';
content += '
Available Modules
';
@@ -660,6 +665,9 @@ app.get('/dashboard', async (req, res) => {
startTime: stats.startTime
});
content += stats.taskDetails();
+ if (npmAudit) {
+ content += npmAudit.renderDashboard();
+ }
content += `
Data: ${folders.dataDir()}
`;
content = '
';
@@ -792,6 +800,7 @@ async function startServer() {
stats.markStarted();
serverLog.info(`=== Server running on http://localhost:${PORT} ===`);
});
+ npmAudit.start();
if (modules.packages && config.modules.packages.enabled) {
modules.packages.startInitialCrawler();
}
@@ -819,6 +828,9 @@ async function startServer() {
// Graceful shutdown
process.on('SIGINT', async () => {
serverLog.info('\nShutting down server...');
+ if (npmAudit) {
+ npmAudit.stop();
+ }
// Shutdown all modules
for (const [moduleName, moduleInstance] of Object.entries(modules)) {
diff --git a/tests/registry/openapi.test.js b/tests/registry/openapi.test.js
index 0becc0ee..ef874e0e 100644
--- a/tests/registry/openapi.test.js
+++ b/tests/registry/openapi.test.js
@@ -15,6 +15,7 @@ const { parametersOf, operations, describeSpecBasics, describeRouterAgreement }
// Routes the spec deliberately does not describe, with the reason.
const EXCLUDED = {
'GET /log': 'operational: crawler log',
+ 'GET /software': 'operational: software versions of the registered servers (HTML page)',
'GET /openapi': 'the description itself',
'GET /openapi.json': 'the description itself',
'GET /openapi.yaml': 'the description itself'
diff --git a/tests/registry/registry-footer.test.js b/tests/registry/registry-footer.test.js
new file mode 100644
index 00000000..299fde3c
--- /dev/null
+++ b/tests/registry/registry-footer.test.js
@@ -0,0 +1,39 @@
+// The registry page footer: "last updated ..." only once a crawl has completed
+
+const path = require('path');
+const htmlServer = require('../../library/html-server');
+const RegistryAPI = require('../../registry/api');
+const { ServerRegistries, ServerRegistry, ServerInformation } = require('../../registry/model');
+
+function apiFor(data) {
+ return new RegistryAPI({ getData: () => data });
+}
+
+function footer(stats) {
+ if (!htmlServer.hasTemplate('registry')) {
+ htmlServer.loadTemplate('registry', path.join(__dirname, '../../registry/registry-template.html'));
+ }
+ const html = htmlServer.renderPage('registry', 'Test', '', stats);
+ return html.substring(html.indexOf('Terminology Registry'), html.indexOf('Terminology Registry') + 80);
+}
+
+describe('registry footer', () => {
+ test('before the first crawl', () => {
+ const stats = apiFor(new ServerRegistries()).getStatistics();
+ expect(stats.crawlerStatus).toBe('not yet updated');
+ expect(footer(stats)).toContain('Terminology Registry not yet updated');
+ });
+
+ test('after a crawl', () => {
+ const data = new ServerRegistries();
+ data.lastRun = new Date(Date.now() - 35 * 60 * 1000);
+ const registry = new ServerRegistry();
+ registry.servers.push(new ServerInformation(), new ServerInformation());
+ data.registries.push(registry);
+ const stats = apiFor(data).getStatistics();
+ expect(stats.crawlerStatus).toBe('last updated 35 minutes ago, 2 servers');
+ const text = footer(stats);
+ expect(text).toContain('Terminology Registry last updated 35 minutes ago, 2 servers');
+ expect(text).not.toContain('[%');
+ });
+});
diff --git a/tests/registry/registry-software.test.js b/tests/registry/registry-software.test.js
new file mode 100644
index 00000000..47d8826b
--- /dev/null
+++ b/tests/registry/registry-software.test.js
@@ -0,0 +1,154 @@
+// The registry software page: FHIRsmith release dating, and what the page shows
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { FhirsmithReleases, isFhirsmith, describeAge } = require('../../registry/fhirsmith-releases');
+const { ServerRegistries, ServerRegistry, ServerInformation, ServerVersionInformation } = require('../../registry/model');
+const RegistryModule = require('../../registry/registry');
+
+const NOW = new Date('2026-10-06T00:00:00Z').getTime();
+
+function releases() {
+ const r = new FhirsmithReleases();
+ r.setReleases([
+ { version: 'v0.14.1', date: '2026-09-29T00:00:00Z' },
+ { version: 'v0.14.0', date: '2026-09-27T00:00:00Z' },
+ { version: 'v0.13.4', date: '2026-09-17T00:00:00Z' },
+ { version: 'v0.9.7', date: '2026-06-12T00:00:00Z' },
+ { version: 'v0.15.0-beta', date: '2026-10-01T00:00:00Z' }
+ ], 'test');
+ return r;
+}
+
+describe('FhirsmithReleases', () => {
+ test('pre-releases are not tracked, and the newest release is first', () => {
+ expect(releases().latest().version).toBe('0.14.1');
+ });
+
+ test('the current release', () => {
+ const d = releases().describe('0.14.1', NOW);
+ expect(d.status).toBe('current');
+ expect(d.ageDays).toBe(7);
+ expect(d.behind).toBe(0);
+ });
+
+ test('an old release, with or without a leading v', () => {
+ for (const v of ['0.9.7', 'v0.9.7']) {
+ const d = releases().describe(v, NOW);
+ expect(d.status).toBe('outdated');
+ expect(d.ageDays).toBe(116);
+ expect(d.behind).toBe(3);
+ }
+ });
+
+ test('a snapshot is a development build after the release before it', () => {
+ const d = releases().describe('0.14.2-snapshot', NOW);
+ expect(d.status).toBe('dev');
+ expect(d.release.version).toBe('0.14.1');
+ expect(d.behind).toBe(0);
+ });
+
+ test('a version that is not n.n.n is unknown', () => {
+ expect(releases().describe('', NOW).status).toBe('unknown');
+ expect(releases().describe('1.0', NOW).status).toBe('unknown');
+ });
+
+ test('release dates can be read from a changelog', () => {
+ const file = path.join(os.tmpdir(), `changelog-${process.pid}.md`);
+ fs.writeFileSync(file, '# Changelog\n\n## [0.14.2] - \n\n## [0.14.1] - 2026-09-29\n\n## [v0.13.4] - 2026-09-17\n\n## [v0.11.0] - 2026-mm-dd\n');
+ try {
+ const r = new FhirsmithReleases();
+ r.loadFromChangelog(file);
+ expect(r.releases.map(x => x.version)).toEqual(['0.14.1', '0.13.4']);
+ expect(r.source).toBe('CHANGELOG.md');
+ } finally {
+ fs.unlinkSync(file);
+ }
+ });
+
+ test('the shipped CHANGELOG.md has release dates', () => {
+ const r = new FhirsmithReleases();
+ r.loadFromChangelog();
+ expect(r.releases.length).toBeGreaterThan(10);
+ });
+
+ test('software names and ages', () => {
+ expect(isFhirsmith('FHIRsmith')).toBe(true);
+ expect(isFhirsmith('HAPI FHIR Server')).toBe(false);
+ expect(isFhirsmith(undefined)).toBe(false);
+ expect(describeAge(0)).toBe('today');
+ expect(describeAge(1)).toBe('1 day');
+ expect(describeAge(20)).toBe('2 weeks');
+ expect(describeAge(116)).toBe('3 months');
+ expect(describeAge(800)).toBe('2.2 years');
+ });
+});
+
+describe('model', () => {
+ test('the software version survives a save and load', () => {
+ const v = new ServerVersionInformation();
+ v.software = 'FHIRsmith';
+ v.softwareVersion = '0.9.7';
+ const back = ServerVersionInformation.fromJSON(JSON.parse(JSON.stringify(v.toJSON())));
+ expect(back.softwareVersion).toBe('0.9.7');
+ expect(ServerVersionInformation.fromJSON({}).softwareVersion).toBe('');
+ });
+});
+
+describe('software page', () => {
+ function addServer(registry, name, url, software, softwareVersion, error) {
+ const server = new ServerInformation();
+ server.code = name.toLowerCase();
+ server.name = name;
+ const v = new ServerVersionInformation();
+ v.version = '4.0.1';
+ v.address = url;
+ v.software = software;
+ v.softwareVersion = softwareVersion;
+ v.error = error || '';
+ server.versions.push(v);
+ registry.servers.push(server);
+ }
+
+ function page() {
+ const data = new ServerRegistries();
+ const registry = new ServerRegistry();
+ registry.name = 'Test';
+ addServer(registry, 'Old', 'https://old.example.org/r4', 'FHIRsmith', '0.9.7');
+ addServer(registry, 'Current', 'https://current.example.org/r4', 'FHIRsmith', '0.14.1');
+ addServer(registry, 'Dev', 'https://dev.example.org/r4', 'FHIRsmith', '0.14.2-snapshot');
+ addServer(registry, 'Other', 'https://other.example.org/r4', 'Other
', '6.1', 'HTTP 503');
+ addServer(registry, 'Silent', 'https://silent.example.org/r4', 'unknown', '');
+ data.registries.push(registry);
+
+ const module = new RegistryModule({});
+ module.api = { getData: () => data };
+ module.releases = releases();
+ return module.buildSoftwareContent(NOW);
+ }
+
+ test('lists each server with its software and version', () => {
+ const html = page();
+ expect(html).toContain('https://old.example.org/r4');
+ expect(html).toContain('Other <Server>');
+ expect(html).toContain('6.1');
+ expect(html).toContain('(unreachable)');
+ expect(html).toContain('unknown');
+ expect(html).toContain('current FHIRsmith release is v0.14.1');
+ });
+
+ test('says how old a FHIRsmith release is', () => {
+ const html = page();
+ expect(html).toContain('3 months (3 releases behind)');
+ expect(html).toContain('7 days - current release');
+ expect(html).toContain('development build after v0.14.1');
+ });
+
+ test('does not date software that is not FHIRsmith', () => {
+ const html = page();
+ // find the row by its server name cell (CodeQL flags a substring match on a host name)
+ const otherRow = html.split('').find(r => r.startsWith('| Other | '));
+ expect(otherRow).toContain(' | | ');
+ });
+});
diff --git a/tests/server/npm-audit.test.js b/tests/server/npm-audit.test.js
new file mode 100644
index 00000000..ff2f6670
--- /dev/null
+++ b/tests/server/npm-audit.test.js
@@ -0,0 +1,158 @@
+// The npm advisory self-check (library/npm-audit.js)
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const axios = require('axios');
+const { NpmAudit, describeAgo } = require('../../library/npm-audit');
+
+
+const NOW = new Date('2026-10-06T12:00:00Z').getTime();
+
+function appDir(lock, hiddenLock = true) {
+ const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'npm-audit-'));
+ fs.writeFileSync(path.join(dir, 'package.json'), JSON.stringify({ name: 'fhirsmith', version: '0.13.4' }));
+ if (hiddenLock) {
+ fs.mkdirSync(path.join(dir, 'node_modules'));
+ fs.writeFileSync(path.join(dir, 'node_modules', '.package-lock.json'), JSON.stringify(lock));
+ } else {
+ fs.writeFileSync(path.join(dir, 'package-lock.json'), JSON.stringify(lock));
+ }
+ return dir;
+}
+
+const LOCK = {
+ packages: {
+ '': { name: 'fhirsmith', version: '0.13.4' },
+ 'node_modules/axios': { version: '1.15.2' },
+ 'node_modules/tar': { version: '7.5.1' },
+ 'node_modules/foo/node_modules/tar': { version: '6.2.0' },
+ 'node_modules/jest': { version: '30.0.0', dev: true },
+ 'node_modules/local': { resolved: '../local', link: true },
+ 'node_modules/@scope/pkg': { version: '2.0.0' }
+ }
+};
+
+function stats() {
+ return { addTask: jest.fn(), task: jest.fn(), taskDone: jest.fn(), taskError: jest.fn() };
+}
+
+beforeEach(() => jest.spyOn(axios, 'post'));
+afterEach(() => jest.restoreAllMocks());
+
+describe('collectPackages', () => {
+ test('production packages from the installed lock file, plus fhirsmith itself', () => {
+ const audit = new NpmAudit({}, null, appDir(LOCK));
+ expect(audit.collectPackages()).toEqual({
+ axios: ['1.15.2'],
+ tar: ['6.2.0', '7.5.1'],
+ '@scope/pkg': ['2.0.0'],
+ fhirsmith: ['0.13.4']
+ });
+ });
+
+ test('falls back to package-lock.json', () => {
+ const audit = new NpmAudit({}, null, appDir(LOCK, false));
+ expect(Object.keys(audit.collectPackages())).toContain('axios');
+ });
+
+ test('no lock file at all is an error', () => {
+ const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'npm-audit-'));
+ expect(() => new NpmAudit({}, null, dir).collectPackages()).toThrow('No package-lock.json');
+ });
+});
+
+describe('run', () => {
+ test('a clean result', async () => {
+ axios.post.mockResolvedValue({ data: {} });
+ const s = stats();
+ const audit = new NpmAudit({}, null, appDir(LOCK), s);
+ await audit.run();
+ expect(axios.post.mock.calls[0][0]).toBe('https://registry.npmjs.org/-/npm/v1/security/advisories/bulk');
+ expect(axios.post.mock.calls[0][1].jest).toBeUndefined();
+ expect(audit.findings).toEqual([]);
+ expect(audit.summary()).toBe('no known vulnerabilities');
+ expect(s.taskDone).toHaveBeenCalled();
+ expect(audit.renderBanner()).toBe('');
+ expect(audit.renderDashboard()).toContain('no known vulnerabilities in 4 packages');
+ });
+
+ test('advisories are reported, worst first', async () => {
+ axios.post.mockResolvedValue({ data: {
+ axios: [{ id: 1, severity: 'moderate', title: 'Prototype ', url: 'https://github.com/advisories/GHSA-1', vulnerable_versions: '<1.18.0' }],
+ tar: [{ id: 2, severity: 'critical', title: 'Parse DoS', url: 'https://github.com/advisories/GHSA-2', vulnerable_versions: '<=7.5.18' }]
+ } });
+ const s = stats();
+ const audit = new NpmAudit({}, null, appDir(LOCK), s);
+ await audit.run();
+ expect(audit.findings.map(f => f.name)).toEqual(['tar', 'axios']);
+ expect(audit.findings[0].installed).toEqual(['6.2.0', '7.5.1']);
+ expect(audit.summary()).toBe('2 known vulnerabilities (1 critical, 1 moderate)');
+ expect(s.taskError).toHaveBeenCalledWith('npm audit', audit.summary());
+
+ const banner = audit.renderBanner(NOW);
+ expect(banner).toContain('alert-danger');
+ expect(banner).toContain('2 known vulnerabilities (1 critical, 1 moderate)');
+ expect(banner).toContain('/dashboard#npm-audit');
+
+ const dash = audit.renderDashboard(NOW);
+ expect(dash).toContain('Prototype <pollution>');
+ expect(dash).toContain('Parse DoS');
+ expect(dash).toContain('6.2.0, 7.5.1');
+ });
+
+ test('only low and moderate findings make a warning, not a danger, banner', async () => {
+ axios.post.mockResolvedValue({ data: { axios: [{ severity: 'low', title: 't', url: 'javascript:alert(1)' }] } });
+ const audit = new NpmAudit({}, null, appDir(LOCK));
+ await audit.run();
+ expect(audit.renderBanner()).toContain('alert-warning');
+ expect(audit.renderDashboard()).not.toContain('javascript:');
+ });
+
+ test('a failed check keeps the previous result and says so', async () => {
+ axios.post.mockResolvedValueOnce({ data: {} }).mockRejectedValueOnce(new Error('getaddrinfo ENOTFOUND'));
+ const s = stats();
+ const audit = new NpmAudit({}, null, appDir(LOCK), s);
+ await audit.run();
+ await audit.run();
+ expect(audit.checkedAt).not.toBeNull();
+ expect(s.taskError).toHaveBeenCalledWith('npm audit', 'Could not check: getaddrinfo ENOTFOUND');
+ expect(audit.renderDashboard()).toContain('the latest check failed: getaddrinfo ENOTFOUND');
+ });
+
+ test('a check that has never worked says so on the dashboard and not on the home page', async () => {
+ axios.post.mockRejectedValue(new Error('timeout'));
+ const audit = new NpmAudit({}, null, appDir(LOCK));
+ await audit.run();
+ expect(audit.renderBanner()).toBe('');
+ expect(audit.renderDashboard()).toContain('could not be run: timeout');
+ });
+});
+
+describe('scheduling and config', () => {
+ test('disabled: no task, no timers, and the dashboard says so', () => {
+ const s = stats();
+ const audit = new NpmAudit({ enabled: false }, null, appDir(LOCK), s);
+ audit.start();
+ expect(s.addTask).not.toHaveBeenCalled();
+ expect(audit.timers).toEqual([]);
+ expect(audit.renderDashboard()).toContain('disabled');
+ });
+
+ test('start registers a background task and stop clears the timers', () => {
+ const s = stats();
+ const audit = new NpmAudit({ intervalHours: 6 }, null, appDir(LOCK), s);
+ audit.start();
+ expect(s.addTask).toHaveBeenCalledWith('npm audit', '6 hr');
+ expect(audit.timers.length).toBe(2);
+ audit.stop();
+ expect(audit.timers).toEqual([]);
+ });
+
+ test('describeAgo', () => {
+ expect(describeAgo(NOW, NOW)).toBe('just now');
+ expect(describeAgo(NOW - 5 * 60000, NOW)).toBe('5 minutes ago');
+ expect(describeAgo(NOW - 3 * 3600000, NOW)).toBe('3 hours ago');
+ expect(describeAgo(NOW - 72 * 3600000, NOW)).toBe('3 days ago');
+ });
+});
FHIR © HL7.org 2011+. |
FHIRsmith [%ver%] © HealthIntersections.com.au 2023+ |
- Package Registry last updated as of [%crawler-date%] | [%total-packages%] packages |
+ Package Registry [%crawler-status%] | [%total-packages%] packages |
([%ms%] ms)
[%sponsorMessage%]
diff --git a/packages/packages.js b/packages/packages.js
index 322a4609..002def94 100644
--- a/packages/packages.js
+++ b/packages/packages.js
@@ -14,7 +14,7 @@ const htmlServer = require('../library/html-server');
const folders = require('../library/folder-setup');
const escape = require('escape-html');
const Logger = require('../library/logger');
-const {validateParameter} = require("../library/utilities");
+const {validateParameter, Utilities} = require("../library/utilities");
const {describeCron} = require("../library/cron-utilities");
const {tokenMatches, tokenConfigured} = require("../library/request-token");
const pckLog = Logger.getInstance().child({ module: 'packages' });
@@ -481,8 +481,11 @@ class PackagesModule {
// Get counts from database
const tableCounts = await this.getDatabaseTableCounts();
+ // the page footer: the last crawl this run, else when the database was last written
+ const updated = this.lastRunTime || dbAge.lastModified;
return {
downloadDate: downloadDate,
+ crawlerStatus: updated ? `last updated ${Utilities.describeAgo(updated)}` : 'not yet updated',
totalResources: 0, // Packages don't track individual resources
totalPackages: tableCounts.packages || 0,
totalVersions: tableCounts.packageVersions || 0,
diff --git a/registry/api.js b/registry/api.js
index c937486c..4ba83fa7 100644
--- a/registry/api.js
+++ b/registry/api.js
@@ -2,6 +2,7 @@
const { ServerRegistryUtilities } = require('./model');
const escape = require('escape-html');
+const { Utilities } = require('../library/utilities');
const RELEASE_VERSIONS = {
R2: '1.0',
@@ -286,6 +287,10 @@ class RegistryAPI {
return {
lastRun: data.lastRun,
+ // the page footer: nothing to report until the first crawl has finished
+ crawlerStatus: data.lastRun ?
+ `last updated ${Utilities.describeAgo(data.lastRun)}, ${totalServers} server${totalServers === 1 ? '' : 's'}` :
+ 'not yet updated',
outcome: data.outcome,
registryCount: data.registries.length,
serverCount: totalServers,
diff --git a/registry/crawler.js b/registry/crawler.js
index 846ee3e5..c2ec2cd1 100644
--- a/registry/crawler.js
+++ b/registry/crawler.js
@@ -333,11 +333,33 @@ class RegistryCrawler {
this.addLogEntry('error', `Server ${version.address}: Error after ${elapsed}ms: ${error.message}`);
version.error = error.message;
version.lastTat = `${elapsed}ms`;
+ this.carryForwardSoftware(version);
}
return version;
}
+ /**
+ * A server that can't be reached this time is still running whatever it was running
+ * last time we saw it - keep that, so the software page doesn't lose track of it
+ */
+ carryForwardSoftware(version) {
+ if (version.software && version.software !== 'unknown') {
+ return;
+ }
+ for (const registry of (this.currentData && this.currentData.registries) || []) {
+ for (const server of registry.servers || []) {
+ for (const prev of server.versions || []) {
+ if (prev.address === version.address && prev.software) {
+ version.software = prev.software;
+ version.softwareVersion = prev.softwareVersion || '';
+ return;
+ }
+ }
+ }
+ }
+ }
+
/**
* Process an R3 server
*/
@@ -348,6 +370,7 @@ class RegistryCrawler {
version.version = capability.fhirVersion || '3.0.2';
version.software = capability.software ? capability.software.name : "unknown";
+ version.softwareVersion = capability.software && capability.software.version ? String(capability.software.version) : '';
// Get terminology capabilities (R3 uses Parameters resource)
try {
@@ -392,6 +415,7 @@ class RegistryCrawler {
version.version = capability.fhirVersion || defVersion;
version.software = capability.software ? capability.software.name : "unknown";
+ version.softwareVersion = capability.software && capability.software.version ? String(capability.software.version) : '';
let set = new Set();
diff --git a/registry/fhirsmith-releases.js b/registry/fhirsmith-releases.js
new file mode 100644
index 00000000..bbd470ab
--- /dev/null
+++ b/registry/fhirsmith-releases.js
@@ -0,0 +1,170 @@
+// registry/fhirsmith-releases.js
+// The list of FHIRsmith releases and their dates, so the registry can say how old the
+// FHIRsmith version a registered server reports is.
+//
+// The list comes from the GitHub releases API, refreshed with each crawl. Until that
+// succeeds (or if it can't be reached), the dated headings in this server's own
+// CHANGELOG.md are used instead - those only go up to this server's own version.
+
+const fs = require('fs');
+const path = require('path');
+const axios = require('axios');
+
+const DEFAULT_RELEASES_URL = 'https://api.github.com/repos/HealthIntersections/FHIRsmith/releases';
+const DAY_MS = 24 * 60 * 60 * 1000;
+
+// "v0.14.1" -> [0, 14, 1]; anything that isn't n.n.n (optionally with a -suffix) -> null
+function parseVersion(v) {
+ const m = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(String(v || '').trim());
+ if (!m) {
+ return null;
+ }
+ return { parts: [Number(m[1]), Number(m[2]), Number(m[3])], suffix: m[4] || '' };
+}
+
+function compareParts(a, b) {
+ for (let i = 0; i < 3; i++) {
+ if (a[i] !== b[i]) {
+ return a[i] - b[i];
+ }
+ }
+ return 0;
+}
+
+function isFhirsmith(softwareName) {
+ return /fhirsmith/i.test(softwareName || '');
+}
+
+class FhirsmithReleases {
+ constructor(config = {}, logger = null) {
+ this.url = config.releasesUrl || DEFAULT_RELEASES_URL;
+ this.timeout = config.timeout || 30000;
+ this.userAgent = config.userAgent || 'FHIRRegistryServer/1.0';
+ this.logger = logger;
+ this.releases = []; // [{version: '0.14.1', parts: [0,14,1], date: Date}], newest first
+ this.source = 'none';
+ this.lastRefresh = null;
+ }
+
+ setReleases(list, source) {
+ const seen = new Set();
+ const releases = [];
+ for (const r of list) {
+ const pv = parseVersion(r.version);
+ const date = r.date instanceof Date ? r.date : new Date(r.date);
+ // a release is n.n.n - pre-release suffixes are not tracked
+ if (!pv || pv.suffix || isNaN(date.getTime())) {
+ continue;
+ }
+ const key = pv.parts.join('.');
+ if (!seen.has(key)) {
+ seen.add(key);
+ releases.push({ version: key, parts: pv.parts, date });
+ }
+ }
+ releases.sort((a, b) => compareParts(b.parts, a.parts));
+ this.releases = releases;
+ this.source = source;
+ }
+
+ /**
+ * Read the dated release headings from a CHANGELOG.md - "## [v0.13.4] - 2026-09-17"
+ */
+ loadFromChangelog(changelogPath = path.join(__dirname, '..', 'CHANGELOG.md')) {
+ try {
+ const text = fs.readFileSync(changelogPath, 'utf8');
+ const list = [];
+ const re = /^##\s*\[v?(\d+\.\d+\.\d+)\]\s*-\s*(\d{4}-\d{2}-\d{2})\s*$/gm;
+ let m;
+ while ((m = re.exec(text)) !== null) {
+ list.push({ version: m[1], date: new Date(m[2] + 'T00:00:00Z') });
+ }
+ this.setReleases(list, 'CHANGELOG.md');
+ } catch (error) {
+ if (this.logger) {
+ this.logger.warn('Could not read FHIRsmith release dates from CHANGELOG.md: ' + error.message);
+ }
+ }
+ }
+
+ /**
+ * Fetch the release list from GitHub. On failure the current list is kept.
+ */
+ async refresh() {
+ try {
+ const list = [];
+ for (let page = 1; page <= 10; page++) {
+ const response = await axios.get(`${this.url}?per_page=100&page=${page}`, {
+ timeout: this.timeout,
+ headers: { 'Accept': 'application/vnd.github+json', 'User-Agent': this.userAgent }
+ });
+ const batch = Array.isArray(response.data) ? response.data : [];
+ for (const r of batch) {
+ if (!r.draft && !r.prerelease && r.tag_name && r.published_at) {
+ list.push({ version: r.tag_name, date: r.published_at });
+ }
+ }
+ if (batch.length < 100) {
+ break;
+ }
+ }
+ if (list.length > 0) {
+ this.setReleases(list, 'GitHub');
+ this.lastRefresh = new Date();
+ }
+ } catch (error) {
+ if (this.logger) {
+ this.logger.warn('Could not fetch FHIRsmith releases from GitHub: ' + error.message);
+ }
+ }
+ }
+
+ latest() {
+ return this.releases.length > 0 ? this.releases[0] : null;
+ }
+
+ /**
+ * How a reported FHIRsmith version stands against the releases:
+ * status: 'current' | 'outdated' | 'dev' (a build between/after releases) | 'unknown'
+ * release: the release it is (or, for 'dev', the most recent release before it)
+ * ageDays: days since that release came out ('current'/'outdated' only)
+ * behind: how many releases have come out since
+ */
+ describe(reportedVersion, now = Date.now()) {
+ const pv = parseVersion(reportedVersion);
+ if (!pv || this.releases.length === 0) {
+ return { status: 'unknown' };
+ }
+ const behind = this.releases.filter(r => compareParts(r.parts, pv.parts) > 0).length;
+ const exact = !pv.suffix ? this.releases.find(r => compareParts(r.parts, pv.parts) === 0) : null;
+ if (exact) {
+ return {
+ status: behind === 0 ? 'current' : 'outdated',
+ release: exact,
+ ageDays: Math.max(0, Math.floor((now - exact.date.getTime()) / DAY_MS)),
+ behind
+ };
+ }
+ // a snapshot (0.14.2-snapshot), or a version we have no release for
+ const base = this.releases.find(r => compareParts(r.parts, pv.parts) < 0) || null;
+ return { status: 'dev', release: base, behind };
+ }
+}
+
+function describeAge(days) {
+ if (days < 1) {
+ return 'today';
+ }
+ if (days < 14) {
+ return `${days} day${days === 1 ? '' : 's'}`;
+ }
+ if (days < 60) {
+ return `${Math.floor(days / 7)} weeks`;
+ }
+ if (days < 730) {
+ return `${Math.floor(days / 30.44)} months`;
+ }
+ return `${(days / 365.25).toFixed(1)} years`;
+}
+
+module.exports = { FhirsmithReleases, isFhirsmith, parseVersion, describeAge };
diff --git a/registry/model.js b/registry/model.js
index d26441fc..d06d9531 100644
--- a/registry/model.js
+++ b/registry/model.js
@@ -11,6 +11,7 @@ class ServerVersionInformation {
this.lastSuccess = null; // Date object
this.lastTat = '';
this.software = ''; // what software is running
+ this.softwareVersion = ''; // CapabilityStatement.software.version, if the server reports one
this.codeSystems = []; // Array of strings (sorted, unique)
this.valueSets = []; // Array of strings (sorted, unique)
}
@@ -58,6 +59,7 @@ class ServerVersionInformation {
lastTat: this.lastTat,
terminologies: this.codeSystems,
software: this.software,
+ 'software-version': this.softwareVersion,
valuesets: this.valueSets
};
}
@@ -71,6 +73,7 @@ class ServerVersionInformation {
instance.lastSuccess = json['last-success'] ? new Date(json['last-success']) : null;
instance.lastTat = json.lastTat || '';
instance.software = json.software;
+ instance.softwareVersion = json['software-version'] || '';
instance.codeSystems = json.terminologies || [];
instance.valueSets = json.valuesets || [];
return instance;
diff --git a/registry/registry-template.html b/registry/registry-template.html
index 8e0e7c72..3bffc017 100644
--- a/registry/registry-template.html
+++ b/registry/registry-template.html
@@ -60,6 +60,7 @@
Server Home |
Registry Home |
Resolve |
+ Software |
Crawler Log |
API
@@ -94,7 +95,7 @@