0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2025-01-06 22:40:26 -05:00
verdaccio/packages/plugins/audit
Juan Picado 9fc2e79611
feat(plugin): improve plugin loader (#3370)
* feat(plugin): implement scope package support plugins

* feat(plugin): improve plugin loader

* chore: fix build

* chore: cover config path case

* chore: async ui thene plugin

* chore: store async plugin

* chore: refactor plugin loader auth

* feat: filter refactoring

* chore: remove old plugin loader

* chore: add changeset

* chore: add docs

* chore: refactor relative plugin loader

* Update user.jwt.spec.ts

* Update user.jwt.spec.ts
2022-09-16 08:02:08 +02:00
..
src feat(plugin): improve plugin loader (#3370) 2022-09-16 08:02:08 +02:00
tests feat!: replace deprecated request dependency by got (#3100) 2022-07-29 20:51:45 +02:00
.babelrc refactor: relocate verdaccio-audit plugin (#1976) 2021-04-09 17:54:22 +02:00
CHANGELOG.md chore: update versions (6-next) (#3334) 2022-08-28 13:32:17 +02:00
jest.config.js feat!: replace deprecated request dependency by got (#3100) 2022-07-29 20:51:45 +02:00
LICENSE refactor: relocate verdaccio-audit plugin (#1976) 2021-04-09 17:54:22 +02:00
package.json chore: update versions (6-next) (#3350) 2022-09-04 11:56:23 +02:00
README.md refactor: relocate verdaccio-audit plugin (#1976) 2021-04-09 17:54:22 +02:00
tsconfig.build.json refactor: relocate verdaccio-audit plugin (#1976) 2021-04-09 17:54:22 +02:00
tsconfig.json feat!: replace deprecated request dependency by got (#3100) 2022-07-29 20:51:45 +02:00

verdaccio-audit

🛡🔬 npmjs audit support for verdaccio

verdaccio (latest) Known Vulnerabilities backers discord MIT node

Requirements

  • verdaccio@3.x or higher
 npm install --global verdaccio-audit

Usage

To enable it you need to add this to your configuration file.

middlewares:
  audit:
    enabled: true
    strict_ssl: true # optional, defaults to true

Strict SSL

In some scenarios it may be necessary to disable SSL certificate validation. Setting strict_ssl to false will disable these checks, but will make all connections passing through this plugin inherently insecure.

Disclaimer

This plugin is experimental and unstable. Please report any issue you found.

License

MIT (http://www.opensource.org/licenses/mit-license.php)