mirror of
https://github.com/go-gitea/gitea.git
synced 2026-08-04 15:27:32 +00:00
6487d14855
Fixes #21624 Adds the npm package version metadata fields that Gitea's npm registry was previously dropping on publish, and implements the `npm deprecate` command, which Gitea did not accept before. ### New / pass-through metadata fields The following are now parsed from the publish payload, persisted in the stored `npm.Metadata`, and re-emitted on the abbreviated version manifest returned to npm clients: - `hasInstallScript` — auto-detected from `scripts.preinstall` / `scripts.install` / `scripts.postinstall` (also honors a client-supplied value). Without this flag, `npm install` skips lifecycle scripts. - `_hasShrinkwrap` — authoritatively derived by inspecting the uploaded tarball for a top-level `*/npm-shrinkwrap.json` entry. Client-supplied values are ignored. Decompression failures fall back to `false` and do not block publish (integrity has already been validated). - `engines` (`map[string]string`) - `cpu`, `os` (`[]string`) - `directories` (`map[string]string`) - `funding` (`any`; preserves the spec's string / object / array shape) - `acceptDependencies` (`map[string]string`) - `deprecated` (`string`) `peerDependenciesMeta` was already in the stored struct but is now exercised by tests. ### `npm deprecate` support `npm deprecate <pkg-spec> <message>` PUTs the package document to the same URL as publish but with no `_attachments`. The router now detects that shape and routes to a new handler that updates each affected version's stored `Metadata.Deprecated` via `packages_model.UpdateVersion`. An empty message clears the flag (undeprecate). Unknown versions are silently skipped, matching npm's behavior. No new routes were added. Supported invocations include: - `npm deprecate my-thing@"< 0.2.3" "critical bug fixed in v0.2.3"` - `npm deprecate my-thing@1.x "1.x is no longer supported"` - `npm deprecate my-thing@1.0.0 ""` (undeprecate) --------- Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: bircni <bircni@icloud.com>
125 lines
4.1 KiB
Go
125 lines
4.1 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package npm
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"encoding/hex"
|
|
"fmt"
|
|
"net/url"
|
|
"sort"
|
|
|
|
packages_model "gitea.dev/models/packages"
|
|
npm_module "gitea.dev/modules/packages/npm"
|
|
"gitea.dev/modules/setting"
|
|
)
|
|
|
|
func createPackageMetadataResponse(registryURL string, pds []*packages_model.PackageDescriptor) *npm_module.PackageMetadata {
|
|
sort.Slice(pds, func(i, j int) bool {
|
|
return pds[i].SemVer.LessThan(pds[j].SemVer)
|
|
})
|
|
|
|
versions := make(map[string]*npm_module.PackageMetadataVersion)
|
|
distTags := make(map[string]string)
|
|
for _, pd := range pds {
|
|
versions[pd.SemVer.String()] = createPackageMetadataVersion(registryURL, pd)
|
|
|
|
for _, pvp := range pd.VersionProperties {
|
|
if pvp.Name == npm_module.TagProperty {
|
|
distTags[pvp.Value] = pd.Version.Version
|
|
}
|
|
}
|
|
}
|
|
|
|
latest := pds[len(pds)-1]
|
|
|
|
metadata := latest.Metadata.(*npm_module.Metadata)
|
|
|
|
return &npm_module.PackageMetadata{
|
|
ID: latest.Package.Name,
|
|
Name: latest.Package.Name,
|
|
DistTags: distTags,
|
|
Description: metadata.Description,
|
|
Readme: metadata.Readme,
|
|
Homepage: metadata.ProjectURL,
|
|
Author: npm_module.User{Name: metadata.Author},
|
|
License: metadata.License,
|
|
Versions: versions,
|
|
Repository: metadata.Repository,
|
|
}
|
|
}
|
|
|
|
func createPackageMetadataVersion(registryURL string, pd *packages_model.PackageDescriptor) *npm_module.PackageMetadataVersion {
|
|
hashBytes, _ := hex.DecodeString(pd.Files[0].Blob.HashSHA512)
|
|
|
|
metadata := pd.Metadata.(*npm_module.Metadata)
|
|
|
|
return &npm_module.PackageMetadataVersion{
|
|
ID: fmt.Sprintf("%s@%s", pd.Package.Name, pd.Version.Version),
|
|
Name: pd.Package.Name,
|
|
Version: pd.Version.Version,
|
|
Description: metadata.Description,
|
|
Author: npm_module.User{Name: metadata.Author},
|
|
Homepage: metadata.ProjectURL,
|
|
License: metadata.License,
|
|
Dependencies: metadata.Dependencies,
|
|
BundleDependencies: metadata.BundleDependencies,
|
|
DevDependencies: metadata.DevelopmentDependencies,
|
|
PeerDependencies: metadata.PeerDependencies,
|
|
PeerDependenciesMeta: metadata.PeerDependenciesMeta,
|
|
OptionalDependencies: metadata.OptionalDependencies,
|
|
Readme: metadata.Readme,
|
|
Bin: metadata.Bin,
|
|
HasInstallScript: metadata.HasInstallScript,
|
|
HasShrinkwrap: metadata.HasShrinkwrap,
|
|
Engines: metadata.Engines,
|
|
CPU: metadata.CPU,
|
|
OS: metadata.OS,
|
|
Directories: metadata.Directories,
|
|
Funding: metadata.Funding,
|
|
AcceptDependencies: metadata.AcceptDependencies,
|
|
Deprecated: metadata.Deprecated,
|
|
Dist: npm_module.PackageDistribution{
|
|
Shasum: pd.Files[0].Blob.HashSHA1,
|
|
Integrity: "sha512-" + base64.StdEncoding.EncodeToString(hashBytes),
|
|
Tarball: fmt.Sprintf("%s/%s/-/%s/%s", registryURL, url.QueryEscape(pd.Package.Name), url.PathEscape(pd.Version.Version), url.PathEscape(pd.Files[0].File.LowerName)),
|
|
},
|
|
}
|
|
}
|
|
|
|
func createPackageSearchResponse(pds []*packages_model.PackageDescriptor, total int64) *npm_module.PackageSearch {
|
|
objects := make([]*npm_module.PackageSearchObject, 0, len(pds))
|
|
for _, pd := range pds {
|
|
metadata := pd.Metadata.(*npm_module.Metadata)
|
|
|
|
scope := metadata.Scope
|
|
if scope == "" {
|
|
scope = "unscoped"
|
|
}
|
|
|
|
objects = append(objects, &npm_module.PackageSearchObject{
|
|
Package: &npm_module.PackageSearchPackage{
|
|
Scope: scope,
|
|
Name: metadata.Name,
|
|
Version: pd.Version.Version,
|
|
Date: pd.Version.CreatedUnix.AsLocalTime(),
|
|
Description: metadata.Description,
|
|
Author: npm_module.User{Name: metadata.Author},
|
|
Publisher: npm_module.User{Name: pd.Owner.Name},
|
|
Maintainers: []npm_module.User{}, // npm cli needs this field
|
|
Keywords: metadata.Keywords,
|
|
Links: &npm_module.PackageSearchPackageLinks{
|
|
Registry: setting.AppURL + "api/packages/" + pd.Owner.Name + "/npm",
|
|
Homepage: metadata.ProjectURL,
|
|
},
|
|
},
|
|
})
|
|
}
|
|
|
|
return &npm_module.PackageSearch{
|
|
Objects: objects,
|
|
Total: total,
|
|
}
|
|
}
|