Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
simon chrzanowski 69313c26d9 Serve hosted-only npm scopes and Composer vendors from pushed packages alone ... A package the upstream doesn't know is served from its pushed versions, but the upstream is still asked about it. Once someone publishes the same name there, their versions are listed next to the pushed ones and a version range can resolve to them. hosted.npm_scopes and hosted.composer_vendors (PROXY_HOSTED_NPM_SCOPES, PROXY_HOSTED_COMPOSER_VENDORS) name namespaces whose packages are served from pushed versions alone. Their metadata is built from what was pushed, npm latest included, and anything not pushed answers 404. The upstream is never asked about them. Packages in other namespaces are proxied as before. The npm metadata handler's decisions about pushed versions move into serveLocalMetadata. Refs #133 Refs #134		2026-10-14 13:23:19 +02:00
..
config.go	Serve hosted-only npm scopes and Composer vendors from pushed packages alone	2026-10-14 13:23:19 +02:00
config_test.go	Merge pull request #472 from simonchrz/fix/artifact-size-limits	2026-10-14 12:19:53 +01:00
denylist.go	feat: add exact-version package denylist	2026-09-20 14:42:30 +05:30
denylist_test.go	feat: add exact-version package denylist	2026-09-20 14:42:30 +05:30
hosted.go	Serve hosted-only npm scopes and Composer vendors from pushed packages alone	2026-10-14 13:23:19 +02:00
hosted_test.go	Serve hosted-only npm scopes and Composer vendors from pushed packages alone	2026-10-14 13:23:19 +02:00
retention.go	Add age-based retention for cached artifacts (#428)	2026-10-12 09:06:01 +01:00
retention_test.go	Add age-based retention for cached artifacts (#428)	2026-10-12 09:06:01 +01:00