verdaccio.yaml

#   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-
#  / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \
# `-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'
#
#       Configuration of a local NPM registry for testing
#
#   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-.   .-.-
#  / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \ \ / / \
# `-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'   `-`-'

storage: /verdaccio/storage/data
plugins: /verdaccio/plugins

# https://verdaccio.org/docs/webui
web:
  title: LayerZero.NPM
  darkMode: true
  showFooter: false
  showSettings: false
  showThemeSwitch: false
  favicon: https://layerzero.network/favicon-32x32.png
  primary_color: "#a77dff"
  logo: https://avatars.githubusercontent.com/u/90789833?s=200&v=4

# https://verdaccio.org/docs/configuration#authentication
auth:
  htpasswd:
    file: /verdaccio/storage/htpasswd
    algorithm: bcrypt
    max_users: 1000

# https://verdaccio.org/docs/configuration#uplinks
uplinks:
  npmjs:
    url: https://registry.npmjs.org/

# https://verdaccio.org/docs/protect-your-dependencies/
# https://verdaccio.org/docs/configuration#packages
packages:
  #
  # We will not proxy the packages from this repo
  #
  # Since we want to proxy some of the NPM packages,
  # we cannot just use a pattern like "@layerzerolabs/*"
  #

  # We will not proxy any *devtools* packages
  "@layerzerolabs/**devtools**": &local-package-rules
    access: $all

    # allow all known users to publish/publish packages
    #
    # this does not mean that anyone can publish to NPM
    # (in fact verdaccio will not publish to NPM ever),
    # this just means we don't need to be authenticated to the local registry
    # in order to publish packages
    publish: $all
    unpublish: $all

  # We will not proxy any toolbox* packages
  "@layerzerolabs/toolbox-**": *local-package-rules

  # We will not proxy the contract packages
  "@layerzerolabs/oapp-evm": *local-package-rules
  "@layerzerolabs/oapp-evm-upgradeable": *local-package-rules
  "@layerzerolabs/oft-evm": *local-package-rules
  "@layerzerolabs/oft-evm-upgradeable": *local-package-rules
  "@layerzerolabs/onft-evm": *local-package-rules

  # And we will not proxy any of the CLI packages
  "build-lz-options": *local-package-rules
  "create-lz-oapp": *local-package-rules
  "decode-lz-options": *local-package-rules
  "export-deployments": *local-package-rules
  "verify-contract": *local-package-rules

  # The rest of the packages we'll proxy to the public NPM repo
  "**":
    <<: *local-package-rules

    # if package is not available locally, proxy requests to 'npmjs' registry
    proxy: npmjs

# https://verdaccio.org/docs/configuration#server
server:
  keepAliveTimeout: 60

# https://verdaccio.org/docs/configuration#offline-publish
publish:
  allow_offline: true

middlewares:
  audit:
    enabled: true

# https://verdaccio.org/docs/logger
log: { type: stdout, format: pretty, level: http }

# https://verdaccio.org/docs/configuration/#max-body-size
max_body_size: 100mb