pkg-proxy

1,094 commits 25 branches 18 tags 7.7 MiB

Author	SHA1	Message	Date
Andrew Nesbitt	8ed0edb90a	Extract portable npm metadata transformations npm metadata rewriting depended on handler.Proxy, which pulls SQL drivers, cloud SDKs and metrics into its import graph. Move the transformation into internal/metadata/npm with explicit policy, evaluation time, public URL and hosted-version inputs, and share the JSON scanner between npm and Composer through internal/jsonscan. Rebased onto main: rewritten tarball URLs are still logged once per document, now through an OnTarballsRewritten callback that reports the count.	2026-10-25 22:21:37 +01:00

Author

SHA1

Message

Date

Andrew Nesbitt

8ed0edb90a

Extract portable npm metadata transformations

npm metadata rewriting depended on handler.Proxy, which pulls SQL
drivers, cloud SDKs and metrics into its import graph. Move the
transformation into internal/metadata/npm with explicit policy,
evaluation time, public URL and hosted-version inputs, and share the
JSON scanner between npm and Composer through internal/jsonscan.

Rebased onto main: rewritten tarball URLs are still logged once per
document, now through an OnTarballsRewritten callback that reports the
count.

2026-10-25 22:21:37 +01:00

Renamed from internal/handler/npm_denylist.go (Previous history)