mirror of
https://github.com/pnpm/pnpm.git
synced 2026-06-27 17:35:30 -04:00
bd5390e24e
Add feature-gated pnpr auth backends so deployments can build with libsql, PostgreSQL, or MySQL support instead of locking the registry to one database driver. The auth state still resolves to the existing UserBackend and TokenBackend trait objects. Configuration now accepts backend.libsql, backend.postgres/backend.postgresql, or backend.mysql and rejects selecting multiple shared databases. PostgreSQL and MySQL use a shared SQLx-backed auth implementation with driver-specific placeholder syntax. The shared auth schema uses common column types, and pnpr avoids SQLite-only upsert syntax in auth and verdict-cache writes.
270 lines
16 KiB
TOML
270 lines
16 KiB
TOML
[workspace]
|
|
resolver = "2"
|
|
members = ["pacquet/crates/*", "pacquet/tasks/*", "pnpr/crates/*"]
|
|
|
|
[workspace.package]
|
|
authors = ["Yagiz Nizipli <yagiz@nizipli.com"]
|
|
description = "Pacquet"
|
|
edition = "2024"
|
|
homepage = "https://github.com/pnpm/pacquet"
|
|
keywords = ["nodejs", "package", "manager", "pnpm", "npm"]
|
|
license = "MIT"
|
|
repository = "https://github.com/pnpm/pacquet"
|
|
|
|
[workspace.dependencies]
|
|
# Crates
|
|
pacquet-pnpr-client = { path = "pacquet/crates/pnpr-client" }
|
|
pacquet-catalogs-config = { path = "pacquet/crates/catalogs-config" }
|
|
pacquet-catalogs-protocol-parser = { path = "pacquet/crates/catalogs-protocol-parser" }
|
|
pacquet-catalogs-resolver = { path = "pacquet/crates/catalogs-resolver" }
|
|
pacquet-catalogs-types = { path = "pacquet/crates/catalogs-types" }
|
|
pacquet-cli = { path = "pacquet/crates/cli" }
|
|
pacquet-cmd-shim = { path = "pacquet/crates/cmd-shim" }
|
|
pacquet-crypto-hash = { path = "pacquet/crates/crypto-hash" }
|
|
pacquet-crypto-shasums-file = { path = "pacquet/crates/crypto-shasums-file" }
|
|
pacquet-engine-runtime-bun-resolver = { path = "pacquet/crates/engine-runtime-bun-resolver" }
|
|
pacquet-engine-runtime-deno-resolver = { path = "pacquet/crates/engine-runtime-deno-resolver" }
|
|
pacquet-engine-runtime-node-resolver = { path = "pacquet/crates/engine-runtime-node-resolver" }
|
|
pacquet-env-installer = { path = "pacquet/crates/env-installer" }
|
|
pacquet-env-replace = { path = "pacquet/crates/env-replace" }
|
|
pacquet-fs = { path = "pacquet/crates/fs" }
|
|
pacquet-registry = { path = "pacquet/crates/registry" }
|
|
pacquet-tarball = { path = "pacquet/crates/tarball" }
|
|
pacquet-testing-utils = { path = "pacquet/crates/testing-utils" }
|
|
pacquet-package-manifest = { path = "pacquet/crates/package-manifest" }
|
|
pacquet-package-manager = { path = "pacquet/crates/package-manager" }
|
|
pacquet-package-is-installable = { path = "pacquet/crates/package-is-installable" }
|
|
pacquet-lockfile = { path = "pacquet/crates/lockfile" }
|
|
pacquet-lockfile-preferred-versions = { path = "pacquet/crates/lockfile-preferred-versions" }
|
|
pacquet-lockfile-verification = { path = "pacquet/crates/lockfile-verification" }
|
|
pacquet-modules-yaml = { path = "pacquet/crates/modules-yaml" }
|
|
pacquet-network = { path = "pacquet/crates/network" }
|
|
pacquet-config = { path = "pacquet/crates/config" }
|
|
pacquet-config-dir = { path = "pacquet/crates/config-dir" }
|
|
pacquet-config-parse-overrides = { path = "pacquet/crates/config-parse-overrides" }
|
|
pacquet-default-reporter = { path = "pacquet/crates/default-reporter" }
|
|
pacquet-executor = { path = "pacquet/crates/executor" }
|
|
pacquet-exportable-manifest = { path = "pacquet/crates/exportable-manifest" }
|
|
pacquet-directory-fetcher = { path = "pacquet/crates/directory-fetcher" }
|
|
pacquet-git-fetcher = { path = "pacquet/crates/git-fetcher" }
|
|
pacquet-deps-path = { path = "pacquet/crates/deps-path" }
|
|
pacquet-detect-libc = { path = "pacquet/crates/detect-libc" }
|
|
pacquet-diagnostics = { path = "pacquet/crates/diagnostics" }
|
|
pacquet-graph-hasher = { path = "pacquet/crates/graph-hasher" }
|
|
pacquet-hooks = { path = "pacquet/crates/hooks" }
|
|
pacquet-store-dir = { path = "pacquet/crates/store-dir" }
|
|
pacquet-reporter = { path = "pacquet/crates/reporter" }
|
|
pacquet-patching = { path = "pacquet/crates/patching" }
|
|
pacquet-real-hoist = { path = "pacquet/crates/real-hoist" }
|
|
pacquet-resolving-default-resolver = { path = "pacquet/crates/resolving-default-resolver" }
|
|
pacquet-resolving-deps-resolver = { path = "pacquet/crates/resolving-deps-resolver" }
|
|
pacquet-resolving-git-resolver = { path = "pacquet/crates/resolving-git-resolver" }
|
|
pacquet-resolving-jsr-specifier-parser = { path = "pacquet/crates/resolving-jsr-specifier-parser" }
|
|
pacquet-resolving-local-resolver = { path = "pacquet/crates/resolving-local-resolver" }
|
|
pacquet-resolving-npm-resolver = { path = "pacquet/crates/resolving-npm-resolver" }
|
|
pacquet-resolving-parse-wanted-dependency = { path = "pacquet/crates/resolving-parse-wanted-dependency" }
|
|
pacquet-resolving-resolver-base = { path = "pacquet/crates/resolving-resolver-base" }
|
|
pacquet-resolving-tarball-resolver = { path = "pacquet/crates/resolving-tarball-resolver" }
|
|
pacquet-workspace = { path = "pacquet/crates/workspace" }
|
|
pacquet-workspace-manifest-writer = { path = "pacquet/crates/workspace-manifest-writer" }
|
|
pacquet-workspace-projects-filter = { path = "pacquet/crates/workspace-projects-filter" }
|
|
pacquet-workspace-projects-graph = { path = "pacquet/crates/workspace-projects-graph" }
|
|
pacquet-workspace-range-resolver = { path = "pacquet/crates/workspace-range-resolver" }
|
|
pacquet-workspace-spec = { path = "pacquet/crates/workspace-spec" }
|
|
pacquet-workspace-state = { path = "pacquet/crates/workspace-state" }
|
|
|
|
# Tasks
|
|
pacquet-registry-mock = { path = "pacquet/tasks/registry-mock" }
|
|
|
|
# Registry (sibling project — pnpm-compatible registry server)
|
|
pnpr = { path = "pnpr/crates/pnpr" }
|
|
pnpr-fixtures = { path = "pnpr/crates/pnpr-fixtures" }
|
|
|
|
# Dependencies
|
|
async-recursion = { version = "1.1.1" }
|
|
async-trait = { version = "0.1.83" }
|
|
axum = { version = "0.8.7", default-features = false, features = [
|
|
"http1",
|
|
"tokio",
|
|
"json",
|
|
"matched-path",
|
|
"original-uri",
|
|
] }
|
|
clap = { version = "4", features = ["derive", "string"] }
|
|
command-extra = { version = "1.0.0" }
|
|
base64 = { version = "0.22.1" }
|
|
bcrypt = { version = "0.19.1" }
|
|
bytes = { version = "1.11.0" }
|
|
chrono = { version = "0.4.44", default-features = false, features = ["clock"] }
|
|
dashmap = { version = "6.2.1" }
|
|
derive_more = { version = "2.1.1", features = ["full"] }
|
|
dialoguer = { version = "0.12.0", default-features = false }
|
|
diffy = { version = "0.5.0" }
|
|
dunce = { version = "1.0.5" }
|
|
home = { version = "0.5.12" }
|
|
httpdate = { version = "1.0.3" }
|
|
ignore = { version = "0.4.25" }
|
|
indexmap = { version = "2.14.0", features = ["serde"] }
|
|
insta = { version = "1.47.2", features = ["yaml", "glob", "walkdir"] }
|
|
itertools = { version = "0.14.0" }
|
|
libsql = { version = "0.9.30", default-features = false, features = ["core", "remote", "replication"] }
|
|
futures-util = { version = "0.3.32" }
|
|
flate2 = { version = "1.1.9" }
|
|
gethostname = { version = "1" }
|
|
getrandom = { version = "0.4.2" }
|
|
miette = { version = "7.6.0", features = ["fancy"] }
|
|
num_cpus = { version = "1.17.0" }
|
|
object_store = { version = "0.13", features = ["aws"] }
|
|
os_display = { version = "0.1.4" }
|
|
owo-colors = { version = "4", features = ["supports-colors"] }
|
|
reflink-copy = { version = "0.1.29" }
|
|
junction = { version = "2.0.0" }
|
|
libc = { version = "0.2.186" }
|
|
reqwest = { version = "0.13", default-features = false, features = [
|
|
"gzip",
|
|
"hickory-dns",
|
|
"json",
|
|
"rustls",
|
|
"socks",
|
|
"stream",
|
|
] }
|
|
node-semver = { version = "2.2.0" }
|
|
pathdiff = { version = "0.2.3" }
|
|
pipe-trait = { version = "0.4.0" }
|
|
pgp = { version = "0.19.0", default-features = false }
|
|
rayon = { version = "1.12.0" }
|
|
rmp-serde = { version = "1.3.0" }
|
|
rusqlite = { version = "0.39.0", features = ["bundled"] }
|
|
same-file = { version = "1.0.6" }
|
|
serde = { version = "1.0.228", features = ["derive"] }
|
|
serde_json = { version = "1.0.150", features = ["preserve_order", "raw_value"] }
|
|
serde-saphyr = { version = "0.0.27" }
|
|
sqlx = { version = "0.8.6", default-features = false, features = ["runtime-tokio-rustls"] }
|
|
# 0.11 removes the LowerHex impl on Output; revisit after upstream/consumers catch up
|
|
sha2 = { version = "0.10.9" }
|
|
smart-default = { version = "0.7.1" }
|
|
split-first-char = { version = "2.0.1" }
|
|
ssri = { version = "9.2.0" }
|
|
strum = { version = "0.28.0", features = ["derive"] }
|
|
sysinfo = { version = "0.39.2" }
|
|
tabled = { version = "0.21" }
|
|
tar = { version = "0.4.46" }
|
|
text-block-macros = { version = "0.2.0" }
|
|
tower = { version = "0.5.3" }
|
|
tower-http = { version = "0.6.11", features = ["compression-gzip", "trace"] }
|
|
tracing = { version = "0.1.44" }
|
|
tracing-subscriber = { version = "0.3.23", features = ["env-filter"] }
|
|
tokio = { version = "1", features = ["rt", "rt-multi-thread", "macros", "fs", "io-util", "net", "signal", "sync"] }
|
|
url = { version = "2.5.8" }
|
|
walkdir = { version = "2.5.0" }
|
|
windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_System_JobObjects", "Win32_System_Threading"] }
|
|
yaml_serde = { version = "0.10.4" }
|
|
yamlpatch = { version = "1.25.2" }
|
|
yamlpath = { version = "1.25.2" }
|
|
wax = { version = "0.7.0" }
|
|
which = { version = "8.0.2" }
|
|
zip = { version = "8", default-features = false, features = ["deflate"] }
|
|
zune-inflate = { version = "0.2.54" }
|
|
|
|
# Dev dependencies
|
|
assert_cmd = { version = "2.2.2" }
|
|
criterion = { version = "0.8.2", features = ["async_tokio"] }
|
|
pretty_assertions = { version = "1.4.1" }
|
|
project-root = { version = "0.2.2" }
|
|
tempfile = { version = "3.27.0" }
|
|
mockito = { version = "1.7.2" }
|
|
|
|
[workspace.metadata.workspaces]
|
|
allow_branch = "main"
|
|
|
|
# Declares the `dylint_lib = "perfectionist"` cfg used by the
|
|
# `cfg_attr(dylint_lib = "perfectionist", feature(register_tool))` /
|
|
# `register_tool(perfectionist)` lines at each pacquet crate's root.
|
|
# Those `cfg_attr`s register the perfectionist tool name under dylint's
|
|
# nightly toolchain (so `#[expect(perfectionist::lint, reason = "...")]`
|
|
# at use sites compiles cleanly without a wrapper); this `check-cfg`
|
|
# entry tells stable `cargo check` that the cfg name is expected even
|
|
# though it's never set off-dylint.
|
|
[workspace.lints.rust]
|
|
unexpected_cfgs = { level = "warn", check-cfg = ['cfg(dylint_lib, values("perfectionist"))'] }
|
|
|
|
[workspace.lints.clippy]
|
|
pedantic = { level = "warn", priority = -1 }
|
|
nursery = { level = "warn", priority = -1 }
|
|
|
|
doc_link_with_quotes = "allow" # false positive: matches markdown link titles
|
|
unreadable_literal = "allow" # false positive: octal file modes
|
|
case_sensitive_file_extension_comparisons = "allow" # extension checks are intentionally case-sensitive
|
|
implicit_hasher = "allow" # only matters across a public API
|
|
unnecessary_debug_formatting = "allow" # keeps the quoted `Path` output
|
|
option_option = "allow" # distinguishes missing from null
|
|
cast_possible_truncation = "allow" # deliberate numeric narrowing
|
|
cast_sign_loss = "allow"
|
|
cast_possible_wrap = "allow"
|
|
cast_precision_loss = "allow"
|
|
missing_errors_doc = "allow" # error enums are self-documenting (#[display] + #[diagnostic(code)]); a # Errors section would just restate them
|
|
missing_panics_doc = "allow" # deferred: refactor away / document / #[expect] each panic before enabling
|
|
too_many_lines = "allow" # pacquet mirrors pnpm's function decomposition
|
|
struct_excessive_bools = "allow" # option structs mirror pnpm's
|
|
fn_params_excessive_bools = "allow" # mirrors pnpm's option parameters
|
|
match_same_arms = "allow" # arms kept explicit to mirror pnpm's switch cases
|
|
unnecessary_wraps = "allow"
|
|
unused_async = "allow" # deferred: audit each async signature (trait/seam-required?) before enabling
|
|
similar_names = "allow" # names ported verbatim from pnpm
|
|
items_after_statements = "allow"
|
|
needless_continue = "allow"
|
|
many_single_char_names = "allow" # perfectionist's single_letter_* lints already cover this with finer per-position control
|
|
|
|
# nursery-group opt-outs (the group is experimental; these lints are either
|
|
# false positives on this code or fight conventions the project keeps on purpose)
|
|
use_self = "allow" # spelling out the concrete type name over Self is left to author discretion
|
|
too_long_first_doc_paragraph = "allow" # doc comments deliberately open with a detailed pnpm-parity summary, not a one-line lede
|
|
missing_const_for_fn = "allow" # const-ness is a forward semver commitment and this nursery lint is noisy / churns as const-eval grows
|
|
option_if_let_else = "allow" # the suggested map_or_else closures read worse than the if-let they replace
|
|
significant_drop_tightening = "allow" # the flagged guards are held deliberately (atomic check-then-act); early-dropping is FP-prone and behavioral
|
|
redundant_pub_crate = "allow" # pub(crate) is kept to document intended visibility even where technically redundant
|
|
derive_partial_eq_without_eq = "allow" # deriving Eq is a forward semver commitment that all fields stay Eq
|
|
branches_sharing_code = "allow" # false-positive-prone: clippy itself flags its own suggestion as needing adjustment
|
|
useless_let_if_seq = "allow" # rewrites large init blocks into an awkward if-as-expression
|
|
single_option_map = "allow" # flags test helpers that exist precisely to dedupe a `.map` over an Option
|
|
iter_with_drain = "allow" # false positive: drain(..) reuses the batch Vec's allocation across loop iterations; into_iter() would consume it
|
|
literal_string_with_formatting_args = "allow" # false positive: `${VAR:-default}` strings are .npmrc / env-replace fixtures, not Rust format args
|
|
collection_is_never_read = "allow" # false positive: the flagged Vec owns sockets to keep them alive, it is never meant to be read
|
|
|
|
# restriction lints opted into individually — not part of any default group or
|
|
# the nursery group, so these lines are what enable them (kept on purpose).
|
|
clone_on_ref_ptr = "warn"
|
|
if_then_some_else_none = "warn"
|
|
mod_module_files = "warn" # forbids mod.rs, enforcing the flat module.rs layout (see CODE_STYLE_GUIDE.md)
|
|
undocumented_unsafe_blocks = "warn"
|
|
unnecessary_safety_comment = "warn"
|
|
todo = "warn"
|
|
unimplemented = "warn"
|
|
exit = "warn"
|
|
infinite_loop = "warn"
|
|
mem_forget = "warn"
|
|
unused_result_ok = "warn"
|
|
pathbuf_init_then_push = "warn"
|
|
string_add = "warn"
|
|
verbose_file_reads = "warn"
|
|
|
|
# cargo-group lints opted into individually (the cargo group is otherwise off).
|
|
negative_feature_names = "warn"
|
|
redundant_feature_names = "warn"
|
|
wildcard_dependencies = "warn"
|
|
|
|
[profile.release]
|
|
opt-level = 3
|
|
lto = "fat"
|
|
codegen-units = 1
|
|
strip = "symbols"
|
|
debug = false
|
|
panic = "abort" # Let it crash and force ourselves to write safe Rust.
|
|
|
|
# Use the `--profile release-debug` flag to show symbols in release mode.
|
|
# e.g. `cargo build --profile release-debug`
|
|
[profile.release-debug]
|
|
inherits = "release"
|
|
strip = false
|
|
debug = true
|