mirror of
https://github.com/verdaccio/verdaccio.git
synced 2025-01-27 22:59:51 -05:00
b121e3662f
* build: update deps dompurify, esbuild-loader, envinfo, express-rate-limit, fastify, handlebars, jsdom * build: remove unused devDep wait-on * build: update dep http-status-codes * build: update devDeps @typescript-eslint/*; deps aws-sdk & memfs * build: update devDep terser-webpack-plugin * build: update devDep eslint-plugin-prettier * build: update dev/devDeps node-fetch, react-hook-form * build: update e2e-cli deps npm & pnpm * build: update website devDev sass * build: update ui-theme devDep github-markdown-css * build: update logger dep pino minor version * build: update web devDep node-html-parser * build: remove some legacy flow-typed cruft * style: eslint-config-airbnb-typescript => @verdaccio/eslint-config; use prettier width 100 in website * fix: attempt eslint fix in Features.tsx as suggested by @semoal; website eslint still 1 error * fix: attempt to fix eslint warn about hooks usage Co-authored-by: Sergio Moreno <22656541+semoal@users.noreply.github.com> |
||
---|---|---|
.. | ||
src | ||
tests | ||
.babelrc | ||
CHANGELOG.md | ||
jest.config.js | ||
LICENSE | ||
package.json | ||
README.md | ||
tsconfig.build.json | ||
tsconfig.json |
verdaccio-audit
🛡🔬 npmjs audit support for verdaccio
Requirements
- verdaccio@3.x or higher
npm install --global verdaccio-audit
Usage
To enable it you need to add this to your configuration file.
middlewares:
audit:
enabled: true
strict_ssl: true # optional, defaults to true
Strict SSL
In some scenarios it may be necessary to disable SSL certificate validation. Setting strict_ssl to false will disable these checks, but will make all connections passing through this plugin inherently insecure.
Disclaimer
This plugin is experimental and unstable. Please report any issue you found.