@incanta/config - npm Package Compare versions

Comparing version 0.1.1 to 0.1.2

lib/config.js

@@ -18,3 +18,7 @@ "use strict";
         this.customValues = {};
-        this.configDir = options?.configDir || path_1.default.join(process.cwd(), "config");
+        this.configDir =
+            options?.configDir ||
+                (process.env["NODE_CONFIG_DIR"] &&
+                    path_1.default.relative(process.cwd(), process.env["NODE_CONFIG_DIR"])) ||
+                path_1.default.join(process.cwd(), "config");
         const defaultValues = loader_1.Loader.load(path_1.default.join(this.configDir, "default"));
@@ -21,0 +25,0 @@ let envValues = {};

package.json

 {
   "name": "@incanta/config",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "main": "lib/index.js",
@@ -5,0 +5,0 @@ "exports": {

src/config.ts

@@ -21,3 +21,7 @@ import merge from "lodash.merge";
 
-    this.configDir = options?.configDir || path.join(process.cwd(), "config");
+    this.configDir =
+      options?.configDir ||
+      (process.env["NODE_CONFIG_DIR"] &&
+        path.relative(process.cwd(), process.env["NODE_CONFIG_DIR"])) ||
+      path.join(process.cwd(), "config");
 
@@ -24,0 +28,0 @@ const defaultValues = Loader.load(path.join(this.configDir, "default"));

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22924

increased by1.96%

Lines of code

394

increased by2.07%

Worsened metrics

Number of low supply chain risk alerts

6

increased by50%

No dependency changes