server.ts

import { IncomingMessage, ServerResponse } from 'http';
import { parse } from 'url';
import { mimeType, cacheControl } from './util/backend/lookup';
import { renderPage } from './pages/_document';
import { pages, versionUnknown } from './util/constants';
import { getPkgDetails } from './page-props/common';
import { getApiResponseSize, getBadgeSvg } from './util/badge';
import { parsePackageString } from './util/npm-parser';
import semver from 'semver';
import { fetchManifest } from './util/npm-api';
import { NotFoundError } from './util/not-found-error';
import type { ApiResponseV1, ApiResponseV2, PackageJson } from './types';

const { TMPDIR = '/tmp', GA_ID = '', NODE_ENV } = process.env;
process.env.HOME = TMPDIR;

delete process.env.AWS_ACCESS_KEY_ID;
delete process.env.AWS_SECRET_KEY;
delete process.env.AWS_SECRET_ACCESS_KEY;
delete process.env.AWS_SESSION_TOKEN;

const isProd = NODE_ENV === 'production';
console.log('NODE_ENV: ' + NODE_ENV);
console.log('isProd: ', isProd);
console.log('TMPDIR: ', TMPDIR);
console.log('HOME: ', process.env.HOME);
console.log('AWS_SECRET_ACCESS_KEY: ', process.env.AWS_SECRET_ACCESS_KEY);

let botCount = 0;

export async function handler(req: IncomingMessage, res: ServerResponse) {
    let { method, url, headers } = req;
    const userAgent = headers['user-agent'] || '';
    console.log(`${method} ${headers.host}${url}`);
    console.log(`user-agent: ${userAgent}`);
    if (
        !userAgent ||
        userAgent === 'node' ||
        userAgent.startsWith('axios') ||
        userAgent.startsWith('got')
    ) {
        botCount++;
        if (botCount % 10 === 0) {
            res.statusCode = 429;
            res.end(
                'Too many requests from unknown user-agent. See https://github.com/styfle/packagephobia/blob/main/API.md',
            );
            return;
        }
    }
    let { pathname = '/', query = {} } = parse(url || '', true);
    if (!pathname || pathname === '/') {
        pathname = pages.index;
    }
    const force = query.force === '1';
    try {
        if (pathname === pages.badge) {
            const parsed = parsePackageString(query.p as string);
            let manifest;
            try {
                manifest = await fetchManifest(parsed.name);
            } catch (err) {
                if (err instanceof NotFoundError) manifest = null;
                else throw err;
            }
            const { pkgSize, cacheResult } = await getPkgDetails(
                manifest,
                parsed.name,
                parsed.version,
                force,
                TMPDIR,
            );
            res.setHeader('Content-Type', mimeType('*.svg'));
            res.setHeader('Cache-Control', cacheControl(isProd, cacheResult ? 7 : 0));
            res.end(getBadgeSvg(pkgSize));
        } else if (pathname === pages.apiv1 || pathname === pages.apiv2) {
            const parsed = parsePackageString(query.p as string);
            const manifest = await fetchManifest(parsed.name);
            const { pkgSize, cacheResult } = await getPkgDetails(
                manifest,
                parsed.name,
                parsed.version,
                force,
                TMPDIR,
            );
            const { publishSize, installSize, name, version, publishFiles, installFiles } = pkgSize;
            let result: ApiResponseV1 | ApiResponseV2;
            if (pathname === pages.apiv1) {
                result = { publishSize, installSize };
            } else {
                const publish = getApiResponseSize(publishSize, publishFiles);
                const install = getApiResponseSize(installSize, installFiles);
                result = { name, version, publish, install };
            }
            res.statusCode = version === versionUnknown ? 404 : 200;
            res.setHeader('Content-Type', mimeType(pathname));
            res.setHeader('Cache-Control', cacheControl(isProd, cacheResult ? 7 : 0));
            res.end(JSON.stringify(result));
        } else if (pathname === pages.scanResults) {
            let data: Buffer[] = [];
            req.on('data', chunk => data.push(chunk));
            req.on('end', () => {
                try {
                    const [packageString = '{}'] = data.toString().match(/{[\s\S]+}/) || [];
                    const packageData: PackageJson = JSON.parse(packageString);
                    const queryString = Object.entries(packageData.dependencies)
                        .map(([name, version]) => {
                            const exactVersion = semver.coerce(version);
                            return exactVersion ? `${name}@${exactVersion}` : name;
                        })
                        .join(',');
                    res.writeHead(307, { Location: `/result?p=${queryString}` });
                    return res.end();
                } catch (e) {
                    res.setHeader('Content-Type', mimeType('*.html'));
                    return renderPage(res, pages.parseFailure, query, TMPDIR, GA_ID);
                }
            });
        } else {
            const isIndex = pathname === pages.index;
            const hasVersion =
                typeof query.p === 'string' && parsePackageString(query.p).version !== null;
            res.setHeader('Content-Type', mimeType('*.html'));
            res.setHeader('Cache-Control', cacheControl(isProd, isIndex || hasVersion ? 7 : 0));
            renderPage(res, pathname, query, TMPDIR, GA_ID);
        }
    } catch (e) {
        console.error(e);
        res.setHeader('Content-Type', mimeType('500.txt'));
        res.setHeader('Cache-Control', cacheControl(isProd, 0));
        res.statusCode = 500;
        res.end('500 Internal Error');
    }
}