Read Through Cache TTL might be too high, or npme does not watch cached module updates

[necccc]

Hi,

we're using our npme instance as a read through cache, and and the following problem came up today:

• tried to install the latest postcss module, which 6.0.1 at the moment
• the npme instance said undefined (which is also weird as it is)

npm info postcss@6.0.1
npm http request GET https://our.npme.instance/postcss
npm http 304 https://our.npme.instance/postcss
undefined

• querying npm info postcss it said the latest is 5.2.16
• we had to go to the running npme instance and npme remove-package postcss to purge the cached copy
• after this, npme pulled the correct version

Is it possible to set the cache TTL? Or should npme get notified if a cached module is updated at the upstream?

Our config uses https://replicate.npmjs.com as upstream url, the policy is white-list

Side note: this is really inconvenient, as this was one of the main reasons we've switched over npme from sinopia :(