fix: npm7 audit fix and bulk endpoint (#2426)

* fix: npm7 audit fix and bulk endpoint

* chore: update registry

* chore: update registry

.github/workflows/docker-publish-pre-check.yml

@@ -11,7 +11,7 @@ jobs:
     - name: Build
       run: docker build .
       env:
-        VERDACCIO_BUILD_REGISTRY: https://registry.verdaccio.org
+        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
 
   testVerdaccio:
     name: Test Verdaccio Publish

.pnp.js

@@ -151,7 +151,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["ts-node", "virtual:7f7b3df50ee4b7b1719ad19fad11505dc2788f3227a7e5cc9ca19f71d8cb309c9d33b532ea2b2b60ab65abf6cc12153df4643c5e6e17d01ea0ae0492723bb4b4#npm:10.2.0"],
             ["typescript", "patch:typescript@npm%3A4.1.3#builtin<compat/typescript>::version=4.1.3&hash=a45b0e"],
             ["validator", "npm:13.6.0"],
-            ["verdaccio-audit", "npm:10.0.0"],
+            ["verdaccio-audit", "npm:10.0.1"],
             ["verdaccio-auth-memory", "npm:10.0.0"],
             ["verdaccio-htpasswd", "npm:10.0.0"],
             ["verdaccio-memory", "npm:10.0.0"]
@@ -13197,6 +13197,13 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
         }]
       ]],
       ["node-fetch", [
+        ["npm:2.6.0", {
+          "packageLocation": "./.yarn/cache/node-fetch-npm-2.6.0-29c7a53447-dd9f586a9f.zip/node_modules/node-fetch/",
+          "packageDependencies": [
+            ["node-fetch", "npm:2.6.0"]
+          ],
+          "linkType": "HARD",
+        }],
         ["npm:2.6.1", {
           "packageLocation": "./.yarn/cache/node-fetch-npm-2.6.1-46c670dbc1-cbb171635e.zip/node_modules/node-fetch/",
           "packageDependencies": [
@@ -17065,7 +17072,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["ts-node", "virtual:7f7b3df50ee4b7b1719ad19fad11505dc2788f3227a7e5cc9ca19f71d8cb309c9d33b532ea2b2b60ab65abf6cc12153df4643c5e6e17d01ea0ae0492723bb4b4#npm:10.2.0"],
             ["typescript", "patch:typescript@npm%3A4.1.3#builtin<compat/typescript>::version=4.1.3&hash=a45b0e"],
             ["validator", "npm:13.6.0"],
-            ["verdaccio-audit", "npm:10.0.0"],
+            ["verdaccio-audit", "npm:10.0.1"],
             ["verdaccio-auth-memory", "npm:10.0.0"],
             ["verdaccio-htpasswd", "npm:10.0.0"],
             ["verdaccio-memory", "npm:10.0.0"]
@@ -17074,12 +17081,14 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
         }]
       ]],
       ["verdaccio-audit", [
-        ["npm:10.0.0", {
-          "packageLocation": "./.yarn/cache/verdaccio-audit-npm-10.0.0-449c810834-60969a3c26.zip/node_modules/verdaccio-audit/",
+        ["npm:10.0.1", {
+          "packageLocation": "./.yarn/cache/verdaccio-audit-npm-10.0.1-b900394416-1b3203c893.zip/node_modules/verdaccio-audit/",
           "packageDependencies": [
-            ["verdaccio-audit", "npm:10.0.0"],
+            ["verdaccio-audit", "npm:10.0.1"],
+            ["body-parser", "npm:1.19.0"],
             ["express", "npm:4.17.1"],
-            ["request", "npm:2.88.2"]
+            ["https-proxy-agent", "npm:5.0.0"],
+            ["node-fetch", "npm:2.6.0"]
           ],
           "linkType": "HARD",
         }]

.yarnrc.yml

@@ -8,7 +8,7 @@ httpRetry: 10
 
 httpTimeout: 100000
 
-npmRegistryServer: "https://registry.verdaccio.org"
+npmRegistryServer: "https://registry.npmjs.org"
 
 plugins:
   - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs

Dockerfile

@@ -1,7 +1,7 @@
 FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.17.5-alpine as builder
 
 ENV NODE_ENV=production \
-    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org  \
+    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org  \
     HUSKY_SKIP_INSTALL=1 \
     CI=true \
     HUSKY_DEBUG=1

package.json

@@ -57,7 +57,7 @@
     "request": "2.88.0",
     "semver": "7.3.5",
     "validator": "13.6.0",
-    "verdaccio-audit": "10.0.0",
+    "verdaccio-audit": "10.0.1",
     "verdaccio-htpasswd": "10.0.0"
   },
   "devDependencies": {