
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@ai-universe/config-utils
Advanced tools
Shared configuration utilities for the AI Universe ecosystem. This package provides centralized configuration management with support for environment variables, GCP Secret Manager, and Firestore-based runtime configuration.
npm install @ai-universe/config-utils
import { ConfigManager, configManager } from '@ai-universe/config-utils';
// Load complete application configuration
const config = await configManager.loadConfig();
console.log('Server port:', config.server.port);
console.log('API keys configured:', Object.keys(config.apiKeys));
import { SecretManager } from '@ai-universe/config-utils';
const secretManager = new SecretManager('your-gcp-project');
const apiKey = await secretManager.getSecret('claude-api-key');
import { runtimeConfigService } from '@ai-universe/config-utils';
// Get current configuration
const runtimeConfig = await runtimeConfigService.getConfig();
console.log('Rate limits:', runtimeConfig.rateLimit);
// Update configuration
await runtimeConfigService.updateConfigValue('features', {
enableCerebras: true,
enableClaude: true
});
import {
MAX_QUESTION_LENGTH,
DEFAULT_TIMEOUT_MS,
MODEL_SPECIFIC_LIMITS,
DEFAULT_SECONDARY_MODELS,
MAX_CLIENT_FINGERPRINT_LENGTH,
estimateTokens
} from '@ai-universe/config-utils';
// Validate input length
if (userInput.length > MAX_QUESTION_LENGTH) {
throw new Error('Input too long');
}
// Estimate tokens
const tokenCount = estimateTokens(userInput.length);
All constants from SecondOpinionConfig.ts are available through the package entry point so downstream consumers no longer need
to deep import from dist/SecondOpinionConfig.js.
After building the package, you can confirm that the published surface matches the TypeScript source by listing the exported keys from Node:
npm run build
npm run check:exports
The check:exports script executes scripts/check-exports.mjs to import the package entry point
and print the sorted export keys. This helper is suitable as a lightweight regression check in CI to ensure the build artifact
matches the TypeScript source.
This package contains 874 LOC extracted from AI Universe backend:
AppConfig - Complete application configuration interfaceRuntimeConfig - Dynamic runtime configuration interfaceConfigSource - Configuration value source trackingPrimaryModelName - Supported AI model names@google-cloud/secret-manager - GCP Secret Manager client@google-cloud/firestore - Firestore clientwinston - LoggingMIT
FAQs
Shared configuration utilities for AI Universe ecosystem
We found that @ai-universe/config-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.