NPM Package Registry 500 Internal Server Error

[podsvirov]

Description

Some troubles with license processing...

Get package from registry.npmjs.org:

wget https://registry.npmjs.org/dev-null/-/dev-null-0.1.1.tgz

a) Publish package above to demo.gitea.com:

$ npm publish dev-null-0.1.1.tgz
npm notice
npm notice 📦  dev-null@0.1.1
npm notice Tarball Contents
npm notice 97B .npmignore
npm notice 48B .travis.yml
npm notice 1.1kB LICENSE
npm notice 773B README.md
npm notice 187B examples/devnull.js
npm notice 137B examples/no-devnull.js
npm notice 486B index.js
npm notice 984B package.json
npm notice 486B test/fixtures/number-readable.js
npm notice 687B test/index.js
npm notice Tarball Details
npm notice name: dev-null
npm notice version: 0.1.1
npm notice filename: dev-null-0.1.1.tgz
npm notice package size: 2.4 kB
npm notice unpacked size: 5.0 kB
npm notice shasum: 5a205ce3c2b2ef77b6238d6ba179eb74c6a0e818
npm notice integrity: sha512-nMNZG0zfMgmdv[...]M9kM6RlawPxEQ==
npm notice total files: 10
npm notice
npm notice Publishing to https://demo.gitea.com/api/packages/podsvirov/npm/ with tag latest and default access
npm error code E500
npm error 500 Internal Server Error - PUT https://demo.gitea.com/api/packages/podsvirov/npm/dev-null - internal server error
npm error A complete log of this run can be found in: ~\AppData\Local\npm-cache\_logs\2025-12-01T20_09_36_052Z-debug-0.log

b) Publish package above to self-hosted gitea instance:

$ npm publish dev-null-0.1.1.tgz
npm notice
npm notice 📦  dev-null@0.1.1
npm notice Tarball Contents
npm notice 97B .npmignore
npm notice 48B .travis.yml
npm notice 1.1kB LICENSE
npm notice 773B README.md
npm notice 187B examples/devnull.js
npm notice 137B examples/no-devnull.js
npm notice 486B index.js
npm notice 984B package.json
npm notice 486B test/fixtures/number-readable.js
npm notice 687B test/index.js
npm notice Tarball Details
npm notice name: dev-null
npm notice version: 0.1.1
npm notice filename: dev-null-0.1.1.tgz
npm notice package size: 2.4 kB
npm notice unpacked size: 5.0 kB
npm notice shasum: 5a205ce3c2b2ef77b6238d6ba179eb74c6a0e818
npm notice integrity: sha512-nMNZG0zfMgmdv[...]M9kM6RlawPxEQ==
npm notice total files: 10
npm notice
npm notice Publishing to https://<my.url>/api/packages/podsvirov/npm/ with tag latest and default access
npm error code E500
npm error 500 Internal Server Error - PUT https://<my.url>/api/packages/podsvirov/npm/dev-null - npm.packageUpload.PackageMetadata: Versions: npm.PackageMetadataVersion.License: ReadString: expects " or n, but found {, error found in #10 byte of ...|license":{"type":"MI|..., bigger context ...|z@gmx.de","url":"http://thlorenz.com"},"license":{"type":"MIT","url":"https://github.com/thlorenz/de|...
npm error A complete log of this run can be found in: ~\AppData\Local\npm-cache\_logs\2025-12-01T19_43_18_249Z-debug-0.log

Gitea Version

1.25.2

Can you reproduce the bug on the Gitea demo site?

Yes

Log Gist

No response

Screenshots

No response

Git Version

2.52.0

Operating System

Ubuntu

How are you running Gitea?

It's being run from docker

Database

SQLite

[wxiaoguang]

NPM metadata license is defined here:

gitea/modules/packages/npm/creator.go

Line 77 in 1e777f9

License string `json:"license,omitempty"`

gitea/modules/packages/npm/metadata.go

Line 15 in 1e777f9

License string `json:"license,omitempty"`

---

Maybe it needs to fix its type, or use some tricks like "composer license" to support different data types:

gitea/modules/packages/composer/metadata.go

Lines 69 to 88 in 1e777f9

	type Licenses []string
	// UnmarshalJSON reads from a string or array
	func (l *Licenses) UnmarshalJSON(data []byte) error {
	switch data[0] {
	case '"':
	var value string
	if err := json.Unmarshal(data, &value); err != nil {
	return err
	}
	*l = Licenses{value}
	case '[':
	values := make([]string, 0, 5)
	if err := json.Unmarshal(data, &values); err != nil {
	return err
	}
	*l = values
	}
	return nil
	}

also cc @KN4CK3R