Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
org.spongepowered:configurate-core
Advanced tools
A simple configuration library for Java applications that can handle a variety of formats and provides a node-based data structure able to handle a wide variety of configuration schemas
Configurate is a simple configuration library for Java applications that provides a node-based representation of data, able to handle a wide variety of configuration formats.
Want to talk to us about Configurate? Join us in the #dev
channel on our Discord or start a thread on our (new!) Discussions page.
The current supported formats are:
The project is split into different modules.
configurate-core
is the base of the library, containing the main APIs used to manipulate configurations. It is generic, and does not depend on any specific format of configuration.
Each distinct configuration format is implemented as a "configuration loader", in a separate module.
A number of loader implementations are provided as standard in this project, however it is possible to implement a custom loader for a new format separately.
The current supported loaders provided by the project are:
configurate-gson
- Implementation for the JSON format, using the Gson library for parsing and generationconfigurate-hocon
- Implementation for the HOCON format, using the lightbend config library for parsing and generationconfigurate-jackson
- Implementation for the JSON format, using the Jackson library for parsing and generationconfigurate-xml
- Implementation for the XML format, using the JAXP library for parsing and generationconfigurate-yaml
- Implementation for the YAML format, using the SnakeYAML library for parsing and generationSome features that don't need tight integration with Configurate itself are provided as separate modules. These are:
configurate-extra-dfu[2-4]
- Integration between Mojang's DataFixerUpper and Configurate's systems.configurate-extra-kotlin
- Extensions to allow Configurate types to use Kotlin features, and support for Kotlin data classes in the object
mapper.configurate-extra-guice
- Allows using a Guice Injector
to create new object instances in the object mapper.If your project uses Maven or Gradle, just add the following to your build scripts.
repositories {
mavenCentral()
}
dependencies {
// Modify this line to target the loader you wish to use.
compile 'org.spongepowered:configurate-hocon:4.0.0'
}
<dependencies>
<dependency>
<groupId>org.spongepowered</groupId>
<!-- Modify this line to target the loader you wish to use. -->
<artifactId>configurate-hocon</artifactId>
<version>4.0.0</version>
</dependency>
</dependencies>
More detailed usage instructions can be found in the Configurate wiki.
The following steps will ensure your project is cloned properly.
git clone https://github.com/SpongePowered/Configurate.git
cd Configurate
Note: If you do not have Gradle 6.8+ installed then use ./gradlew for Unix systems or Git Bash and gradlew.bat for Windows systems in place of any 'gradle' command.
In order to build Configurate you simply need to run the gradle build
command. You can find the compiled JAR files in ./build/libs
(found in
each subproject) labeled similarly to '-x.x.x-SNAPSHOT.jar'.
While the entire project can run on Java 8, the project requires Java 11 to build, and some tests require at least Java 15 to run. Our CI will run these for you if you don't have the latest JDK set up locally.
We love PRs! However, when contributing, here are some things to keep in mind:
FAQs
Unknown package
We found that org.spongepowered:configurate-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.