verdaccio/verdaccio
Verdaccio
Verdaccio is a registry server that implements the npm protocol to store, serve, and manage software dependencies. It functions as a private registry proxy for Node.js packages, allowing organizations to host internal packages while caching public modules.
The system features a pluggable middleware architecture that enables the extension of registry behavior through custom plugins for authentication and storage backends. It supports scalable remote data management by offloading package files to S3-compatible object stores.
The platform covers package lifecycle management, including publishing, tagging, and deprecation, as well as the ability to override public packages with local versions. It provides integrated user identity management, dependency auditing for security vulnerabilities, and package discovery tools.
Features
- npm Protocol Implementations - Implements the npm protocol to serve as a registry server for storing and managing software dependencies.
- Private Package Registries - Hosts and serves proprietary software packages internally to ensure they remain isolated from public registries.
- Package Registry Integrations - Implements the capability to aggregate and retrieve software packages from multiple upstream organizational registries through a single interface.
- Upstream Proxy Caching - Storing copies of external packages locally to speed up installations and ensure builds work when upstream servers are offline.
- Proxy Caches - Caches copies of remote packages locally to reduce installation latency and ensure availability during upstream outages.
- Upstream Proxying - Combines multiple upstream package sources into a single internal endpoint to simplify dependency management.
- Registry Aggregators - Combines multiple upstream package sources into a single unified endpoint for streamlined client retrieval.
- Package Managers - Manages the full package lifecycle including publishing, tagging, and deprecating package versions.
- Registry Access Controls - Provides granular authentication and authorization policies to regulate who can publish or install packages.
- Token-Based Authentication - Regulates user access and permissions using cryptographic identity tokens and integrated third-party providers.
- User Access Management - Manages user registration, password updates, and authentication tokens to regulate registry access.
- User Identity Management - Handles the lifecycle of user identities, including registration and ownership transfers for package maintainers.
- Cloud Object Storage - Offloads package binary files to S3-compatible object stores for scalable remote data management.
- Pluggable Storage Drivers - Provides an extensible architecture allowing the registration of custom storage backends, including local filesystems and S3-compatible stores.
- Upstream Overrides - Allows publishing modified versions of public packages to a private registry to apply urgent fixes immediately.
- Version Overrides - Allows publishing local versions of third-party packages to apply immediate fixes without waiting for upstream updates.
- S3-Compatible Storage Adapters - Supports offloading package files to S3-compatible object stores for scalable remote data management.
- Middleware-Based Request Pipelines - Uses a modular chain of pluggable middleware components to process incoming registry requests for authentication and routing.
- External Identity Provider Integration - Integrates with third-party identity providers to manage user login and access permissions.
- Dependency Vulnerability Scanning - Checks installed packages for known security vulnerabilities by processing audit requests.
- Extensible Plugin Architectures - Features a modular system that supports the injection of custom logic for authentication and storage via external plugins.
- Plugin Architectures - Implements a modular architecture that allows core registry behaviors to be extended via dynamically loaded components.
- Registry Extensions - Supports the creation of custom plugins to add specialized logic and new capabilities to the registry server.
- Registry Middleware - Features a pluggable middleware architecture to extend registry behavior via custom plugins for authentication and storage.
- Package Management - Private lightweight NPM registry.
- Registry Management - Lightweight proxy registry for private package hosting.
- Node.js - Listed in the “Node.js 项目” section of the Great Open Source Project awesome list.
