
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@builtwithjavascript/server-side-config
Advanced tools
Hook useServerSideConfig to more easily load json files with strongly typed configuration models for use in Nuxt, Next, Node, etc on the server side
Hook useServerSideConfig to more easily load JSON files with strongly typed configuration models for use in Node.js environments (including frameworks like Nuxt, Next.js, etc.) on the server side.
TypeScript
This package provides a single hook:
useServerSideConfignpm i -D @builtwithjavascript/server-side-config
Define your Configuration Model: Create a TypeScript interface that defines the structure of your configuration file. Save it in your models directory or a suitable location (e.g., ./your-path-to-your-iconfig-model.ts):
TypeScript
// your-path-to-your-iconfig-model.ts
interface IConfig {
name: string,
marketing: {
title: string
hero: string
},
meta: {
title: string
description: string
}
}
Create your JSON Configuration File: Create a JSON file (e.g., app1.json) that adheres to your defined interface. By default, useServerSideConfig will look for config files within a directory you specify. A common convention is config/config-files/.
Example app1.json:
JSON
{
"name": "for-development",
"marketing": {
"title": "My Awesome App",
"hero": "The best app ever!"
},
"meta": {
"title": "My App Title",
"description": "A description of my awesome app."
}
}
Integrate and Load the Configuration: In your server-side code (e.g., nuxt.config.ts, API routes, Node.js server scripts), import the useServerSideConfig hook and your IConfig interface.
Crucially, you must provide the configFilesDirectoryPath argument. This path should be relative to the root of your project (where your package.json resides, and where your Node.js process is typically started, i.e., process.cwd()).
TypeScript
import { useServerSideConfig } from '@builtwithjavascript/server-side-config'
import type { IConfig } from './your-path-to-your-iconfig-model' // Adjust this path to your model
// Example 1: Using a hardcoded app key (for specific scenarios or testing)
const config = useServerSideConfig<IConfig>('app1', 'config/config-files');
console.log(config.name); // Output: "for-development"
// Example 2: Using an environment variable for the app key (recommended for dynamic environments)
// Assuming your config files are in 'config/config-files/' relative to your project root
const configFilesDir = 'config/config-files';
// In Nuxt, this might be used in nuxt.config.ts for server-side operations
// or in server/api routes.
const instance = useServerSideConfig<IConfig>(process.env.SITE_KEY, configFilesDir);
// Note: The `configFilesDir` parameter MUST be a path that `fs.readFileSync` can resolve
// relative to the current working directory (`process.cwd()`) of your running Node.js process.
// For most Nuxt/Next.js/Node projects, 'config/config-files' will be correct if your
// config files are directly within a 'config/config-files' folder at your project root.
@types/jest@types/nodejsdomprettierts-nodetypescriptvitevitestFAQs
Hook useServerSideConfig to more easily load json files with strongly typed configuration models for use in Nuxt, Next, Node, etc on the server side
We found that @builtwithjavascript/server-side-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.