mirrors/pkg-proxy
Watch
1
0
Fork
You've already forked pkg-proxy
 1
mirror of https://github.com/git-pkgs/proxy.git synced 2026-08-23 12:24:57 -04:00
Code Issues Releases Packages Wiki Activity
pkg-proxy/internal/handler
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
oscar-broman 4fa903e01e
 Enforce cooldown on artifact downloads (#240) 
Cooldown filtering only ran when rewriting metadata, so a version could
be missing from the npm packument and the PyPI simple index while its
tarball stayed reachable. Lockfiles record artifact URLs verbatim, so
npm ci and pinned pip requirements reach handleDownload without ever
requesting metadata.

The shared artifact path has no publish time to check against, since
updateCacheDB upserts versions without PublishedAt and the column is
only set by enrichment. Each handler now resolves the publish time from
metadata it already fetches and returns 404 while a version is inside
the window. Versions with no usable publish time are still served, as
they are when filtering metadata.
2026-08-10 09:27:03 +01:00
..
cargo.go fix(upstream): honor npm and Cargo overrides (#200) 2026-07-26 19:11:24 +01:00
cargo_test.go fix(upstream): honor npm and Cargo overrides (#200) 2026-07-26 19:11:24 +01:00
composer.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
composer_test.go fix(composer): resolve *-dev versions from the ~dev metadata file (#174) 2026-06-26 07:51:08 -04:00
conan.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
conan_test.go Fix all golangci-lint issues across the codebase (#32) 2026-03-18 10:59:29 +00:00
conda.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
conda_test.go Bump registries to v0.6.0 and replace internal/cooldown (#120) 2026-05-13 06:45:33 +01:00
container.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
container_test.go Apply 'go fmt' as suggested in CONTRIBUTING.md. 2026-04-18 07:43:22 -04:00
cran.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
cran_test.go Hello world 2026-01-20 22:00:31 +00:00
debian.go Make Debian upstream repository configurable. (#229) 2026-08-05 17:48:00 +01:00
debian_test.go Make Debian upstream repository configurable. (#229) 2026-08-05 17:48:00 +01:00
download_test.go Make Debian upstream repository configurable. (#229) 2026-08-05 17:48:00 +01:00
filename_download.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
gem.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
gem_test.go Bump registries to v0.6.0 and replace internal/cooldown (#120) 2026-05-13 06:45:33 +01:00
go.go Preserve Go proxy fallback for missing modules 2026-07-12 18:48:39 +00:00
go_test.go Preserve Go proxy fallback for missing modules 2026-07-12 18:48:39 +00:00
gradle.go add support for Gradle prometheus metrics (#124) 2026-05-22 12:09:00 +01:00
gradle_test.go add support for Gradle prometheus metrics (#124) 2026-05-22 12:09:00 +01:00
handler.go fix(upstream): honor npm and Cargo overrides (#200) 2026-07-26 19:11:24 +01:00
handler_test.go Canonicalize cooldown lookup PURLs to match config 2026-07-17 18:11:47 -07:00
hex.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
hex_test.go Bump registries to v0.6.0 and replace internal/cooldown (#120) 2026-05-13 06:45:33 +01:00
integrity.go Verify cached artifacts on read (#111) 2026-05-03 10:36:28 +01:00
integrity_test.go Verify cached artifacts on read (#111) 2026-05-03 10:36:28 +01:00
julia.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
julia_test.go Add Julia Pkg server support (#117) 2026-05-13 06:46:35 +01:00
maven.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
maven_test.go Update Gradle cache with the configurable plugin support (#114) 2026-05-22 17:05:20 +01:00
notfound_ecosystems_test.go Make Debian upstream repository configurable. (#229) 2026-08-05 17:48:00 +01:00
notfound_test.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
npm.go Enforce cooldown on artifact downloads (#240) 2026-08-10 09:27:03 +01:00
npm_test.go Enforce cooldown on artifact downloads (#240) 2026-08-10 09:27:03 +01:00
nuget.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
nuget_test.go Bump registries to v0.6.0 and replace internal/cooldown (#120) 2026-05-13 06:45:33 +01:00
path_traversal_test.go Check for path traversal after URL decoding (#108) 2026-05-03 09:07:16 +01:00
pub.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
pub_test.go Bump registries to v0.6.0 and replace internal/cooldown (#120) 2026-05-13 06:45:33 +01:00
pypi.go Enforce cooldown on artifact downloads (#240) 2026-08-10 09:27:03 +01:00
pypi_test.go Enforce cooldown on artifact downloads (#240) 2026-08-10 09:27:03 +01:00
read_metadata_test.go Make metadata size limit configurable (closes #149) (#150) 2026-06-02 07:59:00 +01:00
rpm.go fix: proper handling of upstream registry 404s (#209) 2026-07-26 19:07:46 +01:00
rpm_test.go Fix all golangci-lint issues across the codebase (#32) 2026-03-18 10:59:29 +00:00