Nexus

Universal package registry and CDN - WinGet registry, npm, GitHub, JSR, cdnjs, WordPress, and many more package registries

Features

• 🪟 WinGet API - Complete Windows Package Manager REST API with search, package metadata, and version information
• 📦 Universal CDN - Access packages from npm, GitHub, JSR, cdnjs, WordPress, and more
• 🔒 SRI Support - Built-in Subresource Integrity (SHA-256) for secure CDN resource loading
• 📚 OpenAPI Documentation - Interactive API docs available at /_docs/scalar, /_docs/swagger, and /_docs/openapi.json

Usage

CDN Endpoints

npm Packages

Access any npm package and its files:

# Get package entry file
curl https://nexus.funish.net/cdn/npm/react

# Get specific version
curl https://nexus.funish.net/cdn/npm/react@18

# Get specific file
curl https://nexus.funish.net/cdn/npm/react@18/index.js

# Get package metadata
curl https://nexus.funish.net/cdn/npm/react@18/package.json

# Get bundled ESM module
curl https://nexus.funish.net/cdn/npm/d3@7/+esm

Version resolution:

• react → latest version
• react@18 → latest 18.x.x version
• react@18.3 → latest 18.3.x version
• react@18.3.1 → exact version

ESM Bundling (+esm):

The +esm endpoint bundles npm packages into a single ESM module with external dependencies resolved to CDN paths:

<script type="module">
  import { scaleLinear } from "https://nexus.funish.net/cdn/npm/d3@7/+esm";
</script>

External dependencies are automatically converted to CDN URLs (e.g., d3-array → /cdn/npm/d3-array@3/+esm).

GitHub Releases

Access files from GitHub repository releases:

# Get repository files (uses main branch by default)
curl https://nexus.funish.net/cdn/gh/vuejs/core

# Get specific tag/version
curl https://nexus.funish.net/cdn/gh/vuejs/core@v3.4.0

# Get specific file
curl https://nexus.funish.net/cdn/gh/vuejs/core@v3.4.0/package.json

JSR (JavaScript Registry)

Access JSR packages for Deno and Node.js:

# Get package entry file
curl https://nexus.funish.net/cdn/jsr/@std/path

# Get specific version
curl https://nexus.funish.net/cdn/jsr/@std/path@1.1.4

# Get specific file
curl https://nexus.funish.net/cdn/jsr/@std/path@1.1.4/mod.ts

cdnjs Libraries

Access libraries from cdnjs:

# @ format (recommended)
curl https://nexus.funish.net/cdn/cdnjs/jquery@3.7.1/jquery.min.js

# Original format
curl https://nexus.funish.net/cdn/cdnjs/jquery/3.7.1/jquery.min.js

# List all files
curl https://nexus.funish.net/cdn/cdnjs/jquery@3.7.1/

WordPress Plugins & Themes

Access WordPress resources from SVN:

# Plugin from tags
curl https://nexus.funish.net/cdn/wp/plugins/wp-slimstat/tags/4.6.5/wp-slimstat.js

# Plugin from trunk (latest development)
curl https://nexus.funish.net/cdn/wp/plugins/wp-slimstat/trunk/wp-slimstat.js

# Theme
curl https://nexus.funish.net/cdn/wp/themes/twentytwentyfour/1.0/style.css

Subresource Integrity (SRI)

All CDN endpoints (npm, GitHub, JSR) include SHA-256 integrity hashes for secure resource loading. The browser will verify that the file hasn't been tampered with during delivery.

Get Integrity Hashes

# Get package listing with integrity hashes
curl https://nexus.funish.net/cdn/npm/react@18.3.1/

# Response includes integrity for each file:
{
  "name": "react",
  "version": "18.3.1",
  "files": [
    {
      "name": "index.js",
      "size": 12345,
      "integrity": "sha256-ABC123..."
    }
  ]
}

Use SRI in HTML

<!-- npm package -->
<script
  src="https://nexus.funish.net/cdn/npm/react@18.3.1/index.js"
  integrity="sha256-ABC123..."
  crossorigin="anonymous"
></script>

<!-- GitHub release -->
<script
  src="https://nexus.funish.net/cdn/gh/vuejs/core@v3.4.0/dist/vue.global.js"
  integrity="sha256-XYZ789..."
  crossorigin="anonymous"
></script>

<!-- JSR package -->
<script
  type="module"
  src="https://nexus.funish.net/cdn/jsr/@std/path@1.0.0/mod.ts"
  integrity="sha256-DEF456..."
  crossorigin="anonymous"
></script>

Important Notes:

• ✅ Use exact versions (e.g., react@18.3.1) - SRI is only provided for complete versions
• ✅ Include crossorigin="anonymous" - Required for cross-origin SRI verification
• ❌ Avoid version ranges (e.g., react@18) - Hash may change as versions update

WinGet API

Complete Windows Package Manager REST API, compliant with WinGet RESTSource API 1.9.0 specification.

Available endpoints:

# List all packages
GET /api/winget/packages

# Get package details
GET /api/winget/packages/{id}

# Search packages
GET /api/winget/manifestSearch?query={query}&matchType={CaseInsensitive|Exact|Fuzzy}

# Get package versions
GET /api/winget/packages/{id}/versions

# Get specific version
GET /api/winget/packages/{id}/versions/{version}

# Get all locales for a version
GET /api/winget/packages/{id}/versions/{version}/locales

# Get specific locale
GET /api/winget/packages/{id}/versions/{version}/locales/{locale}

# Get all installers for a version
GET /api/winget/packages/{id}/versions/{version}/installers

# Get specific installer
GET /api/winget/packages/{id}/versions/{version}/installers/{installer}

Example:

curl https://nexus.funish.net/api/winget/packages/Microsoft.VisualStudioCode/versions

API Documentation

Interactive API documentation is available:

• Scalar UI: https://nexus.funish.net/_docs/scalar
• Swagger UI: https://nexus.funish.net/_docs/swagger
• OpenAPI Spec: https://nexus.funish.net/_docs/openapi.json

Deployment

Prerequisites

• Bun 1+ runtime

Installation

# Install dependencies
bun install

# Build the application
bun run build

Development

# Start development server
bun run dev

The application will be available at http://localhost:3000

Production Deployment

# Build the application
bun run build

# Start production server
bun run preview

Docker Deployment

Option 1: Using Docker Compose (Recommended)

# Copy environment variables
cp .env.example .env

# Edit .env file to configure your services
# nano .env

# Start the application
docker-compose up -d

# View logs
docker-compose logs -f nexus

# Stop the application
docker-compose down

The application will be available at http://localhost:3000

Option 2: Using Docker Run

# Pull the official image
docker pull funish/nexus:latest

# Run container
docker run -d \
  --name nexus \
  -p 3000:3000 \
  --env-file .env \
  --restart unless-stopped \
  funish/nexus:latest

# View logs
docker logs -f nexus

# Stop the container
docker stop nexus
docker rm nexus

Option 3: Build from Source

# Build Docker image
docker build -t nexus .

# Run container
docker run -d \
  --name nexus \
  -p 3000:3000 \
  --env-file .env \
  --restart unless-stopped \
  nexus

Support & Community

• 📫 Report Issues

License

This project is licensed under the MIT License - see the LICENSE file for details.

---

Built with ❤️ by Funish