUCT.md

@@ -8,19 +8,19 @@ In the interest of fostering an open and welcoming environment, we as contributo
 
 Examples of behavior that contributes to creating a positive environment include:
 
-* Using welcoming and inclusive language
-* Being respectful of differing viewpoints and experiences
-* Gracefully accepting constructive criticism
-* Focusing on what is best for the community
-* Showing empathy towards other community members
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints and experiences
+- Gracefully accepting constructive criticism
+- Focusing on what is best for the community
+- Showing empathy towards other community members
 
 Examples of unacceptable behavior by participants include:
 
-* The use of sexualized language or imagery and unwelcome sexual attention or advances
-* Trolling, insulting/derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or electronic address, without explicit permission
-* Other conduct which could reasonably be considered inappropriate in a professional setting
+- The use of sexualized language or imagery and unwelcome sexual attention or advances
+- Trolling, insulting/derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or electronic address, without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a professional setting
 
 ## Our Responsibilities
 

CONTRIBUTING.md

@@ -1,100 +1,254 @@
-# Contributing to Verdaccio
+# Contributing
 
-> ⚠️ If you intend to file a PR with a new feature, please use the 5.x branch for it 🥰 . master branch is available only for **bug fixing** and dependencies updates.
+> This guidelines refers to the main (`master`) that host the v6.x, if you want to contribute to `5.x` please read the following [link](https://github.com/verdaccio/verdaccio/blob/5.x/CONTRIBUTING.md).
 
-We are happy that you wish to contribute to this project. For that reason, we
-present you with this guide.
+We're happy that you're considering contributing!
 
-Additional information is available on the
-[wiki](https://github.com/verdaccio/verdaccio/wiki).
-
-## Contents
-
-- [Contents](#contents)
-- [How Do I Contribute?](#how-do-i-contribute)
-- [Development](#development)
-- [Reporting Bugs](#reporting-bugs)
-    - [Issue Search](#issue-search)
-    - [Check Website For Solution](#check-website-for-solution)
-    - [Chat](#chat)
-    - [Check If It's Been Fixed](#check-if-its-been-fixed)
-- [Request Features](#request-features)
-    - [Submitting a Pull Request](#submitting-a-pull-request)
-    - [Make Changes and Commit](#make-changes-and-commit)
-- [Update Tests](#update-tests)
-- [Develop Plugins](#develop-plugins)
+To help you getting started we've prepared these guidelines for you, any change matter, just do it:
 
 ## How Do I Contribute?
 
-There are different ways to contribute, each with a different level
-of involvement and technical knowledge required, such as:
+There are many ways to contribute:
 
-* [Reporting Bugs](#reporting-bugs)
-* [Request Features](#request-features)
-* [Develop Plugins](#develop-plugins)
-* [Improve Documentation](http://www.verdaccio.org/docs/en/installation.html)
+- [Report a bug](#reporting-bugs)
+- [Request a feature you think would be great for Verdaccio](#feature-request)
+- [Fixing bugs](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3A%22issue%3A+bug%22)
+- [Test and triage bugs reported by others](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3Aissue_needs_triage)
+- [Working on requested/approved features](https://github.com/verdaccio/verdaccio/issues?q=is%3Aopen+is%3Aissue+label%3A%22topic%3A+feature+request%22+)
+- [Improve the codebase (linting, naming, comments, test descriptions, etc...)](https://github.com/verdaccio/verdaccio/discussions/1461)
+- Improve code coverage for unit testing for every module, [end to end](https://github.com/verdaccio/verdaccio/tree/master/e2e/cli) or [UI test](https://github.com/verdaccio/verdaccio/tree/master/e2e/ui) (with cypress).
 
-**Please read this document carefully. It will help maintainers and readers
-in solving your issue(s), evaluating your feature request, etc.**
+The Verdaccio project is split into several areas, the first three hosted in the main repository:
 
-## Development
+- **Core**: The [core](https://github.com/verdaccio/verdaccio) is the main repository, built with **Node.js**.
+- **Website**: we use [**Docusaurus**](https://docusaurus.io/) for the **website** and if you are familiar with this technology, you might become the official webmaster.
+- **User Interface**: The [user Interface](https://github.com/verdaccio/ui) is based in **react** and **material-ui** and looking for front-end contributors.
+- **Kubernetes and Helm**: Ts the official repository for the [**Helm chart**](https://github.com/verdaccio/charts).
 
-Development guides can be found on the [wiki](https://github.com/verdaccio/verdaccio/wiki):
+> There are other areas to contribute, like [documentation](https://github.com/verdaccio/verdaccio/tree/master/website/docs) or [translations](#translations}).
 
-* [Building the project](https://github.com/verdaccio/verdaccio/wiki/Build-Source-Code)
-* [Running, debugging, and testing](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests)
+## Prepare local setup {#local-setup}
 
-## Reporting Bugs
+**Note**: The size of the Verdaccio project is quite significant. Unzipped it is about 33 MB. However, a full build with all node_modules installed takes about **2.8 GB** of disk space (~190k files)!
 
-We welcome clear, detailed bug reports.
+Verdaccio uses [pnpm](https://pnpm.io) as the package manager for development in this repository.
+
+If you are using pnpm for the first time the [pnpm configuration documentation](https://pnpm.io/configuring) may be useful to avoid any potential problems with the following steps.
+
+**Note**: pnpm uses npm's configuration formats so check that your global `.npmrc` file does not inadvertently disable package locks. In other words, your `.npmrc` file **should not** contain
+
+```
+package-lock=false
+```
+
+This setting would cause the `pnpm install` command to install incorrect versions of package dependencies and the subsequent `pnpm build` step would likely fail.
+
+We use [corepack](https://github.com/nodejs/corepack) to install and use a specific (latest) version of pnpm. Please run the following commands which is use a specific version on Node.js and configure it to use a specific version of pnpm. The version of pnpm is specified in the `package.json` file in `packageManager` field.
+
+```shell
+nvm install
+corepack enable
+```
+
+`pnpm` version will be updated mainly by the maintainers but if you would like to set it to a specific version, you can do so by running the following command:
+
+> `packageManager` at the `package.json` defines the default version to be used.
+
+```shell
+corepack prepare
+```
+
+With pnpm installed, the first step is installing all dependencies:
+
+```shell
+pnpm install
+```
+
+### Building the project
+
+Each package is independent, dependencies must be build first, run:
+
+```shell
+pnpm build
+```
+
+### Running test
+
+```shell
+pnpm test
+```
+
+Verdaccio is a mono repository. To run the tests for for a specific package:
+
+```shell
+cd packages/store
+pnpm test
+```
+
+or an specific test in that package:
+
+```shell
+pnpm test test/merge.dist.tags.spec.ts
+```
+
+or a single test unit:
+
+```shell
+pnpm test test/merge.dist.tags.spec.ts -- -t 'simple'
+```
+
+Coverage reporting is enabled by default, but you can turn it off to speed up
+test runs:
+
+```shell
+pnpm test test/merge.dist.tags.spec.ts -- -t 'simple' --coverage=false
+```
+
+You can enable increased [`debug`](https://www.npmjs.com/package/debug) output:
+
+```shell
+DEBUG=verdaccio:* pnpm test
+```
+
+More details in the debug section
+
+### Running and debugging
+
+> Check the debugging guidelines [here](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio)
+
+We use [`debug`](https://www.npmjs.com/package/debug) to add helpful debugging
+output to the code. Each package has it owns namespace.
+
+#### Developing with local server
+
+To run the application from the source code, ensure the project has been built with `pnpm build`, once this is done, there are few commands that helps to run server:
+
+The command `pnpm start` runs web server on port `8000` and user interface (webpack-server) on port `4873`. This is particularly useful if you want to contribute to the UI, since it runs with hot reload. The request to the server are proxy through webpack proxy support through the port `4873`.
+
+The user interface is split in two packages, the `/packages/plugins/ui-theme` and the `/packages/ui-components`. The `ui-components` package uses _storybook_ in order to develop component, but if you need to reload ui components with `ui-theme` do the following.
+
+Go to `/packages/ui-component` and run `pnpm watch` to enable _babel_ in watch mode, every change on the components will be hot reloaded in combination with the `pnpm start` command.
+
+Any change on the server packages, must be build independently (server do not has hot reload, `pnpm start` should be triggered again).
+
+Any interaction with the server should be done through the port `8000` eg: `npm login --registry http://localhost:8000` .
+
+#### Useful commands
+
+- `pnpm debug`: Run the server in debug mode `--inspect`. UI runs too but without hot reload. For automatic break use `pnpm debug:break`.
+- `pnpm debug:fastify`: To contribute on the [fastify migration](https://github.com/verdaccio/verdaccio/discussions/2155) this is a temporary command for such purpose.
+- `pnpm website`: Build the website, for more commands to run the _website_, run `cd website` and then `pnpm serve`, website will run on port `3000`.
+- `pnpm docker`: Build the docker image. Requires `docker` command available in your system.
+
+#### Debugging compiled code {#debugging-compiled-code}
+
+Currently you can only run pre-compiled packages in debug mode. To enable debug
+while running add the `verdaccio` namespace using the `DEBUG` environment
+variable, like this:
+
+```shell
+DEBUG=verdaccio:* node packages/verdaccio/debug/bootstrap.js
+```
+
+You can filter this output to just the packages you're interested in using
+namespaces:
+
+```shell
+DEBUG=verdaccio:plugin:* node packages/verdaccio/debug/bootstrap.js
+```
+
+The debug code is intended to analyze what is happening under the hood and none
+of the output is sent to the logger module.
+
+> [See the full guide how to debug with Verdaccio](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio)
+
+#### Testing your changes in a local registry {#testing-local-registry}
+
+Once you have perform your changes in the code base, the build and tests passes you can publish a local version:
+
+- Ensure you have built all modules by running `pnpm build` (or the one you have modified)
+- Run `pnpm local:publish:release` to launch a local registry and publish all packages into it. This command will be alive until server is killed (Control Key + C)
+
+```shell
+pnpm build
+pnpm local:publish:release
+```
+
+The last step consist on install globally the package from the local registry which runs on the default port (4873).
+
+```shell
+npm i -g verdaccio --registry=http://localhost:4873
+verdaccio
+```
+
+If you perform more changes in the source code, repeat this process, there is not _hot reloading_ support.
+
+## Feature Request {#feature-request}
+
+New feature requests are welcome. Analyse whether the idea fits within scope of the project. Adding in context and the use-case will really help!
+
+**Please provide:**
+
+- Create a [discussion](https://github.com/verdaccio/verdaccio/discussions/new).
+- A detailed description the advantages of your request.
+- Whether or not it's compatible with `npm`, `pnpm` and [_yarn classic_
+  ](https://github.com/yarnpkg/yarn) or [_yarn modern_
+  ](https://github.com/yarnpkg/berry).
+- A potential implementation or design
+- Whatever else is on your mind! 🤓
+
+## Reporting Bugs {#reporting-bugs}
 
 **Bugs are considered features that are not working as described in
 documentation.**
 
-If you've found a bug in Verdaccio **that isn't a security risk**, please file 
-a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues).
+If you've found a bug in Verdaccio **that isn't a security risk**, please file
+a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues), if you think a potential vulnerability please read the [security policy](https://verdaccio.org/community/security) .
 
-**NOTE: Verdaccio still does not support all npm commands. Some were not
-considered important and others have not been requested yet.**
+> **NOTE: Verdaccio still does not support all npm commands. Some were not
+> considered important and others have not been requested yet.**
 
-### Issue Search
+### What's is not considered a bug?
 
-Search to see if it has already been reported via
-the issue search.
+- _Third party integrations_: proxies integrations, external plugins
+- _Package managers_: If a package manager does not support a specific command
+  or cannot be reproduced with another package manager
+- _Features clearly flagged as not supported_
+- _Node.js issues installation in any platform_: If you cannot install the
+  global package (this is considered external issue)
+- Any ticket which has been flagged as an [external issue
+  ](https://github.com/verdaccio/verdaccio/labels/external-issue)
 
-Additionally, we have labelled questions for easy follow-up as [questions](https://github.com/verdaccio/verdaccio/labels/question).
+If you intend to report a **security** issue, please follow our [Security policy
+guidelines](https://github.com/verdaccio/verdaccio/security/policy).
 
-If so, up-vote it (using GitHub reactions) or add additional helpful details to
-the existing issue to show that it's affecting multiple people.
- 
-### Check Website For Solution
+### Issues {#issues}
 
-Some of the most popular topics can be found in our website(http://www.verdaccio.org/docs/en/installation.html)
+Before reporting a bug please:
 
-### Chat
+- Search for existing issues to see if it has already been reported
+- Look for the **question** label: we have labelled questions for easy follow-up
+  as [questions](https://github.com/verdaccio/verdaccio/labels/question)
 
-Questions can be asked via [Discord](http://chat.verdaccio.org/)
+In case any of those match with your search, up-vote it (using GitHub reactions)
+or add additional helpful details to the existing issue to show that it's
+affecting multiple people.
 
-**Please use the `#questions#` and `#development` channels.**
+### Contributing support
 
-### Check If It's Been Fixed
+Questions can be asked via [Discord](https://discord.gg/7qWJxBf)
 
-Check if the issue has been fixed — try to reproduce it using the latest
-`master` or development branch in the repository.
+**Please use the `#contribute` channel.**
 
-## Request Features
+## Development Guidelines {#development-guidelines}
 
-New feature requests are welcome. Analyse whether the idea fits within scope of
-the project. Then, detail your request, ensuring context and use case is provided.
+It's recommended use a UNIX system for local development, Windows dev local support is not being tested and might not work. To ensure a fast code review and merge, please follow the next guidelines:
 
-**Please provide:**
+Any contribution gives you the right to be part of this organization as _collaborator_ and your avatar will be automatically added to the [contributors page](https://verdaccio.org/contributors).
 
-* A detailed description the advantages of your request
-* Whether or not it's compatible with `npm` and `yarn`
-* A potential implementation or design
-* Whatever else you have in your mind 🤓
+## Pull Request {#pull-request}
 
-### Submitting a Pull Request
+### Submitting a Pull Request {#submit-pull-request}
 
 The following are the steps you should follow when creating a pull request.
 Subsequent pull requests only need to follow step 3 and beyond.
@@ -116,79 +270,145 @@ information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing)
 
 ### Make Changes and Commit
 
-#### Before Commit
+#### Caveats
 
-Before committing, **you must ensure there are no linting errors and
-all tests pass.**
+Feel free to commit as much times you want in your branch, but keep on mind on
+this repository we `git squash` on merge by default, as we like to maintain a
+clean git history.
 
-To do this, run all tests (including e2e):
+#### Before Push {#before-push}
+
+Before committing or push, **you must ensure there are no linting errors and
+all tests passes**. To do verify, run these commands before creating the PR:
 
 ```bash
-yarn test:all
+pnpm lint
+pnpm format
+pnpm build
+pnpm test
 ```
 
-Then, and only then, you can create your pull request.
+> note: eslint and formatting are run separately, keep code formatting
+> before push.
 
-#### Commit Guidelines
+All good? Perfect! You should create the pull request.
 
-We follow the [conventional commit messages](https://conventionalcommits.org/)
-convention in order to automate CHANGELOG generation and to automate
-semantic versioning.
+#### Commit Guidelines {#commits}
 
-For example:
+On a pull request, commit messages are not important, please focus on document properly the pull request content. The commit message will be taken from the pull request title, it is recommended to use lowercase format.
 
-* `feat: A new feature`
-* `fix: A bug fix`
+### Adding a changeset {#changeset}
 
-A commit of the type feat introduces a new feature to the codebase
-(this correlates with MINOR in semantic versioning).
+We use [changesets](https://github.com/atlassian/changesets) in order to
+generate a detailed Changelog as possible.
 
-e.g.:
+Adding a changeset with your Pull Request is essential if you want your
+contribution to get merged (unless it does not affect functionality or
+user-facing content, eg: docs, readme, adding test or typo/lint fixes). To
+create a changeset please run:
 
-```
-feat: xxxxxxxxxx
+```shell
+pnpm changeset
 ```
 
-A commit of the type fix patches a bug in your codebase (this correlates with PATCH in semantic versioning).
-
-e.g.:
+Then select the packages you want to include in your changeset navigating
+through them and press the spacebar to check it, on finish press enter to move
+to the next step.
 
 ```
-fix: xxxxxxxxxx
+🦋  Which packages would you like to include? …
+✔ changed packages
+ changed packages
+  ✔ @verdaccio/api
+  ✔ @verdaccio/auth
+  ✔ @verdaccio/cli
+  ✔ @verdaccio/config
+  ✔ @verdaccio/commons-api
 ```
 
-Commits types such as as `docs:`,`style:`,`refactor:`,`perf:`,`test:`
-and `chore:` are valid but have no effect on versioning. **It would be great if you use them.**
+The next question would be if you want a _major bump_. This is not the usual
+scenario, most likely you want a patch, and in that case press enter 2 times
+(to skip minor)
 
-All commits message are going to be validated when they are created using husky hooks.
+```
+🦋  Which packages should have a major bump? …
+✔ all packages
+  ✔ @verdaccio/config@5.0.0-alpha.0
+```
+
+Once you have the desired bump you need, the CLI will ask for a summary. Here
+you have full freedom on what to include:
+
+```
+🦋  Which packages would you like to include? · @verdaccio/config
+🦋  Which packages should have a major bump? · No items were selected
+🦋  Which packages should have a minor bump? · No items were selected
+🦋  The following packages will be patch bumped:
+🦋  @verdaccio/config@5.0.0-alpha.0
+🦋  Please enter a summary for this change (this will be in the changelogs). Submit empty line to open external editor
+🦋  Summary ›
+```
+
+The last step is to confirm your changeset or abort the operation:
+
+```
+🦋  Is this your desired changeset? (Y/n) · true
+🦋  Changeset added! - you can now commit it
+🦋
+🦋  If you want to modify or expand on the changeset summary, you can find it here
+🦋  info /Users/user/verdaccio.clone/.changeset/light-scissors-smell.md
+```
+
+Once the changeset is added (all will have an unique name) you can freely edit
+using markdown, adding additional information, code snippets or whatever else
+you consider to be relevant.
+
+All that information will be part of the **changelog**. Be concise but
+informative! It's recommended to add your nickname and GitHub link to your
+profile.
 
 **PRs that do not follow the commit message guidelines will not be merged.**
 
-## Update Tests
+### Update Tests
 
 **Any change in source code must include test updates**.
 
-If you need help with how testing works, please [refer to the following guide](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
+If you need help with how testing works, please [refer to the following guide
+](https://github.com/verdaccio/verdaccio/wiki/Running-and-Debugging-tests).
 
 **If you are introducing new features, you MUST include new tests. PRs for
 features without tests will not be merged.**
 
-Things excluded from tests:
-* Documentation
-* Website
-* Build
-* Deployment
-* Assets
-* Flow types
+## Translations {#translations}
 
-## Develop Plugins
+All translations are provided by the **[crowdin](http://crowdin.com)** platform,
+[https://translate.verdaccio.org/](https://translate.verdaccio.org/)
+
+If you want to contribute by adding translations, create an account (GitHub could be used as fast alternative), in the platform you can contribute to two areas, the website or improve User Interface translations.
+
+> Languages with less the 40% of translations available are excluded by the build system.
+
+If a language is not listed, ask for it in the [Discord](https://discord.gg/7qWJxBf) channel #contribute channel.
+
+For adding a new **language** on the UI follow these steps:
+
+1. Ensure the **language** has been enabled, must be visible in the `crowdin` platform.
+2. Find in the explorer the file `en.US.json` in the path `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` and complete the translations, **not need to find approval on this**.
+3. Into the project, add a new field into `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` file, in the section `lng`, the new language, eg: `{ lng: {korean:"Korean"}}`. (This file is English based, once the PR has been merged, this string will be available in crowdin for translate to the targeted language).
+4. Add the language, [flag icon](https://www.npmjs.com/package/country-flag-icons), and the menu key fort he new language eg: `menuKey: 'lng.korean'` to the file `packages/plugins/ui-theme/src/i18n/enabledLanguages.ts`.
+5. For local testing, read `packages/plugins/ui-theme/src/i18n/ABOUT_TRANSLATIONS.md`.
+6. Add a `changeset` file, see more info below.
+
+## Develop Plugins {#develop-plugins}
 
 Plugins are add-ons that extend the functionality of the application.
 
 If you want to develop your own plugin:
 
 1. Check whether there is a legacy Sinopia plugin for the feature that you need
-    via [npmjs](https://www.npmjs.com/search?q=sinopia)
-2. Keep in mind the [life-cycle to load a plugin](https://verdaccio.org/docs/en/dev-plugins)
-3. You are free to host your plugin in your repository or ours (just ask)
-4. Provide a detailed description of your plugin to help users understand it
+   via [npmjs](https://www.npmjs.com/search?q=sinopia)
+2. Keep in mind the [life-cycle to load a plugin
+   ](https://verdaccio.org/docs/en/dev-plugins)
+3. You are free to host your plugin in your repository
+4. Provide a detailed description of your plugin to help users understand how to
+   use it

CONTRIBUTORS.md

@@ -1,41 +0,0 @@
-<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section -->
-<!-- prettier-ignore-start -->
-<!-- markdownlint-disable -->
-<table>
-  <tr>
-    <td align="center"><a href="https://www.linkedin.com/in/jotadeveloper/"><img src="https://avatars0.githubusercontent.com/u/558752?v=4" width="100px;" alt=""/><br /><sub><b>Juan Picado</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Documentation">📖</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=juanpicado" title="Code">💻</a> <a href="#infra-juanpicado" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#eventOrganizing-juanpicado" title="Event Organizing">📋</a> <a href="#blog-juanpicado" title="Blogposts">📝</a> <a href="#maintenance-juanpicado" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://github.com/sergiohgz"><img src="https://avatars3.githubusercontent.com/u/14012309?v=4" width="100px;" alt=""/><br /><sub><b>Sergio Herrera</b></sub></a><br /><a href="#infra-sergiohgz" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-sergiohgz" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://daniel-ruf.de/"><img src="https://avatars1.githubusercontent.com/u/827205?v=4" width="100px;" alt=""/><br /><sub><b>Daniel Ruf</b></sub></a><br /><a href="#security-DanielRuf" title="Security">🛡️</a> <a href="#infra-DanielRuf" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-DanielRuf" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://priscilawebdev.github.io/priscilaoliveira/"><img src="https://avatars1.githubusercontent.com/u/29228205?v=4" width="100px;" alt=""/><br /><sub><b>Priscila Oliveira</b></sub></a><br /><a href="#design-priscilawebdev" title="Design">🎨</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=priscilawebdev" title="Code">💻</a> <a href="#maintenance-priscilawebdev" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="http://ayusharma.github.io/"><img src="https://avatars0.githubusercontent.com/u/6918450?v=4" width="100px;" alt=""/><br /><sub><b>Ayush Sharma</b></sub></a><br /><a href="#infra-ayusharma" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ayusharma" title="Code">💻</a> <a href="#design-ayusharma" title="Design">🎨</a></td>
-    <td align="center"><a href="https://github.com/trentearl"><img src="https://avatars2.githubusercontent.com/u/802857?v=4" width="100px;" alt=""/><br /><sub><b>Trent Earl</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=trentearl" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jmwilkinson"><img src="https://avatars0.githubusercontent.com/u/17836030?v=4" width="100px;" alt=""/><br /><sub><b>jmwilkinson</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jmwilkinson" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/bufferoverflow"><img src="https://avatars2.githubusercontent.com/u/378909?v=4" width="100px;" alt=""/><br /><sub><b>Roger Meier</b></sub></a><br /><a href="#plugin-bufferoverflow" title="Plugin/utility libraries">🔌</a></td>
-    <td align="center"><a href="https://ghuser.io/jamesgeorge007"><img src="https://avatars2.githubusercontent.com/u/25279263?v=4" width="100px;" alt=""/><br /><sub><b>James George</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jamesgeorge007" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/AvailCat"><img src="https://avatars3.githubusercontent.com/u/19658647?v=4" width="100px;" alt=""/><br /><sub><b>AvailCat</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=AvailCat" title="Code">💻</a> <a href="#infra-AvailCat" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="#maintenance-AvailCat" title="Maintenance">🚧</a></td>
-    <td align="center"><a href="https://www.luciusgaitan.com/"><img src="https://avatars0.githubusercontent.com/u/5970350?v=4" width="100px;" alt=""/><br /><sub><b>Lucius Gaitán</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lgaitan" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ramonornela"><img src="https://avatars1.githubusercontent.com/u/187946?v=4" width="100px;" alt=""/><br /><sub><b>Ramon Henrique Ornelas</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ramonornela" title="Code">💻</a></td>
-    <td align="center"><a href="https://people.freebsd.org/~mi/resume/"><img src="https://avatars1.githubusercontent.com/u/1486340?v=4" width="100px;" alt=""/><br /><sub><b>UnitedMarsupials-zz</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=UnitedMarsupials-zz" title="Code">💻</a></td>
-    <td align="center"><a href="http://www.codingintrigue.co.uk/"><img src="https://avatars0.githubusercontent.com/u/9048902?v=4" width="100px;" alt=""/><br /><sub><b>Ryan Graham</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ryan-codingintrigue" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/coolsp"><img src="https://avatars1.githubusercontent.com/u/1246647?v=4" width="100px;" alt=""/><br /><sub><b>coolsp</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=coolsp" title="Code">💻</a></td>
-    <td align="center"><a href="http://ashishsurana.in/"><img src="https://avatars0.githubusercontent.com/u/5610944?v=4" width="100px;" alt=""/><br /><sub><b>Ashish Surana</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=ashishsurana" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/buffaybu"><img src="https://avatars3.githubusercontent.com/u/2025661?v=4" width="100px;" alt=""/><br /><sub><b>Wang Yifei</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=buffaybu" title="Code">💻</a></td>
-    <td align="center"><a href="https://twitter.com/liran_tal"><img src="https://avatars1.githubusercontent.com/u/316371?v=4" width="100px;" alt=""/><br /><sub><b>Liran Tal</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=lirantal" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/brenordr"><img src="https://avatars2.githubusercontent.com/u/19731692?v=4" width="100px;" alt=""/><br /><sub><b>Breno Rodrigues</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=brenordr" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/jachstet-sea"><img src="https://avatars0.githubusercontent.com/u/7993508?v=4" width="100px;" alt=""/><br /><sub><b>jachstet-sea</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=jachstet-sea" title="Code">💻</a></td>
-    <td align="center"><a href="https://patrik.votocek.cz/"><img src="https://avatars1.githubusercontent.com/u/112567?v=4" width="100px;" alt=""/><br /><sub><b>Patrik Votoček</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=Vrtak-CZ" title="Code">💻</a></td>
-  </tr>
-  <tr>
-    <td align="center"><a href="https://github.com/monkeywithacupcake"><img src="https://avatars3.githubusercontent.com/u/7316730?v=4" width="100px;" alt=""/><br /><sub><b>jess</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=monkeywithacupcake" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/toolsofraj"><img src="https://avatars0.githubusercontent.com/u/2507152?v=4" width="100px;" alt=""/><br /><sub><b>toolsofraj</b></sub></a><br /><a href="https://github.com/verdaccio/verdaccio/commits?author=toolsofraj" title="Code">💻</a></td>
-    <td align="center"><a href="https://github.com/ddhp"><img src="https://avatars1.githubusercontent.com/u/1715380?v=4" width="100px;" alt=""/><br /><sub><b>Jian-Chen Chen (jesse)</b></sub></a><br /><a href="#translation-ddhp" title="Translation">🌍</a> <a href="https://github.com/verdaccio/verdaccio/commits?author=ddhp" title="Code">💻</a></td>
-  </tr>
-</table>
-
-<!-- markdownlint-enable -->
-<!-- prettier-ignore-end -->
-<!-- ALL-CONTRIBUTORS-LIST:END -->

Dockerfile

@@ -1,29 +1,26 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:21-alpine as builder
 
-ENV NODE_ENV=production \
-    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
+ENV NODE_ENV=development \
+    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org
 
 RUN apk --no-cache add openssl ca-certificates wget && \
-    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python && \
+    apk --no-cache add g++ gcc libgcc libstdc++ linux-headers make python3 && \
     wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
-    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.25-r0/glibc-2.25-r0.apk && \
-    apk add glibc-2.25-r0.apk
+    wget -q https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.35-r0/glibc-2.35-r0.apk && \
+    apk add --force-overwrite glibc-2.35-r0.apk
 
 WORKDIR /opt/verdaccio-build
 COPY . .
+RUN npm -g i pnpm@8.9.0 && \
+    pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
+    pnpm install --frozen-lockfile --ignore-scripts && \
+    rm -Rf test && \
+    pnpm run build
+# FIXME: need to remove devDependencies from the build    
+# NODE_ENV=production pnpm install --frozen-lockfile --ignore-scripts
+# RUN pnpm install --prod --ignore-scripts
 
-RUN yarn config set npmRegistryServer $VERDACCIO_BUILD_REGISTRY && \
-    yarn config set enableProgressBars false && \
-    yarn config set enableTelemetry false && \
-    yarn install && \
-    yarn lint && \
-    yarn code:docker-build && \
-    yarn cache clean && \
-    yarn workspaces focus --production
-
-
-
-FROM node:14.16.1-alpine
+FROM node:21-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \
@@ -42,10 +39,11 @@ RUN mkdir -p /verdaccio/storage /verdaccio/plugins /verdaccio/conf
 
 COPY --from=builder /opt/verdaccio-build .
 
-ADD conf/docker.yaml /verdaccio/conf/config.yaml
+RUN ls packages/config/src/conf
+ADD packages/config/src/conf/docker.yaml /verdaccio/conf/config.yaml
 
 RUN adduser -u $VERDACCIO_USER_UID -S -D -h $VERDACCIO_APPDIR -g "$VERDACCIO_USER_NAME user" -s /sbin/nologin $VERDACCIO_USER_NAME && \
-    chmod -R +x $VERDACCIO_APPDIR/bin $VERDACCIO_APPDIR/docker-bin && \
+    chmod -R +x $VERDACCIO_APPDIR/packages/verdaccio/bin $VERDACCIO_APPDIR/docker-bin && \
     chown -R $VERDACCIO_USER_UID:root /verdaccio/storage && \
     chmod -R g=u /verdaccio/storage /etc/passwd
 
@@ -57,4 +55,4 @@ VOLUME /verdaccio/storage
 
 ENTRYPOINT ["uid_entrypoint"]
 
-CMD $VERDACCIO_APPDIR/bin/verdaccio --config /verdaccio/conf/config.yaml --listen $VERDACCIO_PROTOCOL://0.0.0.0:$VERDACCIO_PORT
+CMD $VERDACCIO_APPDIR/packages/verdaccio/bin/verdaccio --config /verdaccio/conf/config.yaml --listen $VERDACCIO_PROTOCOL://0.0.0.0:$VERDACCIO_PORT

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2021 Verdaccio contributors
+Copyright (c) 2024 Verdaccio contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -1,8 +1,19 @@
+[![BannerUK](https://cdn.verdaccio.dev/readme/banner-uk.svg)](https://donate.redcrossredcrescent.org/ua/donate/~my-donation?_cv=1)
+
+> Verdaccio stands for **peace**, stop the war, we will be yellow / blue 🇺🇦 until that happens.
+
 ![verdaccio logo](https://cdn.verdaccio.dev/readme/verdaccio@2x.png)
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version 5
+# Version Next (Development branch)
+
+> Looking for Verdaccio 5 version? Check the branch `5.x`
+> The plugins for the `v5.x` that are hosted within this organization are located
+> at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository, while for the `next` version
+> are hosted on this project `./packages/plugins`, keep on mind `next` plugins will eventually would be
+> incompatible with `v5.x` versions.
+> Note that contributing guidelines might be different based on the branch.
 
 [Verdaccio](https://verdaccio.org/) is a simple, **zero-config-required local private npm registry**.
 No need for an entire database just to get started! Verdaccio comes out of the box with
@@ -22,24 +33,61 @@ Google Cloud Storage** or create your own plugin.
 [![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
 
-[![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
+[![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
 ## Install
 
+> Latest Node.js v16 required
+
 Install with npm:
 
 ```bash
-npm install --global verdaccio
+npm install --location=global verdaccio@next
 ```
 
-> Node.js v12 is required for Verdaccio 5
+With `yarn`
 
-Are you still using **Verdaccio 4**?. Check the [migration guide](https://verdaccio.org/blog/2021/04/14/verdaccio-5-migration-guide).
+```bash
+yarn global add verdaccio@next
+```
+
+With `pnpm`
+
+```bash
+pnpm i -g verdaccio@next
+```
+
+or
+
+```bash
+docker pull verdaccio/verdaccio:nightly-master
+```
+
+or with _helm_ [official chart](https://github.com/verdaccio/charts).
+
+```bash
+helm repo add verdaccio https://charts.verdaccio.org
+helm repo update
+helm install verdaccio/verdaccio
+```
+
+Furthermore, you can read the [**Debugging Guidelines**](https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio) and the [**Docker Examples**](https://github.com/verdaccio/verdaccio/tree/master/docker-examples) for more advanced development.
+
+## Plugins
+
+You can develop your own [plugins](https://verdaccio.org/docs/plugins) with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin). Installing [Yeoman](https://yeoman.io/) is required.
+
+```
+npm install --location=global yo
+npm install --location=global generator-verdaccio-plugin
+```
+
+Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.
 
 ## Donations
 
-Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider making a donation - **your logo might end up in this readme.** 😉
+Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider do a long support donation - **and your logo will be on this section of the readme.**
 
 **[Donate](https://github.com/sponsors/verdaccio)** 💵👍🏻 starting from _$1/month_ or just one single contribution.
 
@@ -65,19 +113,31 @@ If you want to use a modified version of some 3rd-party package (for example, yo
 ### E2E Testing
 
 Verdaccio has proved to be a lightweight registry that can be
-booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **alfresco** or **eclipse theia**. You can read more in dedicated article to E2E in our blog.
+booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **babel.js**, **angular-cli** or **docusaurus**. You can read more in [here](https://verdaccio.org/docs/e2e).
 
-## Talks
+Furthermore, here few examples how to start:
 
-### **Node.js Dependency Confusion Attacks & Vulnerabilities in Go Binaries**.
+- [e2e-ci-example-gh-actions](https://github.com/juanpicado/e2e-ci-example-gh-actions)
+- [verdaccio-end-to-end-tests](https://github.com/juanpicado/verdaccio-end-to-end-tests)
+- [verdaccio-fork](https://github.com/juanpicado/verdaccio-fork)
 
-[RSVP](https://www.meetup.com/es-ES/devseccon-germany/events/276990087) to join the talk.
+## Watch our Videos
 
-[![verdaccio openjsworld](https://cdn.verdaccio.dev/readme/devseccon.png)](https://www.meetup.com/es-ES/devseccon-germany/events/276990087/)
+**Node Congress 2022, February 2022, Online Free**
+
+<div>
+   <a href="https://portal.gitnation.org/contents/five-ways-of-taking-advantage-of-verdaccio-your-private-and-proxy-nodejs-registry">
+     <img src="https://cdn.verdaccio.dev/readme/nodejscongress2022.jpg" alt="nodejs" width="200"/>
+  </a>
+</div>
 
 You might want to check out as well our previous talks:
 
-- [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado\***](https://www.youtube.com/watch?v=oVCjDWeehAQ)
+- [Using Docker and Verdaccio to make Integration Testing Easy - **Docker All Hands #4 December - 2021**](https://www.youtube.com/watch?v=zRI0skF1f8I)
+- [**Juan Picado** – Testing the integrity of React components by publishing in a private registry - React Finland - 2021](https://www.youtube.com/watch?v=bRKZbrlQqLY&t=16s&ab_channel=ReactFinland)
+- [BeerJS Cba Meetup No. 53 May 2021 - **Juan Picado**](https://www.youtube.com/watch?v=6SyjqBmS49Y&ab_channel=BeerJSCba)
+- [Node.js Dependency Confusion Attacks - April 2021 - **Juan Picado**](https://www.youtube.com/watch?v=qTRADSp3Hpo)
+- [**OpenJS World 2020** about \*Cover your Projects with a Multi purpose Lightweight Node.js Registry - **Juan Picado**](https://www.youtube.com/watch?v=oVCjDWeehAQ)
 - [ViennaJS Meetup - Introduction to Verdaccio by **Priscila Olivera** and **Juan Picado**](https://www.youtube.com/watch?v=hDIFKzmoCa)
 - [Open Source? trivago - Verdaccio (**Ayush** and **Juan Picado**) January 2020](https://www.youtube.com/watch?v=A5CWxJC9xzc)
 - [GitNation Open Source Stage - How we have built a Node.js Registry with React - **Juan Picado** December 2019](https://www.youtube.com/watch?v=gpjC8Qp9B9A)
@@ -94,7 +154,7 @@ verdaccio
 You would need set some npm configuration, this is optional.
 
 ```bash
-$ npm set registry http://localhost:4873/
+npm set registry http://localhost:4873/
 ```
 
 For one-off commands or to avoid setting the registry globally:
@@ -118,7 +178,7 @@ npm adduser --registry http://localhost:4873
 > if you use HTTPS, add an appropriate CA information ("null" means get CA list from OS)
 
 ```bash
-$ npm set ca null
+npm set ca null
 ```
 
 #### 2. publish your package
@@ -135,15 +195,11 @@ Below are the most commonly needed information,
 every aspect of Docker and verdaccio is [documented separately](https://www.verdaccio.org/docs/en/docker.html)
 
 ```
-docker pull verdaccio/verdaccio
+docker pull verdaccio/verdaccio:nightly-master
 ```
 
 Available as [tags](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
 
-```
-docker pull verdaccio/verdaccio:5.x-next
-```
-
 ### Running verdaccio using Docker
 
 To run the docker container:
@@ -152,7 +208,7 @@ To run the docker container:
 docker run -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio
 ```
 
-Docker examples are available [in this repository](https://github.com/verdaccio/docker-examples).
+Docker examples are available [in this repository](https://github.com/verdaccio/verdaccio/tree/master/docker-examples).
 
 ## Compatibility
 
@@ -190,7 +246,20 @@ Verdaccio aims to support all features of a standard npm client that make sense
 
 If you want to report a security vulnerability, please follow the steps which we have defined for you in our [security policy](https://github.com/verdaccio/verdaccio/security/policy).
 
-## Core Team
+## Special Thanks
+
+Thanks to the following companies to help us to achieve our goals providing free open source licenses. Every company provides enough resources to move this project forward.
+
+| Company      | Logo                                                                                                                            | License                                                                           |
+| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
+| JetBrains    | [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)                                                     | JetBrains provides licenses for products for active maintainers, renewable yearly |
+| Crowdin      | [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)                                                              | Crowdin provides platform for translations                                        |
+| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                        | BrowserStack provides plan to run End to End testing for the UI                   |
+| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                      | Netlify provides pro plan for website deployment                                  |
+| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                     | Algolia provides search services for the website                                  |
+| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application) | Docker offers unlimited pulls and unlimited egress to any and all users           |
+
+## Maintainers
 
 | [Juan Picado](https://github.com/juanpicado)                                   | [Ayush Sharma](https://github.com/ayusharma)                             | [Sergio Hg](https://github.com/sergiohgz)                                 |
 | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------ | ------------------------------------------------------------------------- |
@@ -205,8 +274,10 @@ You can find and chat with then over Discord, click [here](http://chat.verdaccio
 ## Who is using Verdaccio?
 
 - [create-react-app](https://github.com/facebook/create-react-app/blob/master/CONTRIBUTING.md#customizing-e2e-registry-configuration) _(+86.2k ⭐️)_
+- [Grafana](https://github.com/grafana/grafana/search?q=verdaccio) _(+54.9k ⭐️)_
 - [Gatsby](https://github.com/gatsbyjs/gatsby) _(+49.2k ⭐️)_
 - [Babel.js](https://github.com/babel/babel) _(+38.5k ⭐️)_
+- [Docusaurus](https://github.com/facebook/docusaurus) _(+34k ⭐️)_
 - [Vue CLI](https://github.com/vuejs/vue-cli) _(+27.4k ⭐️)_
 - [Angular CLI](https://github.com/angular/angular-cli) _(+24.3k ⭐️)_
 - [Uppy](https://github.com/transloadit/uppy) _(+23.8k ⭐️)_
@@ -214,14 +285,14 @@ You can find and chat with then over Discord, click [here](http://chat.verdaccio
 - [Aurelia Framework](https://github.com/aurelia/framework) _(+11.6k ⭐️)_
 - [pnpm](https://github.com/pnpm/pnpm) _(+10.1k ⭐️)_
 - [ethereum/web3.js](https://github.com/ethereum/web3.js) _(+9.8k ⭐️)_
+- [Webiny CMS](https://github.com/webiny/webiny-js) _(+6.6k ⭐️)_
 - [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
-- [webiny-js](https://github.com/webiny/webiny-js) _(+4.3k ⭐️)_
 - [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
 - [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
 - [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
 - [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)
 
-🤓 Don't be shy, you also can be in [the list](https://github.com/verdaccio/website/blob/master/docs/who-is-using.md).
+🤓 Don't be shy, add yourself to this readme.
 
 ## Open Collective Sponsors
 
@@ -244,16 +315,6 @@ Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com
 
 [![backers](https://opencollective.com/verdaccio/backers.svg?width=890)](https://opencollective.com/verdaccio#backers)
 
-## Special Thanks
-
-Thanks to the following companies to help us to achieve our goals providing free open source licenses.
-
-[![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)
-[![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)
-[![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)
-
-Verdaccio also is part of to the [Docker Open Source Program](https://www.docker.com/blog/expanded-support-for-open-source-software-projects/).
-
 ## Contributors
 
 This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
@@ -268,7 +329,7 @@ If you have any issue you can try the following options, do no desist to ask or
 - [Donations](https://github.com/sponsors/verdaccio)
 - [Reporting an issue](https://github.com/verdaccio/verdaccio/issues/new/choose)
 - [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
-- [Chat](http://chat.verdaccio.org/)
+- [Chat](https://discord.gg/7qWJxBf)
 - [Logos](https://verdaccio.org/docs/en/logo)
 - [Docker Examples](https://github.com/verdaccio/verdaccio/tree/master/docker-examples)
 - [FAQ](https://github.com/verdaccio/verdaccio/discussions/categories/q-a)

SECURITY.md

@@ -4,13 +4,13 @@
 
 The following table describes the versions of this project that are currently supported with security updates:
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 2.x   | :x:                  |
-| 3.x   | :x:   |
-| 4.x   | :white_check_mark: (until 1st July 2021)  |
-| 5.x   | :white_check_mark:   |
-
+| Version   | Supported          |
+| --------- | ------------------ |
+| 2.x       | :x:                |
+| 3.x       | :x:                |
+| 4.x       | :x:                |
+| 5.x       | :white_check_mark: |
+| 6.x alpha | :x:                |
 
 ## Responsible disclosure security policy
 
@@ -28,11 +28,11 @@ At Verdaccio, we consider the security of our systems a top priority. But no mat
 
 If you discover a security vulnerability, please use one of the following means of communications to report it to us:
 
-* Report the security issue to the Node.js Security WG through the [HackerOne program](https://hackerone.com/nodejs-ecosystem) for ecosystem modules on npm, or to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
+- Report the security issue to [Snyk Security Team](https://snyk.io/vulnerability-disclosure). They will help triage the security issue and work with all involved parties to remediate and release a fix.
 
 Note that time-frame and processes are subject to each program’s own policy.
 
-* Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://verdaccio.nyc3.digitaloceanspaces.com/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
+- Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://cdn.verdaccio.dev/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
 
 Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
 

babel.config.js

@@ -1,22 +0,0 @@
-module.exports = {
-  presets: [
-    [
-      '@babel/env',
-      {
-        targets: {
-          node: '12',
-        },
-      },
-    ],
-    '@babel/typescript',
-  ],
-  plugins: [
-    'babel-plugin-dynamic-import-node',
-    '@babel/proposal-class-properties',
-    '@babel/proposal-object-rest-spread',
-    '@babel/plugin-proposal-optional-chaining',
-    '@babel/plugin-proposal-nullish-coalescing-operator',
-    '@babel/syntax-dynamic-import',
-  ],
-  ignore: ['**/*.d.ts'],
-};

bin/verdaccio

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-
-require('../build/lib/cli');

codecov.yml

@@ -4,7 +4,7 @@ codecov:
 coverage:
   precision: 2
   round: down
-  range: "80...85"
+  range: '80...85'
 
   status:
     project:
@@ -24,6 +24,6 @@ parsers:
       macro: no
 
 comment:
-  layout: "diff,flags,tree"
+  layout: 'diff,flags,tree'
   behavior: default
-  require_changes: no
+  require_changes: no

conf/README.md

@@ -1,9 +0,0 @@
-## Looking 👀 for Documentation?
-
-This directory host the default configuration file, but you can find more here:
-
-* [https://verdaccio.org/docs/en/installation](https://verdaccio.org/docs/en/installation)
-* [Chat with us](http://chat.verdaccio.org) <- You need a Discord account
-* [Follow us on Twitter](https://twitter.com/verdaccio_npm)
-
-Enjoy Verdaccio !

conf/default.yaml

@@ -1,87 +0,0 @@
-#
-# This is the default config file. It allows all users to do anything,
-# so don't use it on production systems.
-#
-# Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
-#
-
-# path to a directory with all packages
-storage: ./storage
-# path to a directory with plugins to include
-plugins: ./plugins
-
-web:
-  title: Verdaccio
-  # comment out to disable gravatar support
-  # gravatar: false
-  # by default packages are ordercer ascendant (asc|desc)
-  # sort_packages: asc
-  # convert your UI to the dark side
-  # darkMode: true
-
-# translate your registry, api i18n not available yet
-# i18n:
-# list of the available translations https://github.com/verdaccio/ui/tree/master/i18n/translations
-#   web: en-US
-
-auth:
-  htpasswd:
-    file: ./htpasswd
-    # Maximum amount of users allowed to register, defaults to "+inf".
-    # You can set this to -1 to disable registration.
-    # max_users: 1000
-
-# a list of other known repositories we can talk to
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-
-packages:
-  '@*/*':
-    # scoped packages
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-    proxy: npmjs
-
-  '**':
-    # allow all users (including non-authenticated users) to read and
-    # publish all packages
-    #
-    # you can specify usernames/groupnames (depending on your auth plugin)
-    # and three keywords: "$all", "$anonymous", "$authenticated"
-    access: $all
-
-    # allow all known users to publish/publish packages
-    # (anyone can register by default, remember?)
-    publish: $authenticated
-    unpublish: $authenticated
-
-    # if package is not available locally, proxy requests to 'npmjs' registry
-    proxy: npmjs
-
-# You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
-# A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
-# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
-server:
-  keepAliveTimeout: 60
-
-middlewares:
-  audit:
-    enabled: true
-
-# log settings
-logs: { type: stdout, format: pretty, level: http }
-
-#experiments:
-#  # support for npm token command
-#  token: false
-#  # support for the new v1 search endpoint, functional by incomplete read more on ticket 1732
-#  search: false
-#  # disable writing body size to logs, read more on ticket 1912
-#  bytesin_off: false
-
-# This affect the web and api (not developed yet)
-#i18n:
-#web: en-US

conf/docker.yaml

@@ -1,90 +0,0 @@
-#
-# This is the config file used for the docker images.
-# It allows all users to do anything, so don't use it on production systems.
-#
-# Do not configure host and port under `listen` in this file
-# as it will be ignored when using docker.
-# see https://verdaccio.org/docs/en/docker#docker-and-custom-port-configuration
-#
-# Look here for more config file examples:
-# https://github.com/verdaccio/verdaccio/tree/master/conf
-#
-
-# path to a directory with all packages
-storage: /verdaccio/storage/data
-# path to a directory with plugins to include
-plugins: /verdaccio/plugins
-
-web:
-  # WebUI is enabled as default, if you want disable it, just uncomment this line
-  #enable: false
-  title: Verdaccio
-  # comment out to disable gravatar support
-  # gravatar: false
-  # by default packages are ordercer ascendant (asc|desc)
-  # sort_packages: asc
-  # darkMode: true
-
-# translate your registry, api i18n not available yet
-# i18n:
-# list of the available translations https://github.com/verdaccio/ui/tree/master/i18n/translations
-#   web: en-US
-
-auth:
-  htpasswd:
-    file: /verdaccio/storage/htpasswd
-    # Maximum amount of users allowed to register, defaults to "+infinity".
-    # You can set this to -1 to disable registration.
-    # max_users: 1000
-
-# a list of other known repositories we can talk to
-uplinks:
-  npmjs:
-    url: https://registry.npmjs.org/
-
-packages:
-  '@*/*':
-    # scoped packages
-    access: $all
-    publish: $authenticated
-    unpublish: $authenticated
-    proxy: npmjs
-
-  '**':
-    # allow all users (including non-authenticated users) to read and
-    # publish all packages
-    #
-    # you can specify usernames/groupnames (depending on your auth plugin)
-    # and three keywords: "$all", "$anonymous", "$authenticated"
-    access: $all
-
-    # allow all known users to publish/publish packages
-    # (anyone can register by default, remember?)
-    publish: $authenticated
-    unpublish: $authenticated
-
-    # if package is not available locally, proxy requests to 'npmjs' registry
-    proxy: npmjs
-
-# You can specify HTTP/1.1 server keep alive timeout in seconds for incoming connections.
-# A value of 0 makes the http server behave similarly to Node.js versions prior to 8.0.0, which did not have a keep-alive timeout.
-# WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
-server:
-  keepAliveTimeout: 60
-
-middlewares:
-  audit:
-    enabled: true
-
-# log settings
-logs: { type: stdout, format: pretty, level: http }
-
-#experiments:
-#  # support for npm token command
-#  token: false
-#  # support for the new v1 search endpoint, functional by incomplete read more on ticket 1732
-#  search: false
-
-# This affect the web and api (not developed yet)
-#i18n:
-#web: en-US

conf/full.yaml

@@ -1,10 +0,0 @@
-## This file is deprecated and the content does not exist anymore
-## we highly recommend either visit
-## https://verdaccio.org/docs/en/configuration
-## or read the local file
-## https://github.com/verdaccio/website/tree/master/docs/config.md
-
-## contribute with translations
-
-## You can contribute translating documentation through the crowdin platform
-## https://crowdin.com/project/verdaccio

crowdin.yaml

@@ -0,0 +1,19 @@
+project_id: 295539
+api_token_env: CROWDIN_VERDACCIO_API_KEY
+# token local testing
+# api_token: token_secret
+
+preserve_hierarchy: true
+
+files:
+  - source: /packages/plugins/ui-theme/src/i18n/crowdin/*.json
+    translation: '/packages/plugins/ui-theme/src/i18n/download_translations/%locale%/%original_file_name%'
+  - source: /website/i18n/en/**/*
+    translation: '/website/i18n/%locale%/**/%original_file_name%'
+  - source: /website/docs/**/*
+    translation: '/website/i18n/%locale%/docusaurus-plugin-content-docs/current/**/%original_file_name%'
+    ignore: [/website/docs/api/**/*]
+  - source: /website/versioned_docs/**/*
+    translation: /website/i18n/%locale%/docusaurus-plugin-content-docs/**/%original_file_name%
+    ignore: [/website/versioned_docs/version-5.x/api/**/*, /website/versioned_docs/version-6.x/api/**/*]
+   

debug/bootstrap.js

@@ -1,6 +0,0 @@
-// this file aims to help local debugging with hot transpilation
-// it requires BABEL_ENV=registry set as env variable
-require('@babel/register')({
-	extensions: [".ts", ".js"]
-});
-require('../src/lib/cli');

docker-examples/README.md

@@ -1,39 +1,20 @@
 # Docker + Kubernetes Examples
 
-This folder aims to create a collection of Docker and Kubernetes examples.
-
-For more information about the **Helm** Chart, please check it [owns repo](https://github.com/verdaccio/charts).
-
 > Feel free to contribute whether you consider any use case is relevant for the public in general.
 
 ## Examples
 
 The following examples aim to be demonstrative and can be either improved or updated.
 
-### Verdaccio 4
+- [v4 examples](v4/README.md)
+- [v5 examples](v5/README.md)
+- [v6 examples](v6/README.md)
 
-#### Proxies
+## Additional data
 
-- [Docker + Apache + Verdaccio](v4/apache-verdaccio/README.md)
-- [Docker + Nginx + Verdaccio](v4/reverse_proxy/nginx/README.md)
-- [Docker + https-portal Example](v4/https-portal-example/README.md)
+This folder aims to create a collection of Docker and Kubernetes examples.
 
-#### Plugins
-
-- [Docker + Uplinks Multi Registry](v4/multi-registry-uplink/README.md)
-- [Docker + Local Storage](v4/docker-local-storage-volume/readme.md)
-- [Docker + External Plugins](v4/docker-plugin-external/README.md)
-
-#### Auth
-
-- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](v4/ldap-verdaccio/readme.md) by **@kopax**
-- [Docker + Gitlab](gitlab-verdaccio/README.md)
-- [Docker + Active Directory](https://github.com/Mateus-Oli/verdaccio-ad-docker)
-
-#### Storage
-
-- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](v4/amazon-s3-docker-example/v4/README.md)
-- [Docker + Minio](https://github.com/barolab/verdaccio-minio/tree/master/example)
+For more information about the **Helm** Chart, please check it [owns repo](https://github.com/verdaccio/charts).
 
 ### Kubernetes
 
@@ -42,8 +23,7 @@ The following examples aim to be demonstrative and can be either improved or upd
 
 ### External
 
-- [
-  Verdaccio examples for Google Cloud and K8s setups. https://github.com/papezt/verdaccio-examples](https://github.com/papezt/verdaccio-examples)
+- [Verdaccio examples for Google Cloud and K8s setups. https://github.com/papezt/verdaccio-examples](https://github.com/papezt/verdaccio-examples)
 
 ### Articles
 

docker-examples/v4/README.md

@@ -0,0 +1,24 @@
+# Verdaccio 4
+
+#### Proxies
+
+- [Docker + Apache + Verdaccio](apache-verdaccio/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
+- [Docker + https-portal Example](https-portal-example/README.md)
+
+#### Plugins
+
+- [Docker + Uplinks Multi Registry](multi-registry-uplink/README.md)
+- [Docker + Local Storage](docker-local-storage-volume/readme.md)
+- [Docker + External Plugins](docker-plugin-external/README.md)
+
+#### Auth
+
+- [Docker + LDAP (OpenLDAP) Server + Verdaccio 4](ldap-verdaccio/readme.md) by **@kopax**
+- [Docker + Gitlab](gitlab-verdaccio/README.md)
+- [Docker + Active Directory](https://github.com/Mateus-Oli/verdaccio-ad-docker)
+
+#### Storage
+
+- [Docker + AWS S3 Plugin(localstack) + Verdaccio 4](amazon-s3-docker-example/README.md)
+- [Docker + Minio](https://github.com/barolab/verdaccio-minio/tree/master/example)

docker-examples/v4/amazon-s3-docker-example/README.md

@@ -4,6 +4,9 @@ Verdaccio running with [Localstack](https://github.com/localstack/localstack) pr
 
 ## Usage
 
+> You might need to create bucket manually here
+> aws --endpoint-url=http://localhost:4572 s3 mb s3://localstack.s3.plugin.test
+
 ```
 docker-compose up --force-recreate --build --always-recreate-deps
 ```

docker-examples/v4/amazon-s3-docker-example/conf/config.yaml

@@ -13,7 +13,6 @@ uplinks:
 
 packages:
   '@*/*':
-    # scoped packages
     access: $all
     publish: $all
     proxy: npmjs

docker-examples/v4/amazon-s3-docker-example/docker-compose.yaml

@@ -14,7 +14,7 @@ services:
     links:
       - localstack-s3
   localstack-s3:
-    image: localstack/localstack:latest
+    image: localstack/localstack:0.10.9
     container_name: localstack-s3-1
     environment:
       - DEBUG=0

docker-examples/v4/amazon-s3-docker-example/localStack-resources/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:2.7
+FROM python:3.7-alpine
 
 ENV AWS_ACCESS_KEY_ID='[something]'
 ENV AWS_SECRET_ACCESS_KEY='[something]'
@@ -7,4 +7,4 @@ ENV AWS_S3_ENDPOINT='http://localstack-s3:4572'
 RUN pip install awscli
 COPY entry.sh /entry.sh
 RUN chmod +x /entry.sh
-ENTRYPOINT ["/entry.sh"]
+ENTRYPOINT ["/entry.sh"]