Verdaccio package access expiration possibilities

[maks-io]

What I need to achieve is the following:

• I want to give access to a npm package I have built to various users
• I would like to limit the access based on an expiration logic, on a per-user basis - something like, "you have access for 12 months from now on, afterwards your access expires" (where "12 months" is just an arbitrary timespan of course)

Now, when it comes to the phrasing "your access expires", I imagine these 3 possible scenarios:

1. After those 12 months, the user cannot access my npm package at all
2. After those 12 months, the user cannot access any new versions of my npm package that will be released afterwards, but he/she still can access the versions released before the expiration date
3. Maybe limit the access on a version range basis, for example: the major version of the package that the user could access was ^3.0.0, so he/she will still be able to access minor- and patch-updates even after access expiration. Let's say 3.2.1. was released and the user's access expires. The day after he would still be able to access a newly released version 3.3.0 etc. But in case a version ^4.0.0 will be released, access will not be possible to those versions.

Are any of those scenarios currently possible with Verdaccio?
If no, would anybody be willing to work with me on those topics? I would be eager to help extending its capabilities.