npmpackage.info

Gathering detailed insights and metrics for verdaccio-htpasswd

Other packages similar to verdaccio-htpasswd

@anddev-oss/verdaccio-htpasswd-azure

0.0.6

htpasswd auth plugin for Verdaccio that saves in Azure Blob

verdaccio-group-htpasswd

1.0.0

Custom auth plugin

verdaccio-plugin-auth-htpasswd

0.0.5

htpasswd auth plugin

verdaccio-appgeekhtpasswd

1.0.2

verdaccio htpasswd auth plugin

Gathering detailed insights and metrics for verdaccio-htpasswd

verdaccio-htpasswd - 10.5.5 | npmpackage.info

verdaccio-htpasswd

🏰 Core dependencies and plugins for verdaccio 6.x branch ⚠️ DEPRECATED

10.5.5

MIT

TypeScript

21.22 kB

30,347,783 4.1

Installations

npm install verdaccio-htpasswd

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=12

Node Version

16.20.0

NPM Version

8.19.4 Score

96.8

Supply Chain

94.9

Quality

95.7

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

0

Total

657

Closed

144

Merged

513

Issues

Open

9

Total

63

Closed

54

Releases

137

@verdaccio/local-storage@10.5.0

Updated on Jun 29, 2025

verdaccio-memory@10.4.0

Updated on Jun 29, 2025

@verdaccio/active-directory@10.3.0

Updated on Jun 29, 2025

@verdaccio/local-storage-legacy@11.1.0

Updated on Jun 29, 2025

verdaccio-auth-memory@10.3.0

Updated on Jun 29, 2025

@verdaccio/local-storage@10.4.0

Updated on Jun 29, 2025

View All 137 releases

Languages

TypeScript

JavaScript

Dockerfile

TypeScript (97.7%)

JavaScript (2.13%)

Dockerfile (0.17%)

Developer

verdaccio

Download Statistics

Total Downloads

30,347,783

Last Day

23,211

Last Week

299,874

Last Month

1,306,909

Last Year

11,687,170

GitHub Statistics

MIT License

84 Stars

1,783 Commits

62 Forks

7 Watchers

12 Branches

84 Contributors

Updated on Jun 29, 2025

Bundle Size

54.32 kB

Minified

21.22 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://opencollective.com/verdaccio

Maintainers

View All 84 Contributors

Package Meta Information

Latest Version

10.5.5

Package Id

verdaccio-htpasswd@10.5.5

Unpacked Size

64.46 kB

Size

17.68 kB

File Count

NPM Version

8.19.4

Node Version

16.20.0

Published on

Apr 21, 2023

Total Downloads

Cumulative downloads

Total Downloads

30,347,783

Last Day

17.3%

23,211

Compared to previous day

Last Week

-6.9%

299,874

Compared to previous week

Last Month

-0.4%

1,306,909

Compared to previous month

Last Year

66%

11,687,170

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@verdaccio/file-locking apache-md5 bcryptjs http-errors debug unix-crypt-td-js

Dev Dependencies

@types/bcryptjs @verdaccio/legacy-types mockdate

MIT

Verdaccio Module For User Auth Via Htpasswd

verdaccio-htpasswd is a default authentication plugin for the Verdaccio.

Plugin only valid for verdaccio v5.x

Install

As simple as running:

$ npm install -g verdaccio-htpasswd

Configure

auth:
    htpasswd:
        file: ./htpasswd
        # Maximum amount of users allowed to register, defaults to "+infinity".
        # You can set this to -1 to disable registration.
        #max_users: 1000
        # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
        # Default algorithm is crypt.
        #algorithm: bcrypt
        # Rounds number for "bcrypt", will be ignored for other algorithms.
        # Setting this value higher will result in password verification taking longer.
        #rounds: 10
        # Log a warning if the password takes more then this duration in milliseconds to verify.
        #slow_verify_ms: 200

Bcrypt rounds

It is important to note that when using the default bcrypt algorithm and setting the rounds configuration value to a higher number then the default of 10, that verification of a user password can cause significantly increased CPU usage and additional latency in processing requests.

If your Verdaccio instance handles a large number of authenticated requests using username and password for authentication, the rounds configuration value may need to be decreased to prevent excessive CPU usage and request latency.

Also note that setting the rounds configuration value to a value that is too small increases the risk of successful brute force attack. Auth0 has a blog article that provides an overview of how bcrypt hashing works and some best practices.

Logging In

To log in using NPM, run:

    npm adduser --registry  https://your.registry.local

Generate htpasswd username/password combination

If you wish to handle access control using htpasswd file, you can generate username/password combination form here and add it to htpasswd file.

How does it work?

The htpasswd file contains rows corresponding to a pair of username and password separated with a colon character. The password is encrypted using the UNIX system's crypt method and may use MD5 or SHA1.

Useful Links

License

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

4.1

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More